Unrated
CVE-2026-49933
In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Announced Source revision 1
Original source ↗CVE-2026-49933
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-49933
Android
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Google",
"product": "Android",
"versions": [
{
"status": "affected",
"version": "17"
},
{
"status": "affected",
"version": "16-qpr2"
},
{
"status": "affected",
"version": "16"
}
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-49933
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #9022 · Revision 1
- Added to Heist Feed
- Publisher date