Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-57047: MFC core may write out of bounds, enabling remote code
CVE-2026-57047 · published 4 days ago
Summary
The MFC core library contains a missing check that can cause data to be written beyond the intended memory area. This flaw could allow an attacker to run their own code on the system without any user involvement. Apply the latest vendor update or patch to fix the issue.
What to do
- Update google :unknown: to version :2026-11-05.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | android | Android kernel | |
| Android | :unknown: |
>= :0, < :2026-11-05 Fix: upgrade to :2026-11-05
|
Original advisory text
In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional ...
In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity
9.8
Critical
Type
CWE-119Buffer Overflow
CWE-787Out-of-bounds Write
Timeline
Published10 Nov 2026
Updated15 Nov 2026
First seen2 Nov 2026
Track software like this
Free during beta