CVE-2026-55266: Denial of service in Google Android

This vulnerability exists in the qsort function within libufdt_sysdeps_vendor.c in Google Android. The flaw is a possible out-of-bounds write triggered by resource exhaustion, which can cause a denial of service condition. An attacker with local access can exploit this issue to escalate privileges without needing further execution rights or user interaction.

Successful exploitation can cause a denial of service and local privilege escalation on affected Android devices. No additional execution privileges or user interaction are required, increasing the risk of local attacks. There is no indication of remote exploitation or widespread active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users and administrators should monitor official Google Android security advisories for updates and apply patches once available.