{"id":"CVE-2026-49918","title":"In multiple functions, there is a possible out of bounds write due to an integer overflow","summary":"In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"vendor":"google","product":"android","affected":["android = 16.0","android = 17.0"],"published":"2026-09-08","updated":"2026-09-24","sourceUpdated":"2026-09-24T15:49:13.397","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-49918","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00096,"epssPercentile":0.00667,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-10T03:57:37.362103Z"},"ingestedAt":"2026-09-08T19:08:49.641Z","slug":"CVE-2026-49918","body":"## Overview\n\nIn multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `android = 16.0`\n- `android = 17.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201729,"id":"CVE-2026-49918","ts":1789399642983,"field":"cvss","old":null,"new":"7.8"},{"seq":201728,"id":"CVE-2026-49918","ts":1789399642983,"field":"severity","old":"none","new":"high"},{"seq":200459,"id":"CVE-2026-49918","ts":1789397270387,"field":"cvss","old":"7.8","new":null},{"seq":200458,"id":"CVE-2026-49918","ts":1789397270387,"field":"severity","old":"high","new":"none"},{"seq":198381,"id":"CVE-2026-49918","ts":1789391868923,"field":"cvss","old":null,"new":"7.8"},{"seq":198380,"id":"CVE-2026-49918","ts":1789391868923,"field":"severity","old":"none","new":"high"},{"seq":196174,"id":"CVE-2026-49918","ts":1789383522630,"field":"cvss","old":"7.8","new":null},{"seq":196173,"id":"CVE-2026-49918","ts":1789383522630,"field":"severity","old":"high","new":"none"},{"seq":195103,"id":"CVE-2026-49918","ts":1789380409047,"field":"cvss","old":null,"new":"7.8"},{"seq":195102,"id":"CVE-2026-49918","ts":1789380409047,"field":"severity","old":"none","new":"high"},{"seq":193890,"id":"CVE-2026-49918","ts":1789378389892,"field":"cvss","old":"7.8","new":null},{"seq":193889,"id":"CVE-2026-49918","ts":1789378389892,"field":"severity","old":"high","new":"none"},{"seq":192677,"id":"CVE-2026-49918","ts":1789376353681,"field":"cvss","old":null,"new":"7.8"},{"seq":192676,"id":"CVE-2026-49918","ts":1789376353681,"field":"severity","old":"none","new":"high"},{"seq":191464,"id":"CVE-2026-49918","ts":1789373290706,"field":"cvss","old":"7.8","new":null},{"seq":191463,"id":"CVE-2026-49918","ts":1789373290706,"field":"severity","old":"high","new":"none"},{"seq":190249,"id":"CVE-2026-49918","ts":1789369244757,"field":"cvss","old":null,"new":"7.8"},{"seq":190248,"id":"CVE-2026-49918","ts":1789369244757,"field":"severity","old":"none","new":"high"},{"seq":189036,"id":"CVE-2026-49918","ts":1789368170591,"field":"cvss","old":"7.8","new":null},{"seq":189035,"id":"CVE-2026-49918","ts":1789368170591,"field":"severity","old":"high","new":"none"},{"seq":187819,"id":"CVE-2026-49918","ts":1789365098429,"field":"cvss","old":null,"new":"7.8"},{"seq":187818,"id":"CVE-2026-49918","ts":1789365098429,"field":"severity","old":"none","new":"high"},{"seq":186606,"id":"CVE-2026-49918","ts":1789363155287,"field":"cvss","old":"7.8","new":null},{"seq":186605,"id":"CVE-2026-49918","ts":1789363155287,"field":"severity","old":"high","new":"none"},{"seq":185392,"id":"CVE-2026-49918","ts":1789361052737,"field":"cvss","old":null,"new":"7.8"},{"seq":185391,"id":"CVE-2026-49918","ts":1789361052737,"field":"severity","old":"none","new":"high"},{"seq":184179,"id":"CVE-2026-49918","ts":1789358056718,"field":"cvss","old":"7.8","new":null},{"seq":184178,"id":"CVE-2026-49918","ts":1789358056718,"field":"severity","old":"high","new":"none"},{"seq":182430,"id":"CVE-2026-49918","ts":1789354180349,"field":"cvss","old":null,"new":"7.8"},{"seq":182429,"id":"CVE-2026-49918","ts":1789354180349,"field":"severity","old":"none","new":"high"},{"seq":181223,"id":"CVE-2026-49918","ts":1789353038800,"field":"cvss","old":"7.8","new":null},{"seq":181222,"id":"CVE-2026-49918","ts":1789353038800,"field":"severity","old":"high","new":"none"},{"seq":180016,"id":"CVE-2026-49918","ts":1789350118754,"field":"cvss","old":null,"new":"7.8"},{"seq":180015,"id":"CVE-2026-49918","ts":1789350118754,"field":"severity","old":"none","new":"high"},{"seq":178809,"id":"CVE-2026-49918","ts":1789347993717,"field":"cvss","old":"7.8","new":null},{"seq":178808,"id":"CVE-2026-49918","ts":1789347993717,"field":"severity","old":"high","new":"none"},{"seq":177602,"id":"CVE-2026-49918","ts":1789346240693,"field":"cvss","old":null,"new":"7.8"},{"seq":177601,"id":"CVE-2026-49918","ts":1789346240693,"field":"severity","old":"none","new":"high"},{"seq":176395,"id":"CVE-2026-49918","ts":1789342908035,"field":"cvss","old":"7.8","new":null},{"seq":176394,"id":"CVE-2026-49918","ts":1789342908035,"field":"severity","old":"high","new":"none"},{"seq":175849,"id":"CVE-2026-49918","ts":1789338692318,"field":"cvss","old":null,"new":"7.8"},{"seq":175848,"id":"CVE-2026-49918","ts":1789338692318,"field":"severity","old":"none","new":"high"},{"seq":175719,"id":"CVE-2026-49918","ts":1789338512182,"field":"cvss","old":"7.8","new":null},{"seq":175718,"id":"CVE-2026-49918","ts":1789338512182,"field":"severity","old":"high","new":"none"},{"seq":174514,"id":"CVE-2026-49918","ts":1789334714539,"field":"cvss","old":null,"new":"7.8"},{"seq":174513,"id":"CVE-2026-49918","ts":1789334714539,"field":"severity","old":"none","new":"high"},{"seq":173309,"id":"CVE-2026-49918","ts":1789333396368,"field":"cvss","old":"7.8","new":null},{"seq":173308,"id":"CVE-2026-49918","ts":1789333396368,"field":"severity","old":"high","new":"none"},{"seq":172123,"id":"CVE-2026-49918","ts":1789330957945,"field":"cvss","old":null,"new":"7.8"},{"seq":172122,"id":"CVE-2026-49918","ts":1789330957945,"field":"severity","old":"none","new":"high"}]}