ASB-A-478124606

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-478124606.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-478124606
Aliases
  • A-478124606
  • CVE-2026-58953
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:13Z
Summary
[none]
Details

In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/external/libopenapv

Package

Name
platform/external/libopenapv

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "304509763199965577256509434847247705885",
                "length":  1528
            },
            "id":  "ASB-A-478124606-06f2788b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv.c",
                "function":  "dec_tile"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "306804655663609708053570445986652972827",
                    "271769846158795932412533941088557846299",
                    "112725039428213394537080601234569683558",
                    "214980807704459883699026575005624121250",
                    "338475022908473599457876451107278927354",
                    "129856564121979987101349095868281975328",
                    "242653130481442389304060870280167761095",
                    "19308259885312375685746337165777377997",
                    "150440855871668812117387500967960312950",
                    "237877512175035462728050920614871973796",
                    "252423143556877284495697777512069414042",
                    "61240530469258535065456462259423966260",
                    "143343539864825261223885910677250485423",
                    "199532666720922573736772660516350799118",
                    "146226301090825216612362640354154089979",
                    "176007854568102923446011280445130182235",
                    "85431138741438263788386946471009644546",
                    "116135739372737370574656444719424773907",
                    "194333161924062695752037670500011229622",
                    "84527681032850362373221215218492932657",
                    "330829212851336659845811060538936316757",
                    "294944023577829576056060612975112069553",
                    "11144669591723803568800545081821014377",
                    "205009662030054944248770864599460471939",
                    "251291473154044715053758012145394088525",
                    "41654096441434770155285296418027351041",
                    "328167015960346937091485131308517119468",
                    "20578911872139070486687222702294768069",
                    "239414867931028058884868431129173036311",
                    "12789179172785958517994863701747246256",
                    "67444290424705675629706357587212145603",
                    "158785208660245008790867600711172988694",
                    "311502288273218698717497428406924691144",
                    "315367800638012135768278615368187544784",
                    "71672643260819613228664109529507406011",
                    "7853634349394412991935963511304339536",
                    "165949888578219813618922492546738911716",
                    "237744939036304065738139853108912846348",
                    "238959474484942934390120705823094406454",
                    "135694976395886761089745359255197330290",
                    "103132673492479084383104907917935944861",
                    "25418283315573414025102630921081130684",
                    "335467826470230855006771857751035619220",
                    "128331209363596338074436698001227040097",
                    "36707425311434315623998470648293536111",
                    "274838023426205517685950910692585820942",
                    "259191217111629825277269215498463173570",
                    "98177808795342052940002560203577178489",
                    "145029076144936712055427468182664847659",
                    "221287633221672739765505091662520635696",
                    "262470943217184442513977348239904549628",
                    "173639732677598946076231497405749832476",
                    "244615105662105983091734978711446354278",
                    "21018449969440410178863008171396888249",
                    "242252854948067413057046059910645579546",
                    "118349590793566906895442192158082968578",
                    "294399330592000323492380550160441018418",
                    "318192401988385998374077156004222022675",
                    "12677579531060476387850160464306973889",
                    "174599115623368950862509021293263403127",
                    "336986513905335099392235919030965343742",
                    "130992990759172349133139882588022623037",
                    "12845305304196998185692949225243329701",
                    "85715853989418861017597048391689759204",
                    "83260207085371833142489186515381243468",
                    "91208842172226989133040558546500255937",
                    "80266642597725350487066667390151499716",
                    "329688334822125548632723255542873377280"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-13256706",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_bs.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "147050356653216684935792238045634359841",
                    "123496936225680246358031799757483224112",
                    "108468987849756238203526932703015286336"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-1affa3c3",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_util.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "239329642146514748903978093476090598727",
                    "101109709445647059337800382182087333968",
                    "176046405233506440653480221972580046968",
                    "294174477047956553513649127000797317914",
                    "92218081432883727278144579584979645457",
                    "273048989266109036554905973230155631668",
                    "131666277530245530940960776689985285081",
                    "273184981547904851951165610296399744631",
