VulnerabilityPublished
ZDI-26-970: libhevc HEVC Video Decoder Out-Of-Bounds Read Information Disclosure Vulnerability
Source Zero Day Initiative
0
Severity
MediumRated Medium by Zero Day Initiative
Data as of 13 Nov 2026, 20:34 UTC
What to do
AI-suggested
Until a fix is available, users should avoid opening untrusted files or visiting suspicious websites that could trigger the vulnerability.
Description
A vulnerability in the libhevc HEVC Video Decoder on Google Android allows remote attackers to disclose sensitive information. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 4.4 assigned by the Zero Day Initiative.
References
Community reviews
Loading reviews…