Exploitation Summary
EIP tracks 4 public exploits for CVE-2026-0006. PoCs published by XiaomingX, adminlove520, XZ1r0.
AI-analyzed exploit summary The repository contains minimal and incomplete content with no functional exploit code. The README states 'şuan yok' (Turkish for 'not available now'), and the Python file appears to be unrelated placeholder text.
Description
In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Exploits (4)
The repository contains minimal and incomplete content with no functional exploit code. The README states 'şuan yok' (Turkish for 'not available now'), and the Python file appears to be unrelated placeholder text.
This repository contains a functional exploit for CVE-2026-0006, a heap buffer overflow in libopenapv (Android APV Codec). The exploit leverages a dimension mismatch between AU_INFO and FRAME PBUs to achieve zero-click remote code execution via a crafted MP4 file.
This repository contains a functional exploit for CVE-2026-0006, a heap buffer overflow in Android's APV decoder (libopenapv). The exploit generates a malicious MP4 file that triggers an out-of-bounds write by misleading the decoder about frame dimensions.
The repository contains minimal content with no functional exploit code. The README states 'şuan yok' (Turkish for 'not available now'), and the Python file appears to be unrelated to the CVE, discussing keyword search functionality instead.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H