CVE-2026-0006-step-2

APV leak-assisted ROP — Pixel 9 / media.swcodec Small, self-contained research package for CVE-2026-0006 APV decoder heap overflow. It demonstrates a controlled native call in media.swcodec, ending in androidlogassertNULL, NULL, "RCE-7F3A92C1" with the nonce visible in a real tombstone Abort...