A vulnerability identified as CVE-2026-59612 exists in the buffering_period function of the avc_decoder component. It involves a possible non-heap buffer overflow that requires local execution privileges and user interaction to exploit. This flaw could allow a local attacker to escalate privileges on the affected system.