CVE-2026-20551
MediumCVSS 5.5Summary
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
Risk Assessment
The vulnerability could be exploited locally to cause denial of service, potentially disrupting location services. It requires user interaction.
Recommendation
Apply the vendor patch according to patch ID ALPS11309305. Deploy the fix on devices with the affected GNSS component.
Other vulnerabilities in gnss
See all- CVE-2026-20550Medium
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
- CVE-2015-9047Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability in GNSS when performing a scan after bootup.
Original NVD description (English source)
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309305; Issue ID: MSV-10730.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS