CVE-2026-49879

HighCVSS 8.8/10Last modified Sep 23, 2026

Description

In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
GoogleAndroid17; 16-qpr2; 16; 15; 14

References

Timeline

Published
Sep 8, 2026
Last modified
Sep 23, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-49885.9A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b of the component CCVE-2026-498807.8In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local eCVE-2026-498817.8In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could leCVE-2026-498828.8In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote codeCVE-2026-498835.5In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permissioCVE-2026-498847.8In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esCVE-2026-498857.8In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation CVE-2026-498877.8In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. CVE-2026-49894.3Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform seCVE-2026-498953.5In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This couCVE-2026-49907.3A security vulnerability has been detected in chatwoot up to 4.11.1. The affected element is an unknown function of the file /app/login of tCVE-2026-499035.5The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and `android.permission.PACKAGE_USAGE
CVE-2026-49879: High severity, CVSS 8.8 | Vulnix