streambox-cve-2026-28618

APV de cero clics, en un reproductor que auto-reproduce clips compartidos CVE-2026-28618 en StreamBox — la misma clase de decodificador que el RCE de APV en Android explotado en el mundo real, convertido en una escritura de heap contra un objeto de sesión. Este repositorio es un writeup público y...

Exploit for Heap-based Buffer Overflow in Google Android

Zero-click APV, in a player that auto-plays shared clips CV...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73967

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618

A heap buffer overflow in the dec_frm_prepare function of oapv.c within the OpenAPV codec allows for an out-of-bounds write. This vulnerability exists in the Media Codecs component and affects Android versions 13, 14, 15, and 16 . Exploitation can lead to remote code execution (RCE) or local priv...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618: Heap-based Buffer Overflow

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-492492028

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...