Skip to content
OpenAdvisories
High · 8.8 CVE-2026-0147 EUVD-2026-37181GHSA-x7pp-4wrh-cwhj

In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a missing bounds check. Th…

Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Google_Devices

Description

In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References