Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-48592 EUVD-2025-201764GHSA-2754-h3wv-g4xx

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote infor…

Published Dec 8, 2025 · Updated Dec 17, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 16, 15 —

Advisories 3

References