CVE-2026-55348
In GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out of bounds read via sign extension of a negative buffer size due to an improper or implicit cast. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
What each source reports
OSVPUB-A-516888424 No score
In GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out of bounds read via sign extension of a negative buffer size due to an improper or implicit cast. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
- Record
PUB-A-516888424- Updated
- 2026-11-05
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:unknown:Android |
Pixel-family specific:0 up to Pixel-family specific:2026-11-05, plus listed versions Pixel-family specific |
Pixel-family specific:2026-11-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-55348 is a vulnerability with no CVSS score yet in :unknown:, published November 1, 2026. No source lists public exploit code. Fixed in :unknown: Pixel-family specific:2026-11-05.