CVE WatchNov 2, 2026

CVE-2026-49934

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lea

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Nov 2, 2026 · Last modified: Nov 2, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Official references

source.android.comhttps://source.android.com/docs/security/bulletin/2026/2026-11-01

Related CVEs

No related CVEs by CWE or product.