                    "315214060938318040172042576520503603445",
                    "314126125481345429640827542972405497814",
                    "281984085029316835727903236777758036856",
                    "182893831875177041081401620446169956987",
                    "254168080067341664539420207172469196756",
                    "270659347195035892037179824466284256818",
                    "1885873059059631248358670437844860646",
                    "36557522877706766483917953179468526904",
                    "29441619613574880947181336571169337367",
                    "210028066345968799100768555683848586909",
                    "51258820658087766907403574593921480201",
                    "214122098925104425265452367613389888858",
                    "53885938550019886034590500589470600690",
                    "1618521718667826152626377611836360724",
                    "229593935279824006931151405555090849001",
                    "169525748279002839779985149513926473189",
                    "105996551948169960559938569987618915920",
                    "234854497332659537940337756036190549925",
                    "128920509490591609330158795742631845641",
                    "248349050343778294827386199050030771812",
                    "279763120690161080177032474953122780228",
                    "162935706999297070426506574264185122686",
                    "174605168341335202007655342266530897110",
                    "1814490243741682279243296330529410490",
                    "333454433662276566841560616737477149102",
                    "339753233595786447842404646605408185197",
                    "324864308235104476399383658457906605085",
                    "129581166109840480952838168061559133778",
                    "83852411108015663104263225862268165805",
                    "136781218407767748766908859247542972884",
                    "316939013605634255763082182884100836839",
                    "322677907805894311630098471024059827223",
                    "142275687027076111449207509124152496519",
                    "184785431483777127876798953210339412013",
                    "59106938563390495535365185168417307259",
                    "96183739387179562417019199986959627931",
                    "223125402843962535832248360112879936603",
                    "182971226288859980219919698629680058638",
                    "59250864092907034765585699566882015254",
                    "29755457884751664375758377593626658044",
                    "119324402956080843397358957091966819682",
                    "78915033041301612133919486716279642796",
                    "223211093430888477146531372307897440842",
                    "126340139673492301332787214545411264223",
                    "186239961034851186470776194620962884875",
                    "295806556824921962116527987823588526460",
                    "215986198611229174127753559492658147843",
                    "308949372283613419884281148474461124819",
                    "318439228090912079909564722051046189400",
                    "193680610683980090843527592510121842958",
                    "7828066856350110254512018871113895881",
                    "56308778265669279605770655914495907825",
                    "215233084059914509675558779650843201254",
                    "3837572756956821808094453142752620364",
                    "168820007040917980411651407480417715974",
                    "107806087649097319545689671750915423690",
                    "315849012866434527055330841009427073615",
                    "31466360744841959203378280586177519321",
                    "12913500712749295036472228529819126514",
                    "20406241604057270937152598257574114573",
                    "33037266663065025943695430794275420312",
                    "131848601318329001776686680398593989832",
                    "331705577761588409149184528469755880124",
                    "297717367304203077131142994209034743487",
                    "282035020923381897945115063423621215745",
                    "43550344364306564570964734786220665774",
                    "284399742772853075016280965455917196289",
                    "78056266077423531884559891796370956387",
                    "136985291040526130018158336875566632234",
                    "293479879884500827543794473855152777829",
                    "101093044892966115096908655085335995844",
                    "70947536885213457410629269953178080377",
                    "62864589195712273510709164707786880337",
                    "226944782384258045680483643330522244291",
                    "186255800714842142053193070458453047225",
                    "295736305746204396114197169908737195803",
                    "93871653515690149694395343548110070128",
                    "199397271668470670358634454868592661255",
                    "146729232025414793704214775599029398800",
                    "22901352951280097055438074499786079197",
                    "300498843291646514472694013008341245771",
                    "101477119255938033330232701287294757819",
                    "192742265263238391388546272328215697386",
                    "168561447191033538372252447592300351765",
                    "37477320204451634619002727673702708264",
                    "9035475226428839892137460094787793947",
                    "124088389033324053389333526190712546519",
                    "36386380494205004636193439412861049838",
                    "250353755738093301581054263957556455713",
                    "228099480152790068895883853517329640167",
                    "59107187795056781296333637527654447190",
                    "130806101748916765789821907318178191939",
                    "90613091123340144205575205044715288731",
                    "51141299669298409802223948235647789640",
                    "171181786958034312804215959867603077119",
