{"id":"CVE-2026-49879","title":"In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow","summary":"In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitat…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"vendor":"google","product":"android","affected":["android = 14.0","android = 15.0","android = 16.0","android = 17.0"],"published":"2026-09-08","updated":"2026-09-23","sourceUpdated":"2026-09-23T19:34:13.880","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-49879","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00291,"epssPercentile":0.21882,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-10T03:57:33.888076Z"},"ingestedAt":"2026-09-08T19:08:49.641Z","slug":"CVE-2026-49879","body":"## Overview\n\nIn multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `android = 14.0`\n- `android = 15.0`\n- `android = 16.0`\n- `android = 17.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201714,"id":"CVE-2026-49879","ts":1789399642936,"field":"cvss","old":null,"new":"8.8"},{"seq":201713,"id":"CVE-2026-49879","ts":1789399642936,"field":"severity","old":"none","new":"high"},{"seq":200446,"id":"CVE-2026-49879","ts":1789397270285,"field":"cvss","old":"8.8","new":null},{"seq":200445,"id":"CVE-2026-49879","ts":1789397270285,"field":"severity","old":"high","new":"none"},{"seq":198368,"id":"CVE-2026-49879","ts":1789391868541,"field":"cvss","old":null,"new":"8.8"},{"seq":198367,"id":"CVE-2026-49879","ts":1789391868541,"field":"severity","old":"none","new":"high"},{"seq":196161,"id":"CVE-2026-49879","ts":1789383522580,"field":"cvss","old":"8.8","new":null},{"seq":196160,"id":"CVE-2026-49879","ts":1789383522580,"field":"severity","old":"high","new":"none"},{"seq":195090,"id":"CVE-2026-49879","ts":1789380409003,"field":"cvss","old":null,"new":"8.8"},{"seq":195089,"id":"CVE-2026-49879","ts":1789380409003,"field":"severity","old":"none","new":"high"},{"seq":193877,"id":"CVE-2026-49879","ts":1789378389844,"field":"cvss","old":"8.8","new":null},{"seq":193876,"id":"CVE-2026-49879","ts":1789378389844,"field":"severity","old":"high","new":"none"},{"seq":192664,"id":"CVE-2026-49879","ts":1789376353630,"field":"cvss","old":null,"new":"8.8"},{"seq":192663,"id":"CVE-2026-49879","ts":1789376353630,"field":"severity","old":"none","new":"high"},{"seq":191451,"id":"CVE-2026-49879","ts":1789373290660,"field":"cvss","old":"8.8","new":null},{"seq":191450,"id":"CVE-2026-49879","ts":1789373290660,"field":"severity","old":"high","new":"none"},{"seq":190236,"id":"CVE-2026-49879","ts":1789369244703,"field":"cvss","old":null,"new":"8.8"},{"seq":190235,"id":"CVE-2026-49879","ts":1789369244703,"field":"severity","old":"none","new":"high"},{"seq":189023,"id":"CVE-2026-49879","ts":1789368170483,"field":"cvss","old":"8.8","new":null},{"seq":189022,"id":"CVE-2026-49879","ts":1789368170483,"field":"severity","old":"high","new":"none"},{"seq":187806,"id":"CVE-2026-49879","ts":1789365098385,"field":"cvss","old":null,"new":"8.8"},{"seq":187805,"id":"CVE-2026-49879","ts":1789365098385,"field":"severity","old":"none","new":"high"},{"seq":186593,"id":"CVE-2026-49879","ts":1789363155241,"field":"cvss","old":"8.8","new":null},{"seq":186592,"id":"CVE-2026-49879","ts":1789363155241,"field":"severity","old":"high","new":"none"},{"seq":185379,"id":"CVE-2026-49879","ts":1789361052692,"field":"cvss","old":null,"new":"8.8"},{"seq":185378,"id":"CVE-2026-49879","ts":1789361052692,"field":"severity","old":"none","new":"high"},{"seq":184166,"id":"CVE-2026-49879","ts":1789358056620,"field":"cvss","old":"8.8","new":null},{"seq":184165,"id":"CVE-2026-49879","ts":1789358056620,"field":"severity","old":"high","new":"none"},{"seq":182417,"id":"CVE-2026-49879","ts":1789354180305,"field":"cvss","old":null,"new":"8.8"},{"seq":182416,"id":"CVE-2026-49879","ts":1789354180305,"field":"severity","old":"none","new":"high"},{"seq":181210,"id":"CVE-2026-49879","ts":1789353038753,"field":"cvss","old":"8.8","new":null},{"seq":181209,"id":"CVE-2026-49879","ts":1789353038753,"field":"severity","old":"high","new":"none"},{"seq":180003,"id":"CVE-2026-49879","ts":1789350117503,"field":"cvss","old":null,"new":"8.8"},{"seq":180002,"id":"CVE-2026-49879","ts":1789350117503,"field":"severity","old":"none","new":"high"},{"seq":178796,"id":"CVE-2026-49879","ts":1789347993669,"field":"cvss","old":"8.8","new":null},{"seq":178795,"id":"CVE-2026-49879","ts":1789347993669,"field":"severity","old":"high","new":"none"},{"seq":177589,"id":"CVE-2026-49879","ts":1789346240043,"field":"cvss","old":null,"new":"8.8"},{"seq":177588,"id":"CVE-2026-49879","ts":1789346240043,"field":"severity","old":"none","new":"high"},{"seq":176382,"id":"CVE-2026-49879","ts":1789342907986,"field":"cvss","old":"8.8","new":null},{"seq":176381,"id":"CVE-2026-49879","ts":1789342907986,"field":"severity","old":"high","new":"none"},{"seq":175836,"id":"CVE-2026-49879","ts":1789338692263,"field":"cvss","old":null,"new":"8.8"},{"seq":175835,"id":"CVE-2026-49879","ts":1789338692263,"field":"severity","old":"none","new":"high"},{"seq":175706,"id":"CVE-2026-49879","ts":1789338512131,"field":"cvss","old":"8.8","new":null},{"seq":175705,"id":"CVE-2026-49879","ts":1789338512131,"field":"severity","old":"high","new":"none"},{"seq":174501,"id":"CVE-2026-49879","ts":1789334713517,"field":"cvss","old":null,"new":"8.8"},{"seq":174500,"id":"CVE-2026-49879","ts":1789334713517,"field":"severity","old":"none","new":"high"},{"seq":173296,"id":"CVE-2026-49879","ts":1789333395217,"field":"cvss","old":"8.8","new":null},{"seq":173295,"id":"CVE-2026-49879","ts":1789333395217,"field":"severity","old":"high","new":"none"},{"seq":172110,"id":"CVE-2026-49879","ts":1789330957177,"field":"cvss","old":null,"new":"8.8"},{"seq":172109,"id":"CVE-2026-49879","ts":1789330957177,"field":"severity","old":"none","new":"high"}]}