Out-of-Bounds Heap Read in ResourceTypes.cpp for Android Devices

CVE-2026-55290

What is CVE-2026-55290?

An out-of-bounds heap read vulnerability exists in the ResourceTypes.cpp file in Android, where a missing bounds check could allow for local information disclosure. This vulnerability can be exploited without requiring additional execution privileges or user interaction, posing a significant risk to the confidentiality of sensitive data on affected Android devices. System administrators and users should be aware of this issue to protect their data from potential exploitation.

References