← Back to search

CVE-2026-55269

7.8 HIGH

Published 2026-10-05 · Updated 2026-10-07

AI risk analysis

Summary
A memory safety issue in Google's Android snoop_logger component allows attackers to escalate privileges locally without needing additional execution rights. The vulnerability occurs during packet filtering operations and could enable arbitrary code execution with elevated privileges.
Exploitability
Exploitation is relatively straightforward requiring only local access with existing user privileges, no user interaction needed for the privilege escalation to occur.
Blast radius
The vulnerability affects Android devices where snoop_logger is active, potentially enabling attackers to gain full system access on affected devices with minimal prerequisites.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Apply the latest Android security patch update which includes the fix for snoop_logger.cc memory safety issue.
privilege-escalationmemory-safetyandroidlocal

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-20

Vendors

google

Products

android

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.