Android Privilege Escalation Vulnerability in Media Framework

Vulnerability

A vulnerability allowing local privilege escalation has been identified in the Android media framework. The issue arises from an out-of-bounds write in the function 'mfc_dec_dqbuf' within 'mfc_dec_v4l2.c', caused by an incorrect bounds check. Exploitation of this vulnerability does not require additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Added: Mar 10, 2026, 9:32 PM
Updated: Mar 10, 2026, 9:32 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
2.7
remediation
0.0
relevance
3.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.