Memory Corruption Vulnerability in VLC Product by OAPV
CVE-2026-58968

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
2 November 2026

What is CVE-2026-58968?

A memory corruption issue exists in the oapvd_vlc_metadata function of the oapv_vlc.c file. The vulnerability is triggered by a double free condition, enabling potential remote privilege escalation without requiring additional execution rights. The exploitation does not necessitate user interaction, thus posing a significant risk to affected systems.

Affected Version(s)

Android 17

Android 16-qpr2

Android 16

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.