CVE-2026-49882

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49882

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74007

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49882

A heap buffer overflow vulnerability exists in the rw_mfc_handle_read_op function of rw_mfc.cc . This memory safety issue could potentially lead to remote code execution without requiring additional execution privileges or user interaction. While the specific software and version are not explicit...

CVE-2026-49879

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74005

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49879

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49879

A vulnerability exists in multiple functions of rw_t3t.cc where an integer overflow can lead to an out of bounds write . This flaw could allow for remote code execution without requiring additional execution privileges or user interaction. While technical details regarding specific affected versi...

CVE-2026-28662

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28662

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73991

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28662

A critical heap-based buffer overflow (CWE-122) exists in the p2p_process_prov_disc_bootstrap_req function of p2p_pd.c within the Android WiFi subcomponent. This memory corruption vulnerability could allow an attacker to achieve remote code execution (RCE) without requiring additional privileges ...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618

A heap buffer overflow in the dec_frm_prepare function of oapv.c within the OpenAPV codec allows for an out-of-bounds write. This vulnerability exists in the Media Codecs component and affects Android versions 13, 14, 15, and 16 . Exploitation can lead to remote code execution (RCE) or local priv...

EUVD-2026-73967

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73960

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28609

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28609

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28609

CVE-2026-28609 is a high-severity Remote Code Execution (RCE) vulnerability in the Android Media Framework (specifically within MatroskaExtractor.cpp). The root cause is an out-of-bounds write triggered by improper casting: a frame data pointer is cast to uint16_t * before applying a range_offset...