{"id":"CVE-2026-59616","kind":"vulnerability","aliases":["CVE-2026-59616"],"related":[],"title":"hwcodec firmware: buffer overflow in prev_run_vcore allows local privilege escalation","description":"In prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.","summary":"A buffer overflow in the prev_run_vcore function of hwcodec_firmware can be triggered by a local process. The sources say it could lead to local privilege escalation when execution privileges are held and user interaction is involved.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"hwcodec_firmware","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["hwcodec-firmware","infrastructure"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:31+00:00","first_seen_at":"2026-11-10T20:46:14+00:00","triaged_at":"2026-11-10T20:49:38+00:00","updated_at":"2026-11-10T20:49:38+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T20:49:38Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"hwcodec firmware: buffer overflow in prev_run_vcore allows local privilege escalation","impact":"high","summary":"A buffer overflow in the prev_run_vcore function of hwcodec_firmware can be triggered by a local process. The sources say it could lead to local privilege escalation when execution privileges are held and user interaction is involved.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hwcodec-firmware"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"local code gains elevated privileges on the device","analyst_note":"Find the affected product list and fixed firmware version in the NVD entry and the vendor advisory for hwcodec_firmware.","how_to_check":"unknown","plain_action":"","product_name":"hwcodec_firmware","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources do not name the affected hardware, firmware version, or product range. Teams running devices that ship hwcodec firmware should confirm with their vendor whether they include the flawed component. unknown","user_interaction":"yes","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000678,"input_tokens":4538,"output_tokens":449,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-59616':15A,18A 'allow':9A 'buffer':3A,26B,78C,83C 'could':48B,86C 'cve':13A,16A 'due':80C 'escal':12A,53B,90C 'execut':55B,94C 'exploit':101C 'firmwar':2A,23B,36B,70C 'firmware':20A 'function':33B 'heap':77C 'held':58B 'hwcodec':1A,19A,22B,35B,69C 'hwcodec-firmwar':21B 'infrastructur':24B 'interact':61B,98C 'involv':63B 'lead':49B,87C 'local':10A,42B,51B,89C 'need':96C 'non':76C 'non-heap':75C 'overflow':4A,27B,79C,84C 'possibl':74C 'prev':6A,30B,65C 'privileg':11A,52B,56B,92C,95C 'process':43B 'run':7A,31B,66C 'say':46B 'sourc':45B 'trigger':39B 'user':60B,97C 'vcore':8A,32B,67C","nicknames":[],"mitigations":[],"who_affected":"The sources do not name the affected hardware, firmware version, or product range. Teams running devices that ship hwcodec firmware should confirm with their vendor whether they include the flawed component. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["hwcodecfirmware"],"ptokens":["firmware","hwcodec"],"labels":["hwcodecfirmware","infrastructure","unknown","vendor"],"campaign_type":null,"search_a":"'-2026':14A,17A '-59616':15A,18A 'allow':9A 'buffer':3A 'cve':13A,16A 'escal':12A 'firmwar':2A 'firmware':20A 'hwcodec':1A,19A 'local':10A 'overflow':4A 'prev':6A 'privileg':11A 'run':7A 'vcore':8A","search_b":"'buffer':26B 'could':48B 'escal':53B 'execut':55B 'firmwar':23B,36B 'function':33B 'held':58B 'hwcodec':22B,35B 'hwcodec-firmwar':21B 'infrastructur':24B 'interact':61B 'involv':63B 'lead':49B 'local':42B,51B 'overflow':27B 'prev':30B 'privileg':52B,56B 'process':43B 'run':31B 'say':46B 'sourc':45B 'trigger':39B 'user':60B 'vcore':32B","search_c":"'buffer':78C,83C 'could':86C 'due':80C 'escal':90C 'execut':94C 'exploit':101C 'firmwar':70C 'heap':77C 'hwcodec':69C 'interact':98C 'lead':87C 'local':89C 'need':96C 'non':76C 'non-heap':75C 'overflow':79C,84C 'possibl':74C 'prev':65C 'privileg':92C,95C 'run':66C 'user':97C 'vcore':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:31+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-59616","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59616","severity":null,"published_at":"2026-11-10T20:19:31+00:00","modified_at":"2026-11-10T20:19:31+00:00","first_seen_at":"2026-11-10T20:46:14+00:00","fetched_at":"2026-11-10T20:46:14+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}