CVE Catalog
CVE-2026-0155
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.17%
6th percentile — higher than 6% of all known CVEs
Summary
In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed.
Risk Assessment
The organization may be exposed to the disclosure of sensitive information, which could lead to further attacks or security breaches.
Recommendation
It is recommended to implement fixes that add proper bounds checking in the code to prevent potential attacks.
Original NVD description (English source)
In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.