SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-56997

HIGH · CVSS 8.8 EPSS 0.27% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability exists in the Av1DecodeFrameTag function of vp9hwd_headers.cc, allowing for a potential out-of-bounds write due to inadequate bounds checking. This flaw could enable remote escalation of privileges without requiring any user interaction, posing a significant risk to affected systems. Organizations utilizing the impacted software should prioritize remediation efforts to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-56997
Severity
HIGH
CVSS
8.8
EPSS
0.27%

Original NVD Description

In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.