Out-of-Bounds Write Vulnerability in libufdt Sysdeps by Android

CVE-2026-55266

What is CVE-2026-55266?

A vulnerability exists in the qsort function of libufdt_sysdeps_vendor.c, where an out-of-bounds write may occur due to resource exhaustion. This issue allows for local privilege escalation without requiring additional execution privileges. Notably, user interaction is not necessary for the exploitation of this flaw, potentially enabling unauthorized elevation of privileges by an attacker with access to the system.

References