CVE-2026-56997: Security vulnerability
Published Sep 15, 2026
·Updated
In Av1DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Event History
Sep 15, 2026
CVE Published
via MITRE·06:34 PM
Data Sourced
via MITRE·06:34 PM
DescriptionWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The issue can be exploited remotely and does not require user interaction or additional execution privileges.
2
What is the potential impact of successful exploitation?
Successful exploitation could allow escalation of privilege through an out-of-bounds write in Av1DecodeFrameTag.