Out-of-Bounds Write Vulnerability in MatroskaExtractor for Android
CVE-2026-28609
8.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-28609?
This vulnerability in MatroskaExtractor.cpp involves a potential out-of-bounds write, resulting from inadequate type casting. This flaw allows an attacker to execute arbitrary code remotely without requiring special permissions or user interactions. It raises significant security concerns for devices running affected versions of the Android operating system.
Affected Version(s)
Android 16-qpr2
Android 16
Android 15
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.