Android Pixel Devices Out-of-Bounds Write Vulnerability in Media Framework Could Lead to Remote Code Execution
Vulnerability
A vulnerability exists in the media framework component of Android Pixel devices, specifically within the 'mfc_handle_released_buf' function of 'mfc_core_isr.c'. This vulnerability arises from a missing bounds check, allowing for a potential out-of-bounds write. Exploitation of this issue could result in remote code execution, with no additional privileges required and no need for user interaction.
Impact
Exploitation of this vulnerability could allow for remote code execution on the affected device.
Added: Mar 10, 2026, 9:32 PM
Updated: Mar 10, 2026, 9:32 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
6.8remediation
0.0relevance
3.7threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
