NrmmDecoder Heap Buffer Overflow

The NrmmDecoder is a component of the Android Open Source Project (AOSP). It's used to decode video formats. This vulnerability allows an attacker to execute arbitrary code on your device by exploiting a heap buffer overflow in the NrmmDecoder.

Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

1. Update your device to the latest security patch level, which includes the fix for this vulnerability.
   • For Pixel devices: Go to Settings > System > Advanced > System update and check for updates.
   • For other compatible devices: Check with your manufacturer for available updates.
2. Immediate mitigations:
   • Restrict network access to your device (firewall it from the public internet)
   • Audit app permissions and ensure they are not excessive
   • Monitor for suspicious activity

• Vendor Advisory