                    "229914389482565099990640290597402886623",
                    "17088332540924695131607181558903436337",
                    "37140832682917657222634490197400116055",
                    "94974281826502338049089358415750443578",
                    "216676809737650295086482112875615391422",
                    "7358342534158399663086004234311308762",
                    "283937845236780742085033184666888599024"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-1cc363b3",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "16466931485842259072619927108384739158",
                "length":  525
            },
            "id":  "ASB-A-478124606-1cfb5f11",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_vlc.c",
                "function":  "dec_vlc_read_kparam0"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "66320045164103590324610109887674655984",
                "length":  283
            },
            "id":  "ASB-A-478124606-1d1b976e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_bs.c",
                "function":  "oapv_bsr_init"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "24299824089452477255494986298712744140",
                    "124428885708269670929362292312237158953",
                    "291349350841167724974127040080329753374",
                    "212588353507798469078058025939531368401"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-42c68dcc",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_def.h"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "27199045464969355336091187534681226732",
                    "161114728030417761492814237674770660262",
                    "110362082685764601468679850542153759077",
                    "158767099594946616623027512775582209642"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-43fbba91",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_util.h"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "198250105740684287578220815530859541630",
                "length":  775
            },
            "id":  "ASB-A-478124606-49a5442b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_vlc.c",
                "function":  "dec_vlc_read"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "133169548545843719690903104216108619919",
                    "176435776860383617290850880426760374226",
                    "221328182751127852249546860487057488949",
                    "36732613122352367222671873116867195773",
                    "158106557060977467071005935978803744150",
                    "89717524343309193563831639176681260866",
                    "10237655853521209206023734192286015275",
                    "260192127668897634885246901860032426904"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-6343e9cc",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_bs.h"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "335754887932454428605391085836974774803",
                    "23073939777133765238185730170854103037",
                    "222272779358279063980047276172481085286",
                    "159201349010399792549150310507773593624"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-6d54a424",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_vlc.h"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "74021786905311137162275303801071098230",
                    "26677658313310906307817955968255029035",
                    "303858925878780297480239578054940197224",
                    "235929103430223362826079516282464127497",
                    "239301728585373180550476678895101557161",
                    "8566693063610802158286835632209192044",
                    "302088609220890105451025977012436836341",
                    "334215800561222670216838392834907481777",
                    "282558485312344349227609501944819129874",
                    "126659844574465620064927835095020627273",
                    "106677581945077371867324509187338750707",
                    "151558839360520687717706232594343850154",
                    "147581319475150494157951370458192018318",
                    "302748215506842911373538919059108775804",
                    "74860011428565250318361712076481827844",
                    "97641507736914500207191860069416412179",
                    "83059087936997439508928961725772058727",
                    "3549865711972120249220306737536563183",
                    "109666576042273775729460453338269169382",
                    "147473072431640190936247871892466893884",
                    "155500121178186328230434587628917262460",
                    "277912535146321897015050596591114954099",
                    "143913562549146751349960878669883545112",
                    "223169346524573435355099022841021985016",
                    "309875227547343292514110431412504324503",
                    "72128049240308970200138367593713570397"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-8677493e",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_vlc.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "175092859714511684876533468835861832948",
                "length":  526
            },
            "id":  "ASB-A-478124606-8b59a79b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_bs.c",
                "function":  "oapv_bsr_peek"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "16980636363961906479745580504469655787",
                "length":  244
            },
            "id":  "ASB-A-478124606-9cb739b4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_bs.c",
                "function":  "bsr_skip_code"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "296678529983667054113800305808697830943",
                "length":  242
            },
            "id":  "ASB-A-478124606-a42b780a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_bs.c",
                "function":  "oapv_bsr_clz_in_code"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "323727509444774205589738595846239853095",
