Out of Bounds Write Vulnerability in Android Products by Google
CVE-2026-55286

7.8HIGH

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
5 October 2026

What is CVE-2026-55286?

A vulnerability exists in the stpropnci_process function of stpropnci.cc, where an incorrect bounds check may lead to an out of bounds write. This flaw can allow an attacker to gain local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for this vulnerability to be exploited, potentially exposing sensitive information and system integrity.

Affected Version(s)

Android 17

References

https://source.android.com/docs/security/bulletin/2026/20...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.