CVE-2026-0163-EXP

CVE-2026-0163 免責事項 このリポジトリは教育および研究目的のみで提供されます。 著作者は、この資料の使用によって生じる不正使用、損害、または違法行為について一切の責任を負いません。 使用は自己責任で行ってください。 適用される法律および倫理ガイドラインを尊重してください。 概要 CVE-2026-0163（Google Android VPU vpuioctl.c における Use After Free）に対する実用的なリモートエクスプロイトです。脆弱なデバイス上でルート権限への昇格を伴う任意のコード実行を実現します。追加の権限やユーザーの操作は不要です。本番環境での...

The vulnerability of the vpu_load_firmware() function in the drivers/media/platform/mediatek/vpu/mtk_vpu.c file of the MediaTek VPU video processor driver for Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the vpuloadfirmware function in the drivers/media/platform/mediatek/vpu/mtkvpu.c file of the MediaTek VPU video processor driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerabilities of the functions venc_g_parm() and venc_s_parm() in the driver/drivers/media/platform/amphion/venc.c file of the Amphion VPU video encoder driver for Linux operating systems allow a malicious actor to cause service failures.

The vulnerability of the functions vencgparm and vencsparm in the driver/media/platform/amphion/venc.c file of the Amphion VPU video encoder driver for Linux operating systems is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-89866

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware via sendfirmwarecommand, which accesses VPU registers. Both the STREAMOFF path wave5vpudecjobabort and the V4L2DECCMDSTOP...

Linux Distros Unpatched Vulnerability : CVE-2026-89896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this...

CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56945

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55351

In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0197

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78983

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

A missing permission check in VPU allows for a potential permission bypass . This vulnerability could enable local escalation of privilege to System execution privileges without requiring user interaction. No specific affected versions, root cause details, or remediation steps are provided in the...

EUVD-2026-78970

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56945

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56945

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56945

In VPU , a confused deputy vulnerability allows for a possible out-of-bounds write . This flaw could lead to a local escalation of privilege without requiring additional execution privileges or user interaction. No specific exploit links or remediation details are provided in the documents.

CVE-2026-56907

A shared memory overwrite vulnerability exists in VPU due to improper input validation . This flaw could allow for a local escalation of privilege , requiring System execution privileges to exploit. Notably, no user interaction is required for exploitation. Details regarding specific affected ver...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...