SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-0170

HIGH · CVSS 8.8 EPSS 0.27% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability exists in the Vp9DecodeFrameTag function of vp9hwd_headers.cc, allowing for an out-of-bounds write due to insufficient bounds checking. This flaw could enable remote escalation of privileges without requiring any user interaction, posing a significant risk to affected systems. Organizations utilizing software that incorporates this component should prioritize patching to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-0170
Severity
HIGH
CVSS
8.8
EPSS
0.27%

Original NVD Description

In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.