CVE-2026-28618

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/09/2026
Last modified:
08/09/2026

Description

In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Impact

References to Advisories, Solutions, and Tools