Heap Buffer Overflow Vulnerability in PduParser by Android

CVE-2026-49932

What is CVE-2026-49932?

The PduParser component in Android contains a heap buffer overflow vulnerability that may result in an out-of-bounds read. This security flaw potentially allows local escalation of privileges without requiring additional execution permissions or user interaction, raising serious concerns for system integrity and user data security. Mitigating this issue is essential for maintaining the overall protection of affected devices.

References