CVE-2026-58812 · Infrastructure
NO FIX YET
A logic error in the VP9 picture decode code in fw_vp9_dec_pic.c can leak information locally. An attacker needs execution privileges on the device and user interaction to exploit it.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
The description names only the decoder firmware source file and does not name the affected product, versions or devices. Only a local attacker who can already run code on the device can exploit it, with user interaction. unknown
Not affected if no-local-code-execution
Who cares firmware, vp9-decoder
Unknown from the sources.
No fix yet, per the sources.
In decode of fw_vp9_dec_pic.c, there is a possible Logic error due to a logic error in the code. This could lead to local information disclosure with execution privileges needed. User interaction is for exploitation.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.