6 matches found
CVE-2026-58924
The vulnerability is a heap out-of-bounds read in the EVS HAL's getStreamList method. An attacker can craft a CameraDesc.metadata byte array, which is parsed without validation, leading to an out-of-bounds read at an attacker-controlled offset within the HAL process's heap. The read data is then...
EUVD-2026-115618
The vulnerability is a heap out-of-bounds read in the EVS HAL's getStreamList method. An attacker can craft a CameraDesc.metadata byte array, which is parsed without validation, leading to an out-of-bounds read at an attacker-controlled offset within the HAL process's heap. The read data is then...
CVE-2026-58924
The vulnerability is a heap out-of-bounds read in the EVS HAL's getStreamList method. An attacker can craft a CameraDesc.metadata byte array, which is parsed without validation, leading to an out-of-bounds read at an attacker-controlled offset within the HAL process's heap. The read data is then...
CVE-2026-58924
The EVS HAL is vulnerable to a heap out-of-bounds read within the getStreamList() method. The root cause is the lack of validation when parsing a CameraDesc.metadata byte array, allowing an attacker to trigger a read at an attacker-controlled offset within the HAL process's heap. This can result ...
CVE-2026-58924: Google Android: The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method
The vulnerability is a heap out-of-bounds read in the EVS HAL's getStreamList method. An attacker can craft a CameraDesc.metadata byte array, which is parsed without validation, leading to an out-of-bounds read at an attacker-controlled offset within the HAL process's heap. The read data is then...
PT-2026-135802
The vulnerability is a heap out-of-bounds read in the EVS HAL's getStreamList method. An attacker can craft a CameraDesc.metadata byte array, which is parsed without validation, leading to an out-of-bounds read at an attacker-controlled offset within the HAL process's heap. The read data is then...