GoogleCVE-2026-28618
Google Android: buffer overflow
No fix yet
In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Android Product | <= 17 | No fix yet |
| <= 16-qpr2 | No fix yet | |
| <= 16 | No fix yet |