CVE-2026-55269: Input Validation
In FilterCapturedPacket of snooplogger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Android systems that include the affected snoop_logger.cc code path may be exposed. Exploitation is local, so an attacker would need access to run code on the device rather than network-only access.
What does an attacker need to exploit it?
The issue can lead to local privilege escalation and requires no additional execution privileges. No user interaction is needed.
How can I determine whether a device is affected?
Review the Android security bulletin referenced for the affected builds and remediation information, then compare it with the software version and security update level deployed on the device.