---
id: "CVE-2026-57009"
page: "https://infrastack.ai/live/CVE-2026-57009"
kind: "vulnerability"
aliases: ["CVE-2026-57009"]
title: "GC2AvcDec video decoder logic error allows local privilege escalation"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["android", "infrastructure", "video-decoder"]
not_affected_if: []
published_at: "2026-11-10T20:19:17+00:00"
first_seen_at: "2026-11-10T20:46:08+00:00"
updated_at: "2026-11-10T20:52:13+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57009", "first_seen_at": "2026-11-10T20:46:08+00:00"}]
exploit_sources: []
---

# GC2AvcDec video decoder logic error allows local privilege escalation

Link for people: https://infrastack.ai/live/CVE-2026-57009 (this .md is for agents)

A logic error in the GC2AvcDec component of GC2AvcDec.cpp can be abused to escalate privileges on the device. An attacker with local code execution could gain higher privileges, and exploitation requires user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T20:46:08+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-57009

## From the sources

In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_