AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-56974

Google Android: out-of-bounds write

Google

CVE-2026-56974 · Published Sep 15, 2026 · updated Sep 18, 2026

High8.8
No fix yet
Google advisory

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.

Affected versions

PackageAffectedFixed in
Android
Product
<= Android kernelNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-20, CWE-787

More Google advisories

All Google