{"id":"CVE-2026-49895","title":"In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check","summary":"In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privile…","severity":"low","cvss":3.5,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-120"],"vendor":"Google","product":"Android","affected":["Android 17","Android 16-qpr2","Android 16","Android 15","Android 14"],"published":"2026-09-08","updated":"2026-09-10","sourceUpdated":"2026-09-10T16:17:13.913","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-49895","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T15:41:30.598771Z"},"epss":0.00091,"epssPercentile":0.00562,"ingestedAt":"2026-09-08T19:08:49.641Z","slug":"CVE-2026-49895","body":"## Overview\n\nIn get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":19,"depthScoreParts":{"impact":19.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201727,"id":"CVE-2026-49895","ts":1789399642976,"field":"cvss","old":null,"new":"3.5"},{"seq":201726,"id":"CVE-2026-49895","ts":1789399642976,"field":"severity","old":"none","new":"low"},{"seq":200457,"id":"CVE-2026-49895","ts":1789397270373,"field":"cvss","old":"3.5","new":null},{"seq":200456,"id":"CVE-2026-49895","ts":1789397270373,"field":"severity","old":"low","new":"none"},{"seq":198379,"id":"CVE-2026-49895","ts":1789391868863,"field":"cvss","old":null,"new":"3.5"},{"seq":198378,"id":"CVE-2026-49895","ts":1789391868863,"field":"severity","old":"none","new":"low"},{"seq":196172,"id":"CVE-2026-49895","ts":1789383522623,"field":"cvss","old":"3.5","new":null},{"seq":196171,"id":"CVE-2026-49895","ts":1789383522623,"field":"severity","old":"low","new":"none"},{"seq":195101,"id":"CVE-2026-49895","ts":1789380409041,"field":"cvss","old":null,"new":"3.5"},{"seq":195100,"id":"CVE-2026-49895","ts":1789380409041,"field":"severity","old":"none","new":"low"},{"seq":193888,"id":"CVE-2026-49895","ts":1789378389886,"field":"cvss","old":"3.5","new":null},{"seq":193887,"id":"CVE-2026-49895","ts":1789378389886,"field":"severity","old":"low","new":"none"},{"seq":192675,"id":"CVE-2026-49895","ts":1789376353674,"field":"cvss","old":null,"new":"3.5"},{"seq":192674,"id":"CVE-2026-49895","ts":1789376353674,"field":"severity","old":"none","new":"low"},{"seq":191462,"id":"CVE-2026-49895","ts":1789373290699,"field":"cvss","old":"3.5","new":null},{"seq":191461,"id":"CVE-2026-49895","ts":1789373290699,"field":"severity","old":"low","new":"none"},{"seq":190247,"id":"CVE-2026-49895","ts":1789369244750,"field":"cvss","old":null,"new":"3.5"},{"seq":190246,"id":"CVE-2026-49895","ts":1789369244750,"field":"severity","old":"none","new":"low"},{"seq":189034,"id":"CVE-2026-49895","ts":1789368170576,"field":"cvss","old":"3.5","new":null},{"seq":189033,"id":"CVE-2026-49895","ts":1789368170576,"field":"severity","old":"low","new":"none"},{"seq":187817,"id":"CVE-2026-49895","ts":1789365098423,"field":"cvss","old":null,"new":"3.5"},{"seq":187816,"id":"CVE-2026-49895","ts":1789365098423,"field":"severity","old":"none","new":"low"},{"seq":186604,"id":"CVE-2026-49895","ts":1789363155281,"field":"cvss","old":"3.5","new":null},{"seq":186603,"id":"CVE-2026-49895","ts":1789363155281,"field":"severity","old":"low","new":"none"},{"seq":185390,"id":"CVE-2026-49895","ts":1789361052730,"field":"cvss","old":null,"new":"3.5"},{"seq":185389,"id":"CVE-2026-49895","ts":1789361052730,"field":"severity","old":"none","new":"low"},{"seq":184177,"id":"CVE-2026-49895","ts":1789358056704,"field":"cvss","old":"3.5","new":null},{"seq":184176,"id":"CVE-2026-49895","ts":1789358056704,"field":"severity","old":"low","new":"none"},{"seq":182428,"id":"CVE-2026-49895","ts":1789354180343,"field":"cvss","old":null,"new":"3.5"},{"seq":182427,"id":"CVE-2026-49895","ts":1789354180343,"field":"severity","old":"none","new":"low"},{"seq":181221,"id":"CVE-2026-49895","ts":1789353038793,"field":"cvss","old":"3.5","new":null},{"seq":181220,"id":"CVE-2026-49895","ts":1789353038793,"field":"severity","old":"low","new":"none"},{"seq":180014,"id":"CVE-2026-49895","ts":1789350118747,"field":"cvss","old":null,"new":"3.5"},{"seq":180013,"id":"CVE-2026-49895","ts":1789350118747,"field":"severity","old":"none","new":"low"},{"seq":178807,"id":"CVE-2026-49895","ts":1789347993710,"field":"cvss","old":"3.5","new":null},{"seq":178806,"id":"CVE-2026-49895","ts":1789347993710,"field":"severity","old":"low","new":"none"},{"seq":177600,"id":"CVE-2026-49895","ts":1789346240686,"field":"cvss","old":null,"new":"3.5"},{"seq":177599,"id":"CVE-2026-49895","ts":1789346240686,"field":"severity","old":"none","new":"low"},{"seq":176393,"id":"CVE-2026-49895","ts":1789342908028,"field":"cvss","old":"3.5","new":null},{"seq":176392,"id":"CVE-2026-49895","ts":1789342908028,"field":"severity","old":"low","new":"none"},{"seq":175847,"id":"CVE-2026-49895","ts":1789338692310,"field":"cvss","old":null,"new":"3.5"},{"seq":175846,"id":"CVE-2026-49895","ts":1789338692310,"field":"severity","old":"none","new":"low"},{"seq":175717,"id":"CVE-2026-49895","ts":1789338512175,"field":"cvss","old":"3.5","new":null},{"seq":175716,"id":"CVE-2026-49895","ts":1789338512175,"field":"severity","old":"low","new":"none"},{"seq":174512,"id":"CVE-2026-49895","ts":1789334714395,"field":"cvss","old":null,"new":"3.5"},{"seq":174511,"id":"CVE-2026-49895","ts":1789334714395,"field":"severity","old":"none","new":"low"},{"seq":173307,"id":"CVE-2026-49895","ts":1789333396206,"field":"cvss","old":"3.5","new":null},{"seq":173306,"id":"CVE-2026-49895","ts":1789333396206,"field":"severity","old":"low","new":"none"},{"seq":172121,"id":"CVE-2026-49895","ts":1789330957836,"field":"cvss","old":null,"new":"3.5"},{"seq":172120,"id":"CVE-2026-49895","ts":1789330957836,"field":"severity","old":"none","new":"low"}]}