vdec vulnerabilities
4 known CVE vulnerabilities in vdec, translated and rated.
- CVE-2026-20586Unknown
In the vdec component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote privilege escalation with no additional execution privileges needed. User interaction is needed for exploitation.
- CVE-2026-20579Unknown
In the vdec component, there is a possible out-of-bounds write due to type confusion. This could lead to local privilege escalation if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.
- CVE-2026-20502High
In the vdec module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege without needing additional execution privileges. User interaction is not required for exploitation.
- CVE-2026-20501High
In the vdec module, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege without needing additional execution privileges. User interaction is not required for exploitation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

