Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-58953 EUVD-2026-115393GHSA-3jw2-j4j8-8wxm

In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information …

Published Nov 2, 2026 · Updated Nov 6, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16 —

Advisories 2

References