CVE-2026-55346

In km_read_data_response of keymaster.c, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

• CWE-119

• https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01

Published

Nov 10, 2026

Last Modified

Nov 11, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55331In IP Multimedia Subsystem, there is a possible out-of-bound…8.8
• CVE-2026-55332In multiple locations, there is a possible out-of-bounds wri…6.7
• CVE-2026-55335In multiple locations, there is a possible use-after-free du…9.8
• CVE-2026-5534A vulnerability was identified in itsourcecode Online Enroll…7.3
• CVE-2026-55343In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible…8
• CVE-2026-55344In TzSharedMemory of TzSharedMemory.c, there is a possible H…7.8
• CVE-2026-55348In GetSharedMemory of trusty_shared_memory_manager.cc, there…2.3
• CVE-2026-5535A security flaw has been discovered in FedML-AI FedML up to …5.4
• CVE-2026-55351In VPU, there is a possible out-of-bounds write due to an in…7.8
• CVE-2026-55359In multiple locations, there is a possible permission bypass…7.8
• CVE-2026-5536A weakness has been identified in FedML-AI FedML up to 0.8.9…7.3
• CVE-2026-55360In secure_transport_usecase_handshake of secure_transport.c,…8.4