CVE-2026-55357

In CPM, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with System execution...

Original description

The description as published by the source.

In CPM, there is a possible permission bypass due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Android :unknown:

[{"type":"ECOSYSTEM","events":[{"introduced":"Pixel-family specific:0"},{"fixed":"Pixel-family specific:2026-09-05"}]}]

References

advisory source.android.com