{"id":"ASB-A-503551046", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-10T15:43:18.983809180Z", "aliases":["CVE-2026-49895", "A-503551046"], "details":"In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/external/wpa_supplicant_8", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-09-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/acaccea773865760d43afa1146beb84fe5f99916"], "severity":"High", "spl":"2026-09-01", "types":["ID"]}}, {"package":{"name":"platform/external/wpa_supplicant_8", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-09-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/fd96ae11b219c76d4e12c9b2dfb78b5d4ac8d7a5"], "severity":"High", "spl":"2026-09-01", "types":["ID"]}}, {"package":{"name":"platform/external/wpa_supplicant_8", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-09-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/b524db9d263e45dc6e11c1c6d7709d35cf1604de"], "severity":"High", "spl":"2026-09-01", "types":["ID"]}}, {"package":{"name":"platform/external/wpa_supplicant_8", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-09-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/49cede504766f84c202439cff30cc9cd943a8ea9"], "severity":"High", "spl":"2026-09-01", "types":["ID"]}}, {"package":{"name":"platform/external/wpa_supplicant_8", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-09-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/37f2bd2cc0d25a66c38c2b910c5e9d7e06f39ea1"], "severity":"High", "spl":"2026-09-01", "types":["ID"]}}, {"package":{"name":"platform/external/wpa_supplicant_8", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-09-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/91c16db886ee4cb242d46de29452e6b2f4fca40e"], "severity":"High", "spl":"2026-09-01", "types":["ID"]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}]}