In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
|
No data.
No data.
References
History
Mon, 02 Nov 2026 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Integer Underflow in Android rw_ci Data Callback Enables Remote Information Disclosure | |
| Weaknesses | CWE-127 |
Mon, 02 Nov 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google android |
|
| Vendors & Products |
Google
Google android |
Mon, 02 Nov 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2026-11-02T19:53:34.198Z
Updated: 2026-11-02T19:53:34.198Z
Reserved: 2026-06-16T17:43:25.295Z
Link: CVE-2026-55292
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-11-02T20:17:45.410
Modified: 2026-11-02T20:17:45.410
Link: CVE-2026-55292
Redhat
No data.