                "length":  1165
            },
            "id":  "ASB-A-478124606-c1adcaa6",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_vlc.c",
                "function":  "oapvd_vlc_ac_coef"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "218866355101441239577545530846259733104",
                "length":  2892
            },
            "id":  "ASB-A-478124606-cfc12a31",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv.c",
                "function":  "oapvd_decode"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "209881597997428982643119472358018285228",
                "length":  168
            },
            "id":  "ASB-A-478124606-d1a0c901",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv.c",
                "function":  "dec_frm_finish"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "228502162527749515677552261237725722741",
                "length":  154
            },
            "id":  "ASB-A-478124606-d8ed833b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_bs.c",
                "function":  "oapv_bsr_clz"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "134462073338955407775284094452072033714",
                "length":  993
            },
            "id":  "ASB-A-478124606-fc5b6513",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv_vlc.c",
                "function":  "oapvd_vlc_tile_header"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "53014484021076817078859907083358306847",
                "length":  1761
            },
            "id":  "ASB-A-478124606-fcb0ec7d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e",
            "target":  {
                "file":  "src/oapv.c",
                "function":  "dec_thread_tile"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-478124606.json"

Android / platform/external/libopenapv

Package

Name
platform/external/libopenapv

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "27199045464969355336091187534681226732",
                    "161114728030417761492814237674770660262",
                    "110362082685764601468679850542153759077",
                    "158767099594946616623027512775582209642"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-05f66bbf",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_util.h"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "147050356653216684935792238045634359841",
                    "123496936225680246358031799757483224112",
                    "108468987849756238203526932703015286336"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-12615ba4",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_util.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "296678529983667054113800305808697830943",
                "length":  242
            },
            "id":  "ASB-A-478124606-25234c90",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_bs.c",
                "function":  "oapv_bsr_clz_in_code"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "66320045164103590324610109887674655984",
                "length":  283
            },
            "id":  "ASB-A-478124606-38a43792",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_bs.c",
                "function":  "oapv_bsr_init"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "133169548545843719690903104216108619919",
                    "176435776860383617290850880426760374226",
                    "221328182751127852249546860487057488949",
                    "36732613122352367222671873116867195773",
                    "158106557060977467071005935978803744150",
                    "89717524343309193563831639176681260866",
                    "10237655853521209206023734192286015275",
                    "260192127668897634885246901860032426904"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-3f49014c",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_bs.h"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "74021786905311137162275303801071098230",
                    "26677658313310906307817955968255029035",
                    "303858925878780297480239578054940197224",
                    "235929103430223362826079516282464127497",
                    "239301728585373180550476678895101557161",
                    "8566693063610802158286835632209192044",
                    "302088609220890105451025977012436836341",
                    "334215800561222670216838392834907481777",
                    "282558485312344349227609501944819129874",
                    "126659844574465620064927835095020627273",
                    "106677581945077371867324509187338750707",
                    "151558839360520687717706232594343850154",
                    "147581319475150494157951370458192018318",
                    "302748215506842911373538919059108775804",
                    "74860011428565250318361712076481827844",
                    "97641507736914500207191860069416412179",
                    "83059087936997439508928961725772058727",
                    "3549865711972120249220306737536563183",
                    "109666576042273775729460453338269169382",
                    "147473072431640190936247871892466893884",
                    "155500121178186328230434587628917262460",
                    "277912535146321897015050596591114954099",
                    "143913562549146751349960878669883545112",
                    "223169346524573435355099022841021985016",
                    "309875227547343292514110431412504324503",
                    "72128049240308970200138367593713570397"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-55544b70",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_vlc.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "239329642146514748903978093476090598727",
                    "101109709445647059337800382182087333968",
                    "176046405233506440653480221972580046968",
