Skip to content
OpenAdvisories
Medium · 4.0 CVE-2026-59624 EUVD-2026-122664GHSA-xvjx-2qmr-hh6j

In multiple locations, there is a possible way to trigger an out of bounds read via direct memory access in video decoder firmware due to a…

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by Google_Devices

Description

In multiple locations, there is a possible way to trigger an out of bounds read via direct memory access in video decoder firmware due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android Android kernel —

Advisories 1

References