CVE-2026-55348

LowCVSS 2.3/10Last modified Nov 13, 2026

Description

In GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out of bounds read via sign extension of a negative buffer size due to an improper or implicit cast. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 2.3/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-125 CWE-704

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Nov 10, 2026
Last modified: Nov 13, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-55355.4A security flaw has been discovered in FedML-AI FedML up to 0.8.9. This impacts an unknown function of the file FileUtils.java of the compon CVE-2026-553517.8In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additio CVE-2026-553597.8In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privil CVE-2026-55367.3A weakness has been identified in FedML-AI FedML up to 0.8.9. Affected is the function sendMessage of the file grpc_server.py of the compone CVE-2026-553608.4In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transport channel encryption due to a CVE-2026-553629.8In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no a CVE-2026-553656.7In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalat CVE-2026-553669.8In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation CVE-2026-553677.5h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce114506a073505fd389db16ad2ba4e582a0, a client could CVE-2026-553688.1h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-l CVE-2026-553696.5Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the email field from the CVE-2026-55376.3A security vulnerability has been detected in halex CourseSEL up to 1.1.0. Affected by this vulnerability is the function check_sel of the f