CVE-2026-59601

MediumCVSS 5.3/10Last modified Nov 13, 2026

Description

In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-122CWE-693

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-596037.5In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message retCVE-2026-596046.2In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. This could lead CVE-2026-596066.7In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a permissiCVE-2026-596077.8In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in the code. This cCVE-2026-596087.8In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalaCVE-2026-596098.4In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse due to a use afCVE-2026-59617.3A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This vulnerability affects unknown code of the fCVE-2026-596117.5In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input vCVE-2026-596127.8In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalatiCVE-2026-596137.5In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input validaCVE-2026-59614In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a mCVE-2026-596167.8In prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escal
CVE-2026-59601: Medium severity, CVSS 5.3 | Vulnix