CVE-2026-49912 — Vulnerability intelligence
—
Published:
- CVSS
- Not available
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.