CVE-2026-49885: Out-of-Bounds Write Vulnerability in Android NFC Module
Summary
CVE-2026-49885: In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. Affects platform/packages/modules/Nfc across 4 version ranges.
>= 16:0, < 16:2026-10-01
>= 16-qpr2:0, < 16-qpr2:2026-10-01
>= 17:0, < 17:2026-10-01
>= 17-next:0, < 17-next:2026-10-01
Fixed in 17-next:2026-10-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android NFC (Near Field Communication) module is a critical component that enables devices to communicate wirelessly over short distances. It facilitates various functionalities such as contactless payments, data exchange, and device pairing. The NFC module is widely used across Android devices, making its security paramount. This vulnerability affects specific versions of the NFC module, potentially allowing unauthorized access and privilege escalation.
Vulnerability Detail
In the rw_t4t_update_file function of rw_t4t.cc, an integer overflow can lead to an out-of-bounds write. This vulnerability allows local escalation of privileges without requiring additional execution privileges. The flaw arises from improper handling of integer values, which can be exploited to overwrite memory locations, potentially allowing an attacker to gain unauthorized access to sensitive system resources.
How To Fix
Minimum fixed version
17-next:2026-10-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users are advised to limit the use of NFC functionalities until the patch is applied. Additionally, disabling NFC in device settings can mitigate the risk of exploitation until the update is implemented.
Conclusion
The CVE-2026-49885 vulnerability poses a significant risk to the Android NFC module, allowing for potential local privilege escalation. It is crucial for users and developers to apply the necessary patches and consider workarounds to protect their systems. Regular monitoring for vulnerabilities using tools like Vulert can enhance security.
See every vulnerability recorded for platform/packages/modules/Nfc →
FAQ
CVE-2026-49885 is a vulnerability in the Android NFC module that allows for an out-of-bounds write due to an integer overflow, potentially leading to local privilege escalation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The main risk is local privilege escalation, which could allow an attacker to gain unauthorized access to sensitive system resources and perform malicious actions.
To apply the patch, update the NFC module to the specified patched version as outlined in the 'how_to_fix' section.
Yes, temporarily disabling NFC functionalities in device settings can help mitigate the risk until the patch is applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Nfc.
