{"id":"CVE-2026-55288","kind":"vulnerability","aliases":["CVE-2026-55288"],"related":[],"title":"Android telephony: SIM record parsing flaw allows local denial of service","description":"In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A flaw in the Android SIM record parser (SIMRecords.java, validEfCfis) throws an uncaught exception that can crash the telephony component. The description says this could lead to local privilege escalation without extra execution privileges or user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","infrastructure","mobile"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:45+00:00","first_seen_at":"2026-11-02T20:35:30+00:00","triaged_at":"2026-11-02T20:39:16+00:00","updated_at":"2026-11-02T20:39:16+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-02T20:39:16Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android telephony: SIM record parsing flaw allows local denial of service","impact":"medium","summary":"A flaw in the Android SIM record parser (SIMRecords.java, validEfCfis) throws an uncaught exception that can crash the telephony component. The description says this could lead to local privilege escalation without extra execution privileges or user interaction.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["android","mobile"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Telephony service crashes; local privilege escalation claimed but unverified","analyst_note":"Find the Android security bulletin entry for CVE-2026-55288 to confirm affected versions, patch level and severity.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Affects Android devices whose telephony stack includes the vulnerable SIMRecords code; the sources do not name affected Android versions or patch levels. unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000619,"input_tokens":4100,"output_tokens":417,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-55288':14A,17A 'addit':88C 'allow':7A 'android':1A,18B,25B 'caus':68C 'compon':40B 'could':45B,79C 'crash':37B 'cve':12A,15A 'denial':9A,70C 'descript':42B 'due':73C 'escal':50B,83C 'except':34B,77C 'execut':53B,89C 'exploit':98C 'extra':52B 'flaw':6A,22B 'infrastructur':19B 'interact':57B,93C 'lead':46B,80C 'local':8A,48B,82C 'mobil':20B 'need':91C,96C 'pars':5A 'parser':28B 'possibl':65C 'privileg':49B,54B,85C,90C 'record':4A,27B 'say':43B 'servic':11A,72C 'sim':3A,26B 'simrecords.java':29B,61C 'telephoni':2A,39B 'throw':31B 'uncaught':33B,76C 'user':56B,92C 'validefcfi':30B,59C 'way':66C 'without':51B","nicknames":[],"mitigations":[],"who_affected":"Affects Android devices whose telephony stack includes the vulnerable SIMRecords code; the sources do not name affected Android versions or patch levels. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","infrastructure","mobile","unknown"],"first_public_at":"2026-11-02T20:17:45+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-55288","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55288","severity":null,"published_at":"2026-11-02T20:17:45+00:00","modified_at":"2026-11-02T20:17:45+00:00","first_seen_at":"2026-11-02T20:35:30+00:00","fetched_at":"2026-11-02T20:35:30+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}