{"id":"CVE-2026-49934","kind":"vulnerability","aliases":["CVE-2026-49934"],"related":[],"title":"Android telephony: USSD/MMI input validation lets local apps escalate privilege","description":"In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","summary":"Multiple functions in MmiUtils.java, part of Android telephony, do not validate USSD/MMI input properly. A local attacker can use this to run USSD/MMI code and escalate privileges on the device.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","infrastructure","telephony"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:43+00:00","first_seen_at":"2026-11-02T20:35:28+00:00","triaged_at":"2026-11-02T20:40:42+00:00","updated_at":"2026-11-02T20:40:42+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-02T20:40:42Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android telephony: USSD/MMI input validation lets local apps escalate privilege","impact":"high","summary":"Multiple functions in MmiUtils.java, part of Android telephony, do not validate USSD/MMI input properly. A local attacker can use this to run USSD/MMI code and escalate privileges on the device.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["android","telephony"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local privilege escalation on the device through telephony code","analyst_note":"Check the Android security bulletin for affected versions and the patch level that fixes MmiUtils.java; the NVD entry gives no product ranges.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The description names only MmiUtils.java in Android telephony and says exploitation needs user interaction and gives local privilege escalation. The sources do not state affected Android versions or builds, so unknown.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000621,"input_tokens":4100,"output_tokens":421,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-49934':13A,16A 'addit':79C 'android':1A,17B,26B 'app':8A 'attack':36B 'code':43B,62C 'could':70C 'cve':11A,14A 'devic':49B 'due':64C 'escal':9A,45B,74C 'execut':63C,80C 'exploit':88C 'function':21B,52C 'improp':66C 'infrastructur':18B 'input':4A,32B,67C 'interact':84C 'lead':71C 'let':6A 'local':7A,35B,73C 'mmiutils.java':23B,54C 'multipl':20B,51C 'need':82C,86C 'part':24B 'possibl':58C 'privileg':10A,46B,76C,81C 'proper':33B 'risk':59C 'run':41B 'telephoni':2A,19B,27B 'use':38B 'user':83C 'ussd/mmi':3A,31B,42B,61C 'valid':5A,30B,68C","nicknames":[],"mitigations":[],"who_affected":"The description names only MmiUtils.java in Android telephony and says exploitation needs user interaction and gives local privilege escalation. The sources do not state affected Android versions or builds, so unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","infrastructure","telephony","unknown"],"first_public_at":"2026-11-02T20:17:43+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-49934","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49934","severity":null,"published_at":"2026-11-02T20:17:43+00:00","modified_at":"2026-11-02T20:17:43+00:00","first_seen_at":"2026-11-02T20:35:28+00:00","fetched_at":"2026-11-02T20:35:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}