Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-58968 EUVD-2026-115404GHSA-frwx-6263-7fpw

In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of pr…

Published Nov 2, 2026 · Updated Nov 4, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16 —

Advisories 2

References