CVE-2026-49878: Android: sınır dışı yazma

Açıklama (NVD)

In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.

Özet bilgiler

Ürün

Google Android

CVSS v3.1

7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,29 (yüzdelik 22)

CWE

CWE-787

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• source.android.com
• CWE-787