ASB-A-160346309

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-160346309.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-160346309

Aliases

A-160346309
CVE-2021-0335

Published

2021-02-01T00:00:00Z

Modified

2026-04-24T15:37:38.793646Z

Summary

[none]

Details

In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android / platform/frameworks/av

Package

Name: platform/frameworks/av

Affected ranges

Type: ECOSYSTEM
Events: Introduced

10:0

Fixed

10:2021-02-01

Affected versions

Other

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 24773.0,
                "function_hash": "156403520066969378917420964670012557434"
            },
            "id": "ASB-A-160346309-1b5a82e8",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/5fe4a516e5f194b03153a9f544b4f79da18c46d0",
            "target": {
                "function": "MediaCodec::onMessageReceived",
                "file": "media/libstagefright/MediaCodec.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "175518358395606551475236458693082707395",
                    "78282875977555182837643111024922754880",
                    "128399704599950713485704866834447045607",
                    "262751367214178538839473820290977228918",
                    "172612780151397525546112545339211743148",
                    "319539283947192176157209745994205694467",
                    "273248556596186671733519873946649685649",
                    "129071999506799661233396358447037667988",
                    "319072262300676424023159369269861975789",
                    "236629555272760352689175793201997028680",
                    "208312891030012485909298532738278861862",
                    "79268551593472731336139171829962969841"
                ]
            },
            "id": "ASB-A-160346309-c131a565",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/5fe4a516e5f194b03153a9f544b4f79da18c46d0",
            "target": {
                "file": "media/libstagefright/MediaCodec.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/av/+/5fe4a516e5f194b03153a9f544b4f79da18c46d0"
    ],
    "types": [
        "ID"
    ],
    "spl": "2021-02-01",
    "severity": "High"
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-160346309.json"