ASB-A-503554745: Double Free

Q: What level of access does an attacker need to exploit this issue?

The issue could allow remote escalation of privilege and does not require additional execution privileges. User interaction is not required.

Q: What component is affected?

The affected component is Android's platform/external/libopenapv, specifically the oapvd_vlc_metadata functionality in oapv_vlc.c.

Published Nov 1, 2026

Updated

In oapvdvlcmetadata of oapvvlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

3 affected componentsFixes available

android/platform/external/libopenapv>=16:0<16:2026-11-01

16:2026-11-01

android/platform/external/libopenapv>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/external/libopenapv>=17:0<17:2026-11-01

17:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue could allow remote escalation of privilege and does not require additional execution privileges. User interaction is not required.

What component is affected?

The affected component is Android's platform/external/libopenapv, specifically the oapvd_vlc_metadata functionality in oapv_vlc.c.

ASB-A-503554745: Double Free

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What component is affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What component is affected?