Separate libhevc Android out-of-bounds read disclosed as ZDI-26-969
Like the companion notice, this one is CVSS 4.4 and needs a malicious page or file.
32
Product
libhevc
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenNov 13, 2026
- Last mentioned1d ago
Timeline
2 articles · newest firstlibhevc out-of-bounds read can disclose data on Android
ZDI-26-970 is rated CVSS 4.4 and requires a malicious page or file; no CVE is named.
32
Appears with
- Zero Day Initiativeorganization · 2
- Androidproduct · 2
- Googlevendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.