Skip to content
OpenAdvisories
High · 8.8 CVE-2026-0160 EUVD-2026-37193GHSA-5643-644w-q8gh

In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to a missing bounds …

Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Google_Devices

Description

In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References