CVE-2026-58968 In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User....
CriticalCVSS 9.8
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | = 17 | No fix listed |
| Google Android | = 16-qpr2 | No fix listed |
| Google Android | = 16 | No fix listed |
| Google Android | = 16.0 | No fix listed |
| Google Android | = 16.0-qpr2 | No fix listed |
| Google Android | = 17.0 | No fix listed |
References
- source.android.com vendor-advisory