Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-0165 EUVD-2026-37197GHSA-42ch-w3xc-h9xw

In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. This could lead to r…

Published Jun 16, 2026 · Updated Sep 16, 2026 · Assigned by Google_Devices

Description

In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References