CVE-2026-45527

CVE-2026-45527 is an integer overflow in the convertCleanApertureToRect function of HeifCleanAperture.cpp , identified in Android's September 2026 security bulletin. The flaw allows a remote temporary denial of service without requiring additional execution privileges or user interaction, meaning...

EUVD-2026-74002

In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...