CVE-2026-55277

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-55277
In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

8.0 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://source.android.com/docs/security/bulletin/2026/2026-09-01 Vendor Advisory Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:google:android:16.0:qpr2:*:*:*:*:*:*
cpe:2.3:o:google:android:17.0:-:*:*:*:*:*:*
History

25 Sep 2026, 13:11

Type Values Removed Values Added
First Time Google
Google android
References () https://source.android.com/docs/security/bulletin/2026/2026-09-01 - () https://source.android.com/docs/security/bulletin/2026/2026-09-01 - Vendor Advisory, Patch
CPE cpe:2.3:o:google:android:16.0:qpr2:*:*:*:*:*:*
cpe:2.3:o:google:android:17.0:-:*:*:*:*:*:*
Information

Published : 2026-09-08 19:18

Updated : 2026-09-25 13:11

NVD link : CVE-2026-55277

Mitre link : CVE-2026-55277

CVE.ORG link : CVE-2026-55277

JSON object : View

Products Affected

google

  • android
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')