                    "294174477047956553513649127000797317914",
                    "92218081432883727278144579584979645457",
                    "273048989266109036554905973230155631668",
                    "131666277530245530940960776689985285081",
                    "273184981547904851951165610296399744631",
                    "315214060938318040172042576520503603445",
                    "314126125481345429640827542972405497814",
                    "281984085029316835727903236777758036856",
                    "182893831875177041081401620446169956987",
                    "254168080067341664539420207172469196756",
                    "270659347195035892037179824466284256818",
                    "1885873059059631248358670437844860646",
                    "36557522877706766483917953179468526904",
                    "29441619613574880947181336571169337367",
                    "210028066345968799100768555683848586909",
                    "51258820658087766907403574593921480201",
                    "214122098925104425265452367613389888858",
                    "53885938550019886034590500589470600690",
                    "1618521718667826152626377611836360724",
                    "229593935279824006931151405555090849001",
                    "169525748279002839779985149513926473189",
                    "105996551948169960559938569987618915920",
                    "234854497332659537940337756036190549925",
                    "128920509490591609330158795742631845641",
                    "248349050343778294827386199050030771812",
                    "279763120690161080177032474953122780228",
                    "162935706999297070426506574264185122686",
                    "174605168341335202007655342266530897110",
                    "1814490243741682279243296330529410490",
                    "333454433662276566841560616737477149102",
                    "339753233595786447842404646605408185197",
                    "324864308235104476399383658457906605085",
                    "129581166109840480952838168061559133778",
                    "83852411108015663104263225862268165805",
                    "136781218407767748766908859247542972884",
                    "316939013605634255763082182884100836839",
                    "322677907805894311630098471024059827223",
                    "142275687027076111449207509124152496519",
                    "184785431483777127876798953210339412013",
                    "59106938563390495535365185168417307259",
                    "96183739387179562417019199986959627931",
                    "223125402843962535832248360112879936603",
                    "182971226288859980219919698629680058638",
                    "59250864092907034765585699566882015254",
                    "29755457884751664375758377593626658044",
                    "119324402956080843397358957091966819682",
                    "78915033041301612133919486716279642796",
                    "223211093430888477146531372307897440842",
                    "126340139673492301332787214545411264223",
                    "186239961034851186470776194620962884875",
                    "295806556824921962116527987823588526460",
                    "215986198611229174127753559492658147843",
                    "308949372283613419884281148474461124819",
                    "318439228090912079909564722051046189400",
                    "193680610683980090843527592510121842958",
                    "7828066856350110254512018871113895881",
                    "56308778265669279605770655914495907825",
                    "215233084059914509675558779650843201254",
                    "3837572756956821808094453142752620364",
                    "168820007040917980411651407480417715974",
                    "107806087649097319545689671750915423690",
                    "315849012866434527055330841009427073615",
                    "31466360744841959203378280586177519321",
                    "12913500712749295036472228529819126514",
                    "20406241604057270937152598257574114573",
                    "33037266663065025943695430794275420312",
                    "131848601318329001776686680398593989832",
                    "331705577761588409149184528469755880124",
                    "297717367304203077131142994209034743487",
                    "282035020923381897945115063423621215745",
                    "43550344364306564570964734786220665774",
                    "284399742772853075016280965455917196289",
                    "78056266077423531884559891796370956387",
                    "136985291040526130018158336875566632234",
                    "293479879884500827543794473855152777829",
                    "101093044892966115096908655085335995844",
                    "70947536885213457410629269953178080377",
                    "62864589195712273510709164707786880337",
                    "226944782384258045680483643330522244291",
                    "186255800714842142053193070458453047225",
                    "295736305746204396114197169908737195803",
                    "93871653515690149694395343548110070128",
                    "199397271668470670358634454868592661255",
                    "146729232025414793704214775599029398800",
                    "22901352951280097055438074499786079197",
                    "300498843291646514472694013008341245771",
                    "101477119255938033330232701287294757819",
                    "192742265263238391388546272328215697386",
                    "168561447191033538372252447592300351765",
                    "37477320204451634619002727673702708264",
                    "9035475226428839892137460094787793947",
                    "124088389033324053389333526190712546519",
                    "36386380494205004636193439412861049838",
                    "250353755738093301581054263957556455713",
                    "228099480152790068895883853517329640167",
                    "59107187795056781296333637527654447190",
