In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
History
Fri, 13 Nov 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Integer Overflow in Android Camera Driver Enables Local Information Disclosure | |
| Weaknesses | CWE-125 CWE-680 |
Fri, 13 Nov 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-190 | |
| Metrics |
cvssV3_1
|
Thu, 12 Nov 2026 03:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Integer Overflow in Android Camera Driver Enables Local Information Disclosure | |
| Weaknesses | CWE-125 CWE-680 |
Tue, 10 Nov 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Google_Devices
Published: 2026-11-10T19:22:27.235Z
Updated: 2026-11-13T14:54:24.309Z
Reserved: 2026-07-06T06:29:35.785Z
Link: CVE-2026-59618
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-10T20:19:31.930
Modified: 2026-11-13T15:17:55.107
Link: CVE-2026-59618
Redhat
No data.