{"id":"CVE-2026-49937","published":"2026-10-05T19:17:21.103","lastModified":"2026-10-07T15:11:07.580","description":"In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-119"],"vendors":["google"],"products":["android"],"references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-10-01","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow vulnerability exists in Google's Android MessageQueueBase.h implementation due to incorrect bounds checking, allowing local attackers to read beyond allocated memory boundaries and potentially escalate privileges without requiring additional execution privileges.","exploitability":"Exploitation is relatively straightforward as it requires only local access with existing user privileges, no user interaction is needed, and the vulnerability allows for privilege escalation directly from the affected process.","blast_radius":"The impact could be significant across Android devices where this message queue functionality is used, potentially affecting multiple applications and system services that rely on proper memory bounds checking.","remediation":"Upgrade to Android 14 or later versions which include the fixed MessageQueueBase.h implementation.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","memory-corruption","android"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:57:29.853Z"}}