CVE-2026-55332
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In multiple locations, an out-of-bounds write is possible due to improper input validation. This could lead to local privilege escalation requiring System execution privileges.
Risk Assessment
An attacker with System privileges could exploit the out-of-bounds write to escalate privileges. This may result in memory corruption and system takeover.
Recommendation
Update the software to a version containing the input validation fix. Implement additional input validation checks.
Other vulnerabilities in System
See all- CVE-2026-22909High
Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations.
- CVE-2026-56888Medium
In multiple locations, a permission bypass is possible due to side channel information disclosure. This could lead to local privilege escalation without additional execution privileges or user interaction.
- CVE-2026-9651Medium
CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability could cause unauthorized disclosure of password hashes. An attacker with privileged local access can read improperly protected system files, potentially leading to account compromise.
- CVE-2026-49190High
The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized application installations or command executions.
- CVE-2023-35691High
There is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.
Original NVD description (English source)
In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS