CVE-2026-55292: High severity Google Android vulnerability

Q: What level of access does an attacker need to exploit this issue?

The issue can be exploited remotely and does not require additional execution privileges or user interaction.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation could result in disclosure of information because of a memory safety issue caused by an integer underflow.

Q: Which component should be prioritized for remediation?

Prioritize devices using the Android NFC module in android/platform/packages/modules/nfc, specifically the code path containing rw_ci_data_cback in rw_ci.cc.

Published Nov 1, 2026

Updated

In rwcidatacback of rwci.cc, there is a possible memory safety issue due to integer underflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

5 affected componentsFixes available

android/platform/packages/modules/nfc>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/packages/modules/nfc>=16:0<16:2026-11-01

16:2026-11-01

android/platform/packages/modules/nfc>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/packages/modules/nfc>=17:0<17:2026-11-01

17:2026-11-01

Google Android

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Nov 2, 2026

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Data Sourced

via NVD·08:17 PM

Description

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue can be exploited remotely and does not require additional execution privileges or user interaction.

What is the potential impact if exploitation succeeds?

Successful exploitation could result in disclosure of information because of a memory safety issue caused by an integer underflow.

Which component should be prioritized for remediation?

Prioritize devices using the Android NFC module in android/platform/packages/modules/nfc, specifically the code path containing rw_ci_data_cback in rw_ci.cc.

CVE-2026-55292: High severity Google Android vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which component should be prioritized for remediation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which component should be prioritized for remediation?