{"id":"CVE-2026-45515","title":"In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow","summary":"In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges nee…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122","CWE-787"],"vendor":"Google","product":"Android","affected":["Android 17","Android 16-qpr2","Android 16","Android 15","Android 14"],"published":"2026-09-08","updated":"2026-09-10","sourceUpdated":"2026-09-10T15:17:34.303","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-45515","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-10T03:57:29.438885Z"},"epss":0.00096,"epssPercentile":0.00798,"ingestedAt":"2026-09-08T19:08:49.641Z","slug":"CVE-2026-45515","body":"## Overview\n\nIn a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201666,"id":"CVE-2026-45515","ts":1789399605458,"field":"cvss","old":null,"new":"7.8"},{"seq":201665,"id":"CVE-2026-45515","ts":1789399605458,"field":"severity","old":"none","new":"high"},{"seq":200398,"id":"CVE-2026-45515","ts":1789397209762,"field":"cvss","old":"7.8","new":null},{"seq":200397,"id":"CVE-2026-45515","ts":1789397209762,"field":"severity","old":"high","new":"none"},{"seq":198322,"id":"CVE-2026-45515","ts":1789391840967,"field":"cvss","old":null,"new":"7.8"},{"seq":198321,"id":"CVE-2026-45515","ts":1789391840967,"field":"severity","old":"none","new":"high"},{"seq":196115,"id":"CVE-2026-45515","ts":1789383482241,"field":"cvss","old":"7.8","new":null},{"seq":196114,"id":"CVE-2026-45515","ts":1789383482241,"field":"severity","old":"high","new":"none"},{"seq":195044,"id":"CVE-2026-45515","ts":1789380374675,"field":"cvss","old":null,"new":"7.8"},{"seq":195043,"id":"CVE-2026-45515","ts":1789380374675,"field":"severity","old":"none","new":"high"},{"seq":193831,"id":"CVE-2026-45515","ts":1789378330190,"field":"cvss","old":"7.8","new":null},{"seq":193830,"id":"CVE-2026-45515","ts":1789378330190,"field":"severity","old":"high","new":"none"},{"seq":192618,"id":"CVE-2026-45515","ts":1789376324797,"field":"cvss","old":null,"new":"7.8"},{"seq":192617,"id":"CVE-2026-45515","ts":1789376324797,"field":"severity","old":"none","new":"high"},{"seq":191405,"id":"CVE-2026-45515","ts":1789373240475,"field":"cvss","old":"7.8","new":null},{"seq":191404,"id":"CVE-2026-45515","ts":1789373240475,"field":"severity","old":"high","new":"none"},{"seq":190190,"id":"CVE-2026-45515","ts":1789369200480,"field":"cvss","old":null,"new":"7.8"},{"seq":190189,"id":"CVE-2026-45515","ts":1789369200480,"field":"severity","old":"none","new":"high"},{"seq":188977,"id":"CVE-2026-45515","ts":1789368104986,"field":"cvss","old":"7.8","new":null},{"seq":188976,"id":"CVE-2026-45515","ts":1789368104986,"field":"severity","old":"high","new":"none"},{"seq":187760,"id":"CVE-2026-45515","ts":1789365061993,"field":"cvss","old":null,"new":"7.8"},{"seq":187759,"id":"CVE-2026-45515","ts":1789365061993,"field":"severity","old":"none","new":"high"},{"seq":186547,"id":"CVE-2026-45515","ts":1789363092575,"field":"cvss","old":"7.8","new":null},{"seq":186546,"id":"CVE-2026-45515","ts":1789363092575,"field":"severity","old":"high","new":"none"},{"seq":185333,"id":"CVE-2026-45515","ts":1789361023769,"field":"cvss","old":null,"new":"7.8"},{"seq":185332,"id":"CVE-2026-45515","ts":1789361023769,"field":"severity","old":"none","new":"high"},{"seq":184120,"id":"CVE-2026-45515","ts":1789358006922,"field":"cvss","old":"7.8","new":null},{"seq":184119,"id":"CVE-2026-45515","ts":1789358006922,"field":"severity","old":"high","new":"none"},{"seq":182371,"id":"CVE-2026-45515","ts":1789354155644,"field":"cvss","old":null,"new":"7.8"},{"seq":182370,"id":"CVE-2026-45515","ts":1789354155644,"field":"severity","old":"none","new":"high"},{"seq":181164,"id":"CVE-2026-45515","ts":1789352997906,"field":"cvss","old":"7.8","new":null},{"seq":181163,"id":"CVE-2026-45515","ts":1789352997906,"field":"severity","old":"high","new":"none"},{"seq":179957,"id":"CVE-2026-45515","ts":1789350073172,"field":"cvss","old":null,"new":"7.8"},{"seq":179956,"id":"CVE-2026-45515","ts":1789350073172,"field":"severity","old":"none","new":"high"},{"seq":178750,"id":"CVE-2026-45515","ts":1789347932967,"field":"cvss","old":"7.8","new":null},{"seq":178749,"id":"CVE-2026-45515","ts":1789347932967,"field":"severity","old":"high","new":"none"},{"seq":177543,"id":"CVE-2026-45515","ts":1789346218720,"field":"cvss","old":null,"new":"7.8"},{"seq":177542,"id":"CVE-2026-45515","ts":1789346218720,"field":"severity","old":"none","new":"high"},{"seq":176336,"id":"CVE-2026-45515","ts":1789342840691,"field":"cvss","old":"7.8","new":null},{"seq":176335,"id":"CVE-2026-45515","ts":1789342840691,"field":"severity","old":"high","new":"none"},{"seq":175790,"id":"CVE-2026-45515","ts":1789338623799,"field":"cvss","old":null,"new":"7.8"},{"seq":175789,"id":"CVE-2026-45515","ts":1789338623799,"field":"severity","old":"none","new":"high"},{"seq":175660,"id":"CVE-2026-45515","ts":1789338463758,"field":"cvss","old":"7.8","new":null},{"seq":175659,"id":"CVE-2026-45515","ts":1789338463758,"field":"severity","old":"high","new":"none"},{"seq":174455,"id":"CVE-2026-45515","ts":1789334652997,"field":"cvss","old":null,"new":"7.8"},{"seq":174454,"id":"CVE-2026-45515","ts":1789334652997,"field":"severity","old":"none","new":"high"},{"seq":173250,"id":"CVE-2026-45515","ts":1789333341285,"field":"cvss","old":"7.8","new":null},{"seq":173249,"id":"CVE-2026-45515","ts":1789333341285,"field":"severity","old":"high","new":"none"},{"seq":172064,"id":"CVE-2026-45515","ts":1789330940464,"field":"cvss","old":null,"new":"7.8"},{"seq":172063,"id":"CVE-2026-45515","ts":1789330940464,"field":"severity","old":"none","new":"high"}]}