CVE-2026-49885

HighCVSS 7.8/10Last modified Oct 7, 2026

Description

In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Oct 5, 2026
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-498877.8In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. CVE-2026-49894.3Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform se CVE-2026-498953.5In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This cou CVE-2026-49907.3A security vulnerability has been detected in chatwoot up to 4.11.1. The affected element is an unknown function of the file /app/login of t CVE-2026-49913.5A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element is an unknown function of the file /adm CVE-2026-499187.8In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege CVE-2026-499197.8In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local esca CVE-2026-49924.3A flaw has been found in wandb OpenUI up to 1.0. This affects the function create_share/get_share of the file backend/openui/server.py of th CVE-2026-499219.8In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with CVE-2026-499277.8In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege CVE-2026-49933.3A vulnerability has been found in wandb OpenUI up to 0.0.0.0/1.0. This impacts an unknown function of the file backend/openui/config.py. The CVE-2026-499327.8In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation o