CVE-2024-40658 | Google Android 12/12L/13/14 SoftVideoDecoderOMXComponent.cpp getConfig out-of-bounds write

A vulnerability classified as critical was found in Google Android 12/12L/13/14. This vulnerability affects the function getConfig of the file SoftVideoDecoderOMXComponent.cpp. The manipulation leads to out-of-bounds write.

This vulnerability was named CVE-2024-40658. The attack needs to be approached locally. There is no exploit available.

It is recommended to apply a patch to fix this issue.