PT-2026-49807 · Google · Android

Publicado 2026-06-16 · Atualizado 2026-06-18 · CVE-2026-0149

Mitre

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Correção

Memory Corruption

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-122

Identificadores relacionados

CVE-2026-0149

Produtos afetados

Android

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-0149 · Nota de Segurança
• https://source.android.com/docs/security/bulletin/pixel/2026/2026-06-01 · Aviso do Fabricante
• https://twitter.com/ptdbugs/status/2067629310077235322 · Publicação no Twitter