CVE-2026-55283: Use After Free

Q: What level of access does an attacker need to exploit this issue?

The vulnerability is rated with local attack vector and no privileges required. Exploitation does not require user interaction or additional execution privileges.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation could allow escalation of privilege and affect confidentiality, integrity, and availability at high impact levels.

Q: Which component is identified as affected?

The affected software includes Android's platform/hardware/nxp/nfc component in Google Android.

Published Nov 1, 2026

Updated

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

5 affected componentsFixes available

android/platform/hardware/nxp/nfc>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/hardware/nxp/nfc>=16:0<16:2026-11-01

16:2026-11-01

android/platform/hardware/nxp/nfc>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/hardware/nxp/nfc>=17:0<17:2026-11-01

17:2026-11-01

Google Android

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Nov 2, 2026

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability is rated with local attack vector and no privileges required. Exploitation does not require user interaction or additional execution privileges.

What is the potential impact if exploitation succeeds?

Successful exploitation could allow escalation of privilege and affect confidentiality, integrity, and availability at high impact levels.

Which component is identified as affected?

The affected software includes Android's platform/hardware/nxp/nfc component in Google Android.

CVE-2026-55283: Use After Free

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which component is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which component is identified as affected?