CVE-2026-55317

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Write in printf.c Local Privilege Escalation

Publication date: 2026-09-15

Last updated on: 2026-09-21

Assigner: Google Devices

Description

In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-21

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-55317

EUVD

EUVD-2026-78945

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds write issue in the printf function of printf.c. It occurs due to improper input validation, which could allow an attacker to write data beyond the intended memory boundaries. Exploitation requires system execution privileges and could lead to local privilege escalation.

Impact Analysis

If exploited, this vulnerability could allow an attacker with system privileges to execute arbitrary code or escalate their privileges on the affected system. This may lead to unauthorized access, data theft, or system compromise. User interaction is not required for exploitation.

Mitigation Strategies

Apply the latest security patches or updates from the vendor for the affected printf implementation. Monitor official advisories for patches and test updates in a controlled environment before deployment.

Hi! I’m here to help you understand CVE-2026-55317. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70