{"id":"CVE-2026-49885","published":"2026-10-05T19:17:20.873","lastModified":"2026-10-07T13:03:47.930","description":"In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-190"],"vendors":["google"],"products":["android"],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-10-01","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow vulnerability in Google's Android NFC implementation allows local attackers to escalate privileges without needing additional execution rights. The flaw occurs when updating files through the NFC reader/writer component.","exploitability":"Exploitation is relatively straightforward as it requires only local access with no user interaction needed, making it easy to leverage for privilege escalation.","blast_radius":"The vulnerability affects Android devices with NFC capabilities, potentially allowing attackers to gain full system privileges on affected devices.","remediation":"Apply the latest Android security patch update which includes the fix for rw_t4t_update_file in rw_t4t.cc","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","nfc","android"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:57:42.123Z"}}