A vulnerability identified as CVE-2026-95402 exists in the slice_header component of the hevc_decoder, involving a possible non-heap buffer overflow. Exploitation requires user interaction and could lead to local privilege escalation with execution privileges.