Remote Code Execution Vulnerability in Android Products Affecting Privilege Escalation

CVE-2026-49919

What is CVE-2026-49919?

In the function tt_face_colr_blend_layer of the ttcolr.c file, a potential vulnerability exists due to an integer overflow. This flaw allows remote code execution, enabling an attacker to escalate their privileges locally without requiring additional execution permissions. The exploitation of this vulnerability does not necessitate user interaction, which heightens the risk for affected systems.

References