CVE-2026-55331

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Write in IP Multimedia Subsystem

Publication date: 2026-09-15

Last updated on: 2026-09-21

Assigner: Google Devices

Description

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-21

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-55331

EUVD

EUVD-2026-78948

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in the IP Multimedia Subsystem caused by incorrect bounds checking. It allows remote code execution without needing additional privileges or user interaction.

Impact Analysis

An attacker could exploit this to execute arbitrary code on affected systems, potentially gaining control over services or data. Since no user interaction is required, exploitation could happen silently.

Compliance Impact

This vulnerability could lead to remote code execution with high impact on confidentiality, integrity, and availability. Such breaches may violate GDPR's data protection requirements or HIPAA's security rules, potentially resulting in unauthorized access to sensitive data.

Mitigation Strategies

Apply vendor patches or updates for the IP Multimedia Subsystem as soon as they become available. Monitor official advisories from the vendor or assigner for mitigation guidance. Restrict network access to the subsystem where possible to reduce exposure.

Hi! I’m here to help you understand CVE-2026-55331. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70