Lucene search
+L

5 matches found

NVD
NVD
•added 2026/11/02 9:17 p.m.•7 views

CVE-2026-58926

A Use-After-Free UAF vulnerability exists in the EVS HAL, allowing a privileged client to free a bufferhandlet while the producer thread is still using it. This race condition, triggered via doneWithFrame and setMaxFramesInFlight, enables an attacker to manipulate freed heap memory, potentially...

0.00134EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/02 8:21 p.m.•7 views

EUVD-2026-115620

A Use-After-Free UAF vulnerability exists in the EVS HAL, allowing a privileged client to free a bufferhandlet while the producer thread is still using it. This race condition, triggered via doneWithFrame and setMaxFramesInFlight, enables an attacker to manipulate freed heap memory, potentially...

6AI score0.00134EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/02 8:21 p.m.•17 views

CVE-2026-58926

A Use-After-Free UAF vulnerability exists in the EVS HAL, allowing a privileged client to free a bufferhandlet while the producer thread is still using it. This race condition, triggered via doneWithFrame and setMaxFramesInFlight, enables an attacker to manipulate freed heap memory, potentially...

0.00134EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/02 8:21 p.m.•8 views

CVE-2026-58926

A Use-After-Free (UAF) vulnerability exists in the EVS HAL , where a privileged client can free a buffer_handle_t while the producer thread is still actively using it. This race condition is triggered via the doneWithFrame and setMaxFramesInFlight functions. An attacker can exploit this to manipu...

6AI score0.00134EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/02 12:00 a.m.•7 views

CVE-2026-58926: Google Android: A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t`…

A Use-After-Free UAF vulnerability exists in the EVS HAL, allowing a privileged client to free a bufferhandlet while the producer thread is still using it. This race condition, triggered via doneWithFrame and setMaxFramesInFlight, enables an attacker to manipulate freed heap memory, potentially...

6AI score0.00134EPSS
SaveExploits0References1
Rows per page
Query Builder