CVE-2026-55351

Description

In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS Vector

References

• https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01