CVE-2026-49913
In descramble of DescramblerImpl.cpp, there is a possible arbitrary memory access due to a precondition check failure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
What each source reports
OSVASB-A-505452999 No score
In descramble of DescramblerImpl.cpp, there is a possible arbitrary memory access due to a precondition check failure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
ASB-A-505452999- Updated
- 2026-11-05
Affected packages
| Package | Affected | Fixed |
|---|---|---|
platform/hardware/interfacesAndroid |
17-next:0 up to 17-next:2026-09-01, plus listed versions 17-next |
17-next:2026-09-01 |
platform/hardware/interfacesAndroid |
15:0 up to 15:2026-09-01, plus listed versions 15 |
15:2026-09-01 |
platform/hardware/interfacesAndroid |
16:0 up to 16:2026-09-01, plus listed versions 16 |
16:2026-09-01 |
platform/hardware/interfacesAndroid |
16-qpr2:0 up to 16-qpr2:2026-09-01, plus listed versions 16-qpr2 |
16-qpr2:2026-09-01 |
platform/hardware/interfacesAndroid |
17:0 up to 17:2026-09-01, plus listed versions 17 |
17:2026-09-01 |
platform/hardware/interfacesAndroid |
14:0 up to 14:2026-09-01, plus listed versions 14 |
14:2026-09-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-49913 is a vulnerability with no CVSS score yet in platform/hardware/interfaces, published September 1, 2026. No source lists public exploit code. Fixed in platform/hardware/interfaces 17-next:2026-09-01.