{"id":"CVE-2026-45527","title":"In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow","summary":"In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-190"],"vendor":"google","product":"android","affected":["android = 15.0","android = 16.0","android = 17.0"],"published":"2026-09-08","updated":"2026-09-24","sourceUpdated":"2026-09-24T15:18:58.043","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-45527","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00303,"epssPercentile":0.20483,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T15:42:04.402660Z"},"ingestedAt":"2026-09-08T19:08:49.641Z","slug":"CVE-2026-45527","body":"## Overview\n\nIn convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `android = 15.0`\n- `android = 16.0`\n- `android = 17.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201676,"id":"CVE-2026-45527","ts":1789399605493,"field":"cvss","old":null,"new":"4.3"},{"seq":201675,"id":"CVE-2026-45527","ts":1789399605493,"field":"severity","old":"none","new":"medium"},{"seq":200408,"id":"CVE-2026-45527","ts":1789397209834,"field":"cvss","old":"4.3","new":null},{"seq":200407,"id":"CVE-2026-45527","ts":1789397209834,"field":"severity","old":"medium","new":"none"},{"seq":198332,"id":"CVE-2026-45527","ts":1789391841720,"field":"cvss","old":null,"new":"4.3"},{"seq":198331,"id":"CVE-2026-45527","ts":1789391841720,"field":"severity","old":"none","new":"medium"},{"seq":196125,"id":"CVE-2026-45527","ts":1789383482923,"field":"cvss","old":"4.3","new":null},{"seq":196124,"id":"CVE-2026-45527","ts":1789383482923,"field":"severity","old":"medium","new":"none"},{"seq":195054,"id":"CVE-2026-45527","ts":1789380374707,"field":"cvss","old":null,"new":"4.3"},{"seq":195053,"id":"CVE-2026-45527","ts":1789380374707,"field":"severity","old":"none","new":"medium"},{"seq":193841,"id":"CVE-2026-45527","ts":1789378330914,"field":"cvss","old":"4.3","new":null},{"seq":193840,"id":"CVE-2026-45527","ts":1789378330914,"field":"severity","old":"medium","new":"none"},{"seq":192628,"id":"CVE-2026-45527","ts":1789376324829,"field":"cvss","old":null,"new":"4.3"},{"seq":192627,"id":"CVE-2026-45527","ts":1789376324829,"field":"severity","old":"none","new":"medium"},{"seq":191415,"id":"CVE-2026-45527","ts":1789373240545,"field":"cvss","old":"4.3","new":null},{"seq":191414,"id":"CVE-2026-45527","ts":1789373240545,"field":"severity","old":"medium","new":"none"},{"seq":190200,"id":"CVE-2026-45527","ts":1789369202960,"field":"cvss","old":null,"new":"4.3"},{"seq":190199,"id":"CVE-2026-45527","ts":1789369202960,"field":"severity","old":"none","new":"medium"},{"seq":188987,"id":"CVE-2026-45527","ts":1789368105678,"field":"cvss","old":"4.3","new":null},{"seq":188986,"id":"CVE-2026-45527","ts":1789368105678,"field":"severity","old":"medium","new":"none"},{"seq":187770,"id":"CVE-2026-45527","ts":1789365062606,"field":"cvss","old":null,"new":"4.3"},{"seq":187769,"id":"CVE-2026-45527","ts":1789365062606,"field":"severity","old":"none","new":"medium"},{"seq":186557,"id":"CVE-2026-45527","ts":1789363092644,"field":"cvss","old":"4.3","new":null},{"seq":186556,"id":"CVE-2026-45527","ts":1789363092644,"field":"severity","old":"medium","new":"none"},{"seq":185343,"id":"CVE-2026-45527","ts":1789361024324,"field":"cvss","old":null,"new":"4.3"},{"seq":185342,"id":"CVE-2026-45527","ts":1789361024324,"field":"severity","old":"none","new":"medium"},{"seq":184130,"id":"CVE-2026-45527","ts":1789358007608,"field":"cvss","old":"4.3","new":null},{"seq":184129,"id":"CVE-2026-45527","ts":1789358007608,"field":"severity","old":"medium","new":"none"},{"seq":182381,"id":"CVE-2026-45527","ts":1789354155706,"field":"cvss","old":null,"new":"4.3"},{"seq":182380,"id":"CVE-2026-45527","ts":1789354155706,"field":"severity","old":"none","new":"medium"},{"seq":181174,"id":"CVE-2026-45527","ts":1789352997975,"field":"cvss","old":"4.3","new":null},{"seq":181173,"id":"CVE-2026-45527","ts":1789352997975,"field":"severity","old":"medium","new":"none"},{"seq":179967,"id":"CVE-2026-45527","ts":1789350073764,"field":"cvss","old":null,"new":"4.3"},{"seq":179966,"id":"CVE-2026-45527","ts":1789350073764,"field":"severity","old":"none","new":"medium"},{"seq":178760,"id":"CVE-2026-45527","ts":1789347933037,"field":"cvss","old":"4.3","new":null},{"seq":178759,"id":"CVE-2026-45527","ts":1789347933037,"field":"severity","old":"medium","new":"none"},{"seq":177553,"id":"CVE-2026-45527","ts":1789346218783,"field":"cvss","old":null,"new":"4.3"},{"seq":177552,"id":"CVE-2026-45527","ts":1789346218783,"field":"severity","old":"none","new":"medium"},{"seq":176346,"id":"CVE-2026-45527","ts":1789342841404,"field":"cvss","old":"4.3","new":null},{"seq":176345,"id":"CVE-2026-45527","ts":1789342841404,"field":"severity","old":"medium","new":"none"},{"seq":175800,"id":"CVE-2026-45527","ts":1789338624539,"field":"cvss","old":null,"new":"4.3"},{"seq":175799,"id":"CVE-2026-45527","ts":1789338624539,"field":"severity","old":"none","new":"medium"},{"seq":175670,"id":"CVE-2026-45527","ts":1789338463827,"field":"cvss","old":"4.3","new":null},{"seq":175669,"id":"CVE-2026-45527","ts":1789338463827,"field":"severity","old":"medium","new":"none"},{"seq":174465,"id":"CVE-2026-45527","ts":1789334653712,"field":"cvss","old":null,"new":"4.3"},{"seq":174464,"id":"CVE-2026-45527","ts":1789334653712,"field":"severity","old":"none","new":"medium"},{"seq":173260,"id":"CVE-2026-45527","ts":1789333341318,"field":"cvss","old":"4.3","new":null},{"seq":173259,"id":"CVE-2026-45527","ts":1789333341318,"field":"severity","old":"medium","new":"none"},{"seq":172074,"id":"CVE-2026-45527","ts":1789330940527,"field":"cvss","old":null,"new":"4.3"},{"seq":172073,"id":"CVE-2026-45527","ts":1789330940527,"field":"severity","old":"none","new":"medium"}]}