Skip to content
OpenAdvisories
High · 8.8 CVE-2026-0146 EUVD-2026-37180GHSA-9w9p-wvhc-pxjw

In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bounds check. This cou…

Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Google_Devices

Description

In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References