ASB-A-150159669

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-150159669.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-150159669
Aliases
Published
2020-09-01T00:00:00Z
Modified
2026-04-23T15:15:38.048727Z
Summary
[none]
Details

In Parsewave of easmdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly constrained process with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/external/sonivox

Package

Name
platform/external/sonivox

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.0:0
Fixed
8.0:2020-09-01

Affected versions

8.*
8.0

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "181829900119039477748077015636613502105",
                    "275044922620282737198137493696043620510",
                    "161414357728343601533595728216280844945",
                    "225226006498603879136487070114940970175",
                    "327898272321048511827431997499515651495",
                    "195343915250230334822997243566450755159",
                    "40372055926465743164709369153025518287",
                    "28868159654609936766653126901200468324",
                    "80578402922742619994225376658138454899",
                    "162651561295090071018388869952279649115",
                    "223672488514811391834808779992673668364",
                    "76241524776169937808472891474266439374",
                    "168400085527804080727041962341408644038",
                    "52835498832227710783626282201795988401"
                ]
            },
            "id": "ASB-A-150159669-58ae45fb",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 824.0,
                "function_hash": "314843587702427684691367451123225988324"
            },
            "id": "ASB-A-150159669-8d90d204",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_lrgn",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 2457.0,
                "function_hash": "169242754845313623448940926297571908202"
            },
            "id": "ASB-A-150159669-c45fd484",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_rgn",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 1088.0,
                "function_hash": "70004419322198664562718789362116696242"
            },
            "id": "ASB-A-150159669-e5c73c75",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_ptbl",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 520.0,
                "function_hash": "225007498631071085808511661137921002709"
            },
            "id": "ASB-A-150159669-ed4b0499",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_lins",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559"
    ],
    "types": [
        "ID"
    ],
    "spl": "2020-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-150159669.json"

Android / platform/external/sonivox

Package

Name
platform/external/sonivox

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2020-09-01

Affected versions

8.*
8.1

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 824.0,
                "function_hash": "314843587702427684691367451123225988324"
            },
            "id": "ASB-A-150159669-2d2286a7",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_lrgn",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 520.0,
                "function_hash": "225007498631071085808511661137921002709"
            },
            "id": "ASB-A-150159669-87e05c9b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_lins",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 1088.0,
                "function_hash": "70004419322198664562718789362116696242"
            },
            "id": "ASB-A-150159669-9b8d484c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_ptbl",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 2457.0,
                "function_hash": "169242754845313623448940926297571908202"
            },
            "id": "ASB-A-150159669-cdd04551",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_rgn",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "181829900119039477748077015636613502105",
                    "275044922620282737198137493696043620510",
                    "161414357728343601533595728216280844945",
                    "225226006498603879136487070114940970175",
                    "327898272321048511827431997499515651495",
                    "195343915250230334822997243566450755159",
                    "40372055926465743164709369153025518287",
                    "28868159654609936766653126901200468324",
                    "80578402922742619994225376658138454899",
                    "162651561295090071018388869952279649115",
                    "223672488514811391834808779992673668364",
                    "76241524776169937808472891474266439374",
                    "168400085527804080727041962341408644038",
                    "52835498832227710783626282201795988401"
                ]
            },
            "id": "ASB-A-150159669-d8fc508b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559"
    ],
    "types": [
        "ID"
    ],
    "spl": "2020-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-150159669.json"

Android / platform/external/sonivox

Package

Name
platform/external/sonivox

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2020-09-01

Affected versions

Other
9

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "181829900119039477748077015636613502105",
                    "275044922620282737198137493696043620510",
                    "161414357728343601533595728216280844945",
                    "225226006498603879136487070114940970175",
                    "327898272321048511827431997499515651495",
                    "195343915250230334822997243566450755159",
                    "40372055926465743164709369153025518287",
                    "28868159654609936766653126901200468324",
                    "80578402922742619994225376658138454899",
                    "162651561295090071018388869952279649115",
                    "223672488514811391834808779992673668364",
                    "76241524776169937808472891474266439374",
                    "168400085527804080727041962341408644038",
                    "52835498832227710783626282201795988401"
                ]
            },
            "id": "ASB-A-150159669-1e8d10d3",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 1088.0,
                "function_hash": "70004419322198664562718789362116696242"
            },
            "id": "ASB-A-150159669-235b8be9",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_ptbl",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 2457.0,
                "function_hash": "169242754845313623448940926297571908202"
            },
            "id": "ASB-A-150159669-4d407517",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_rgn",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 824.0,
                "function_hash": "314843587702427684691367451123225988324"
            },
            "id": "ASB-A-150159669-701318ab",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_lrgn",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 520.0,
                "function_hash": "225007498631071085808511661137921002709"
            },
            "id": "ASB-A-150159669-b466f188",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_lins",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559"
    ],
    "types": [
        "ID"
    ],
    "spl": "2020-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-150159669.json"

Android / platform/external/sonivox

Package

Name
platform/external/sonivox

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2020-09-01

Affected versions

Other
10

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "181829900119039477748077015636613502105",
                    "275044922620282737198137493696043620510",
                    "161414357728343601533595728216280844945",
                    "225226006498603879136487070114940970175",
                    "327898272321048511827431997499515651495",
                    "195343915250230334822997243566450755159",
                    "40372055926465743164709369153025518287",
                    "28868159654609936766653126901200468324",
                    "80578402922742619994225376658138454899",
                    "162651561295090071018388869952279649115",
                    "223672488514811391834808779992673668364",
                    "76241524776169937808472891474266439374",
                    "168400085527804080727041962341408644038",
                    "52835498832227710783626282201795988401"
                ]
            },
            "id": "ASB-A-150159669-2f45d6ab",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 1088.0,
                "function_hash": "70004419322198664562718789362116696242"
            },
            "id": "ASB-A-150159669-5ba8606c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_ptbl",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 2457.0,
                "function_hash": "169242754845313623448940926297571908202"
            },
            "id": "ASB-A-150159669-645f2c13",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_rgn",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 824.0,
                "function_hash": "314843587702427684691367451123225988324"
            },
            "id": "ASB-A-150159669-b55dbc92",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_lrgn",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        },
        {
            "digest": {
                "length": 520.0,
                "function_hash": "225007498631071085808511661137921002709"
            },
            "id": "ASB-A-150159669-d1c34010",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559",
            "target": {
                "function": "Parse_lins",
                "file": "arm-wt-22k/lib_src/eas_mdls.c"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/external/sonivox/+/e689e94f3b7473497052e81d906a10a82407e559"
    ],
    "types": [
        "ID"
    ],
    "spl": "2020-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-150159669.json"