AI and data stack advisories

Severe, 6 weeks1490Projects326

1490 severe, 6 weeks · 326 projects

GoogleCVE-2026-55280

Google Android: out-of-bounds write

Google

CVE-2026-55280 · Published Oct 5, 2026 · updated Nov 5, 2026

High8.8
No fix yet
Google advisory

In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected versions

PackageAffectedFixed in
Android
Product
<= 17No fix yet
<= 16-qpr2No fix yet
<= 16No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-457

More Google advisories

All Google