VulnerabilityPublished
ZDI-26-969: libhevc HEVC Video Decoder Out-Of-Bounds Read Information Disclosure Vulnerability
Source Zero Day Initiative
0
Severity
MediumRated Medium by Zero Day Initiative
Data as of 13 Nov 2026, 20:34 UTC
What to do
AI-suggested
Users should exercise caution when opening files or visiting unknown web pages. Monitor vendor advisories for updates and patches addressing this vulnerability.
Description
A vulnerability in the libhevc HEVC Video Decoder on Google Android allows remote attackers to disclose sensitive information. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 4.4 assigned by ZDI.
References
Community reviews
Loading reviews…