CVE-2026-55365

Analyzed Analyzed - Analysis Complete

Heap Overflow in remap.c Component

Publication date: 2026-09-15

Last updated on: 2026-09-21

Assigner: Google Devices

Description

In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-21

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-55365

EUVD

EUVD-2026-78953

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds write issue in the remap.c file. It occurs due to incorrect bounds checking in multiple functions, which could allow an attacker to write data beyond the intended memory area. Exploitation requires system execution privileges and could lead to local privilege escalation.

Impact Analysis

If exploited, this vulnerability could allow an attacker with system privileges to execute arbitrary code or escalate their privileges further on the affected system. Since user interaction is not required, it poses a risk even for systems with limited user access.

Compliance Impact

This vulnerability could lead to local privilege escalation with system execution privileges required, potentially allowing unauthorized access to sensitive data. This may impact compliance with GDPR (data protection) and HIPAA (healthcare data privacy) by enabling unauthorized data access or modification.

Mitigation Strategies

Apply vendor patches or updates for the affected remap.c functions. Monitor official advisories from the software vendor for fixes. Restrict user access to privileged functions until patched.

Hi! I’m here to help you understand CVE-2026-55365. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70