CVE-2026-55331
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
The vulnerability may enable remote code execution on the device, potentially resulting in full system compromise. The lack of required user interaction increases the risk of widespread exploitation.
Recommendation
Immediately install available security patches for the IMS module. Until patches are deployed, limit exposure of IMS services to untrusted networks.
Other vulnerabilities in IP Multimedia Subsystem
See all- CVE-2026-55366Critical
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-58683High
In the IP Multimedia Subsystem, improper input validation leads to an out-of-bounds write. This may enable remote code execution with no user interaction or additional execution privileges required.
Original NVD description (English source)
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS