CVE-2026-49934 in Android

Resumen

por MITRE • 2026-11-02

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: Google Android
• Reservar: 2026-06-02
• Divulgación: 2026-11-02
• Moderación: aceptado
• Artículo: VDB-429988
• CPE: 20261102
• CWE: CWE-20 (confirmado)
• CVSS: 8.2 (VulDB)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo
• Sector: Homeoffice, Lawfirm, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-49934
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-49934
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-49934/