In WTInterpolateNoLoop of easwtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"72310663230475707915647199668845906824",
"139679271753726367591557254958294601188",
"298033914956701449834459594892389982814",
"217668571837934243891402720260636482954",
"18502597508148223644531323600690056264",
"14593401514144437976699628558059293216",
"165442401316347328660392367378029319580",
"235243037835305535519076035220725703283",
"35222342050603053417411412432547385839",
"339071380161650865093924943462963586879",
"103751839871934057808063796404643818331",
"101131050099693957166445146746675700465",
"39889290398108461417778246792892668655",
"259234348619225104787879816085938629572",
"231361967036040571724966677528908519580",
"275059295861124206757671160939923787269",
"214595645295990633473556637685062717452",
"10821762503205520951248569938463697741",
"198025968175308871864996960896913130623"
]
},
"id": "ASB-A-190286685-87961578",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/external/sonivox/+/8bfcd9c03af5170b5003712fb77f096b5c9f341b",
"target": {
"file": "arm-wt-22k/lib_src/eas_wtengine.c"
}
},
{
"digest": {
"length": 1015.0,
"function_hash": "235663036639182444856967758127903166780"
},
"id": "ASB-A-190286685-be73b5fe",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/external/sonivox/+/8bfcd9c03af5170b5003712fb77f096b5c9f341b",
"target": {
"function": "WT_InterpolateNoLoop",
"file": "arm-wt-22k/lib_src/eas_wtengine.c"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/external/sonivox/+/8bfcd9c03af5170b5003712fb77f096b5c9f341b"
],
"types": [
"ID"
],
"spl": "2021-11-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"72310663230475707915647199668845906824",
"139679271753726367591557254958294601188",
"298033914956701449834459594892389982814",
"217668571837934243891402720260636482954",
"18502597508148223644531323600690056264",
"14593401514144437976699628558059293216",
"165442401316347328660392367378029319580",
"235243037835305535519076035220725703283",
"35222342050603053417411412432547385839",
"339071380161650865093924943462963586879",
"103751839871934057808063796404643818331",
"101131050099693957166445146746675700465",
"39889290398108461417778246792892668655",
"259234348619225104787879816085938629572",
"231361967036040571724966677528908519580",
"275059295861124206757671160939923787269",
"214595645295990633473556637685062717452",
"10821762503205520951248569938463697741",
"198025968175308871864996960896913130623"
]
},
"id": "ASB-A-190286685-84159f65",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/external/sonivox/+/8bfcd9c03af5170b5003712fb77f096b5c9f341b",
"target": {
"file": "arm-wt-22k/lib_src/eas_wtengine.c"
}
},
{
"digest": {
"length": 1015.0,
"function_hash": "235663036639182444856967758127903166780"
},
"id": "ASB-A-190286685-bbb2caa4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/external/sonivox/+/8bfcd9c03af5170b5003712fb77f096b5c9f341b",
"target": {
"function": "WT_InterpolateNoLoop",
"file": "arm-wt-22k/lib_src/eas_wtengine.c"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/external/sonivox/+/8bfcd9c03af5170b5003712fb77f096b5c9f341b"
],
"types": [
"ID"
],
"spl": "2021-11-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"72310663230475707915647199668845906824",
"139679271753726367591557254958294601188",
"298033914956701449834459594892389982814",
"217668571837934243891402720260636482954",
"18502597508148223644531323600690056264",
"14593401514144437976699628558059293216",
"165442401316347328660392367378029319580",
"235243037835305535519076035220725703283",
"35222342050603053417411412432547385839",
"339071380161650865093924943462963586879",
"103751839871934057808063796404643818331",
"101131050099693957166445146746675700465",
"39889290398108461417778246792892668655",
"259234348619225104787879816085938629572",
"231361967036040571724966677528908519580",
"275059295861124206757671160939923787269",
"214595645295990633473556637685062717452",
"10821762503205520951248569938463697741",
"198025968175308871864996960896913130623"
]
},
"id": "ASB-A-190286685-f809cb86",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/external/sonivox/+/8bfcd9c03af5170b5003712fb77f096b5c9f341b",
"target": {
"file": "arm-wt-22k/lib_src/eas_wtengine.c"
}
},
{
"digest": {
"length": 1015.0,
"function_hash": "235663036639182444856967758127903166780"
},
"id": "ASB-A-190286685-faab01eb",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/external/sonivox/+/8bfcd9c03af5170b5003712fb77f096b5c9f341b",
"target": {
"function": "WT_InterpolateNoLoop",
"file": "arm-wt-22k/lib_src/eas_wtengine.c"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/external/sonivox/+/8bfcd9c03af5170b5003712fb77f096b5c9f341b"
],
"types": [
"ID"
],
"spl": "2021-11-01",
"severity": "High"
}