Skip to main content

CVE-2026-55306

| EUVDEUVD-2026-78944 MEDIUM
Improper Input Validation (CWE-20)
2026-09-15 Google_Devices GHSA-wh8v-c84q-6wvm
6.5
CVSS 3.1 · Vendor: Google_Devices
Share

Severity by source

Vendor (Google_Devices) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (Google_Devices) · only source for this CVE.

CVSS VectorVendor: Google_Devices

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
Analysis Generated
Sep 15, 2026 - 22:00 vuln.today
CVSS changed
Sep 15, 2026 - 21:22 NVD
6.5 (MEDIUM)
CVE Published
Sep 15, 2026 - 18:33 cve.org
MEDIUM 6.5
CVE Published
Sep 15, 2026 - 18:33 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

AnalysisAI

Improper input validation in the Android cellular modem component allows a remote party to crash or hang the modem, causing loss of cellular connectivity and a denial-of-service condition on affected Android devices. The official CVSS 3.1 vector is 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) and the root cause is CWE-20; only availability is impacted, with no confidentiality or integrity loss and no code execution. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

Share

CVE-2026-55306 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy