cyfenced.com →

[ CVE-2026-55330 · Published 6 Oct 2026 ]

Vulnerability in Google Android

CVSS 9.8 EPSS <1%2 agency advisoriesFix available

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.8

[ Description ]Official description

In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

[ Fixes ]Fixes and patches

  • Security bulletin: PixelVendor patch or bulletin · CERT-FR · source.android.com/docs/security/bulletin/pixel/2026/2026-10-01, cited by CERT-FR CERTFR-2026-AVI-1270

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1270

    Multiple vulnerabilities in Google Pixel Translated from French

    Multiple vulnerabilities have been discovered in Google Pixel. They allow an attacker to cause privilege escalation and a breach of data confidentiality.

    CVE-2026-55330CVE-2026-56952CVE-2026-56906+3 more CVEs
  • BSI CERT-BundWID-SEC-2026-3786

    Pixel Patchday Oktober 2026: Multiple vulnerabilities Translated from German

    CVE-2026-56952CVE-2026-56906CVE-2026-56936+3 more CVEs

[ References ]References