ASB-A-173720767

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-173720767.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-173720767
Aliases
Published
2021-05-01T00:00:00Z
Modified
2026-04-20T15:37:26.169566Z
Summary
[none]
Details

In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2021-05-01

Affected versions

8.*
8.1

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "137147752638932862531344470674846886878",
                    "231227451299928998277620542025444966994",
                    "83770904494722983864759919224197592579",
                    "150648564436782432705863751090426698079",
                    "196444031110439513754514230037196356470",
                    "271822407266642178302208433187822725631",
                    "322224461524526038265709943383573174557",
                    "272037574455818530587285395380489149941",
                    "66787794564371268727059360801326862866",
                    "224702763775032344028098836855576249824",
                    "22977814044481917704434935293811452310",
                    "131369053059246382188197360487718532980",
                    "272449105225689450702413453354131643521",
                    "273183550824803671003551279574819198361"
                ]
            },
            "id": "ASB-A-173720767-24418602",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/ae59a1c2c0831fdc541949a72742f8d619238071",
            "target": {
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        },
        {
            "digest": {
                "length": 190.0,
                "function_hash": "329994345319308338067852731081698756910"
            },
            "id": "ASB-A-173720767-510a8b79",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/ae59a1c2c0831fdc541949a72742f8d619238071",
            "target": {
                "function": "readVector",
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        },
        {
            "digest": {
                "length": 9597.0,
                "function_hash": "334001344346238633597741940204780235569"
            },
            "id": "ASB-A-173720767-94b7e0ee",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/ae59a1c2c0831fdc541949a72742f8d619238071",
            "target": {
                "function": "BnMediaPlayer::onTransact",
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/av/+/ae59a1c2c0831fdc541949a72742f8d619238071"
    ],
    "types": [
        "ID"
    ],
    "spl": "2021-05-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-173720767.json"

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2021-05-01

Affected versions

Other
9

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "137147752638932862531344470674846886878",
                    "231227451299928998277620542025444966994",
                    "83770904494722983864759919224197592579",
                    "233983285109276500546906613233327018833",
                    "114891956278159326936611967311390745678",
                    "271822407266642178302208433187822725631",
                    "322224461524526038265709943383573174557",
                    "272037574455818530587285395380489149941",
                    "66787794564371268727059360801326862866",
                    "224702763775032344028098836855576249824",
                    "22977814044481917704434935293811452310",
                    "131369053059246382188197360487718532980",
                    "272449105225689450702413453354131643521",
                    "273183550824803671003551279574819198361"
                ]
            },
            "id": "ASB-A-173720767-3a024b6b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/6f400642d200cece345bde5527426c1f824d66e0",
            "target": {
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        },
        {
            "digest": {
                "length": 190.0,
                "function_hash": "329994345319308338067852731081698756910"
            },
            "id": "ASB-A-173720767-6b1b49a2",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/6f400642d200cece345bde5527426c1f824d66e0",
            "target": {
                "function": "readVector",
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        },
        {
            "digest": {
                "length": 10517.0,
                "function_hash": "72819463654876945845308859680022199371"
            },
            "id": "ASB-A-173720767-fe306002",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/6f400642d200cece345bde5527426c1f824d66e0",
            "target": {
                "function": "BnMediaPlayer::onTransact",
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/av/+/6f400642d200cece345bde5527426c1f824d66e0"
    ],
    "types": [
        "ID"
    ],
    "spl": "2021-05-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-173720767.json"

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2021-05-01

Affected versions

Other
10

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "137147752638932862531344470674846886878",
                    "231227451299928998277620542025444966994",
                    "83770904494722983864759919224197592579",
                    "233983285109276500546906613233327018833",
                    "114891956278159326936611967311390745678",
                    "271822407266642178302208433187822725631",
                    "322224461524526038265709943383573174557",
                    "272037574455818530587285395380489149941",
                    "66787794564371268727059360801326862866",
                    "224702763775032344028098836855576249824",
                    "22977814044481917704434935293811452310",
                    "131369053059246382188197360487718532980",
                    "272449105225689450702413453354131643521",
                    "273183550824803671003551279574819198361"
                ]
            },
            "id": "ASB-A-173720767-81e6ef66",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/f8c7ecf6567635062ccb262b0d1e58486420aad1",
            "target": {
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        },
        {
            "digest": {
                "length": 190.0,
                "function_hash": "329994345319308338067852731081698756910"
            },
            "id": "ASB-A-173720767-9f1bd2d8",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/f8c7ecf6567635062ccb262b0d1e58486420aad1",
            "target": {
                "function": "readVector",
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        },
        {
            "digest": {
                "length": 10652.0,
                "function_hash": "4445341174580082019547846390917346058"
            },
            "id": "ASB-A-173720767-e2e43eca",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/f8c7ecf6567635062ccb262b0d1e58486420aad1",
            "target": {
                "function": "BnMediaPlayer::onTransact",
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/av/+/f8c7ecf6567635062ccb262b0d1e58486420aad1"
    ],
    "types": [
        "ID"
    ],
    "spl": "2021-05-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-173720767.json"

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-05-01

Affected versions

Other
11

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "21118745509113319667058368533170633004",
                    "41792605754478995712089602561934856009",
                    "166820881281461127374687190157666082393",
                    "3514191016888557444805117661765457900",
                    "233983285109276500546906613233327018833",
                    "114891956278159326936611967311390745678",
                    "271822407266642178302208433187822725631",
                    "322224461524526038265709943383573174557",
                    "272037574455818530587285395380489149941",
                    "66787794564371268727059360801326862866",
                    "224702763775032344028098836855576249824",
                    "22977814044481917704434935293811452310",
                    "131369053059246382188197360487718532980",
                    "272449105225689450702413453354131643521",
                    "273183550824803671003551279574819198361"
                ]
            },
            "id": "ASB-A-173720767-25db3550",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/346292cea9f4cc4173d4e0d9bd0844ea814cab95",
            "target": {
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        },
        {
            "digest": {
                "length": 190.0,
                "function_hash": "329994345319308338067852731081698756910"
            },
            "id": "ASB-A-173720767-9ac11c87",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/346292cea9f4cc4173d4e0d9bd0844ea814cab95",
            "target": {
                "function": "readVector",
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        },
        {
            "digest": {
                "length": 10652.0,
                "function_hash": "4445341174580082019547846390917346058"
            },
            "id": "ASB-A-173720767-a71007ac",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/346292cea9f4cc4173d4e0d9bd0844ea814cab95",
            "target": {
                "function": "BnMediaPlayer::onTransact",
                "file": "media/libmedia/IMediaPlayer.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/av/+/346292cea9f4cc4173d4e0d9bd0844ea814cab95"
    ],
    "types": [
        "ID"
    ],
    "spl": "2021-05-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-173720767.json"