CVE-2026-0170
HighCVSS 8.8Summary
In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed.
Risk Assessment
A remote attacker could exploit this vulnerability to escalate privileges, potentially leading to device compromise. No user interaction is required.
Recommendation
Update the software containing the vulnerable vp9hwd_headers.cc file to the latest patched version. Monitor for unusual VP9 decoding activity.
Other vulnerabilities in vp9hwd_headers.cc
See all- CVE-2026-56997High
In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-56942High
In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Original NVD description (English source)
In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.