CVE-2026-56997
HighCVSS 8.8Summary
In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
The vulnerability may allow a remote attacker to escalate privileges on the system, posing a risk of device compromise. The lack of required user interaction increases the risk of widespread exploitation.
Recommendation
Apply available security updates for the affected component as soon as possible. Until patches are deployed, limit exposure of services processing video streams.
Other vulnerabilities in vp9hwd_headers.cc
See all- CVE-2026-56942High
In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-0170High
In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed.
Original NVD description (English source)
In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.