Skip to content
OpenAdvisories
Low · 2.3 CVE-2026-59619 EUVD-2026-122662GHSA-3pqp-r3cx-7rrj

In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table lookup due to a missing …

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by Google_Devices

Description

In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table lookup due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References