Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-57047 EUVD-2026-122751GHSA-j396-gcff-7c3p

In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due to a missing bounds check. Th…

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by Google_Devices

Description

In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References