Heap Buffer Overflow Vulnerability in Android Products by Google

CVE-2026-55294

What is CVE-2026-55294?

A vulnerability exists in the ihevcd_get_tu_data_size function of ihevcd_utils.c, which may allow an out-of-bounds write due to a heap buffer overflow. This situation can result in local privilege escalation without requiring additional execution privileges or user interaction, effectively enabling attackers to exploit the vulnerability and gain unauthorized access.

References