In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
History

Wed, 09 Sep 2026 15:45:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Read in Android Wireless Stack Causing Information Disclosure
Weaknesses CWE-120
CWE-200

Tue, 08 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Description In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published: 2026-09-08T18:05:47.873Z

Updated: 2026-09-08T18:05:47.873Z

Reserved: 2026-06-02T14:37:51.326Z

Link: CVE-2026-49895

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-08T19:17:58.883

Modified: 2026-09-08T19:21:26.860

Link: CVE-2026-49895

cve-icon Redhat

No data.