CVE-2026-56920: High severity vulnerability
Published Sep 15, 2026
In sdecodevuiparam of fwhevcdecheader.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Event History
Sep 15, 2026
CVE Published
via MITRE·06:33 PM
Data Sourced
via MITRE·06:33 PM
DescriptionWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The CVSS vector indicates network access and low privileges are required. User interaction is not required, and successful exploitation does not require additional execution privileges.
2
What is the potential impact of successful exploitation?
The issue can cause an out-of-bounds write and may lead to remote code execution. The CVSS vector rates confidentiality, integrity, and availability impact as high.