                    "130806101748916765789821907318178191939",
                    "90613091123340144205575205044715288731",
                    "51141299669298409802223948235647789640",
                    "171181786958034312804215959867603077119",
                    "229914389482565099990640290597402886623",
                    "17088332540924695131607181558903436337",
                    "37140832682917657222634490197400116055",
                    "94974281826502338049089358415750443578",
                    "216676809737650295086482112875615391422",
                    "7358342534158399663086004234311308762",
                    "283937845236780742085033184666888599024"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-5917d11c",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "209881597997428982643119472358018285228",
                "length":  168
            },
            "id":  "ASB-A-478124606-7672e490",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv.c",
                "function":  "dec_frm_finish"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "16980636363961906479745580504469655787",
                "length":  244
            },
            "id":  "ASB-A-478124606-7afac9c7",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_bs.c",
                "function":  "bsr_skip_code"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "16466931485842259072619927108384739158",
                "length":  525
            },
            "id":  "ASB-A-478124606-7e79ea9a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_vlc.c",
                "function":  "dec_vlc_read_kparam0"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "218866355101441239577545530846259733104",
                "length":  2892
            },
            "id":  "ASB-A-478124606-83620ca1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv.c",
                "function":  "oapvd_decode"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "306804655663609708053570445986652972827",
                    "271769846158795932412533941088557846299",
                    "112725039428213394537080601234569683558",
                    "214980807704459883699026575005624121250",
                    "338475022908473599457876451107278927354",
                    "129856564121979987101349095868281975328",
                    "242653130481442389304060870280167761095",
                    "19308259885312375685746337165777377997",
                    "150440855871668812117387500967960312950",
                    "237877512175035462728050920614871973796",
                    "252423143556877284495697777512069414042",
                    "61240530469258535065456462259423966260",
                    "143343539864825261223885910677250485423",
                    "199532666720922573736772660516350799118",
                    "146226301090825216612362640354154089979",
                    "176007854568102923446011280445130182235",
                    "85431138741438263788386946471009644546",
                    "116135739372737370574656444719424773907",
                    "194333161924062695752037670500011229622",
                    "84527681032850362373221215218492932657",
                    "330829212851336659845811060538936316757",
                    "294944023577829576056060612975112069553",
                    "11144669591723803568800545081821014377",
                    "205009662030054944248770864599460471939",
                    "251291473154044715053758012145394088525",
                    "41654096441434770155285296418027351041",
                    "328167015960346937091485131308517119468",
                    "20578911872139070486687222702294768069",
                    "239414867931028058884868431129173036311",
                    "12789179172785958517994863701747246256",
                    "67444290424705675629706357587212145603",
                    "158785208660245008790867600711172988694",
                    "311502288273218698717497428406924691144",
                    "315367800638012135768278615368187544784",
                    "71672643260819613228664109529507406011",
                    "7853634349394412991935963511304339536",
                    "165949888578219813618922492546738911716",
                    "237744939036304065738139853108912846348",
                    "238959474484942934390120705823094406454",
                    "135694976395886761089745359255197330290",
                    "103132673492479084383104907917935944861",
                    "25418283315573414025102630921081130684",
                    "335467826470230855006771857751035619220",
                    "128331209363596338074436698001227040097",
                    "36707425311434315623998470648293536111",
                    "274838023426205517685950910692585820942",
                    "259191217111629825277269215498463173570",
                    "98177808795342052940002560203577178489",
                    "145029076144936712055427468182664847659",
                    "221287633221672739765505091662520635696",
                    "262470943217184442513977348239904549628",
                    "173639732677598946076231497405749832476",
                    "244615105662105983091734978711446354278",
                    "21018449969440410178863008171396888249",
                    "242252854948067413057046059910645579546",
                    "118349590793566906895442192158082968578",
                    "294399330592000323492380550160441018418",
                    "318192401988385998374077156004222022675",
                    "12677579531060476387850160464306973889",
                    "174599115623368950862509021293263403127",
                    "336986513905335099392235919030965343742",
                    "130992990759172349133139882588022623037",
                    "12845305304196998185692949225243329701",
                    "85715853989418861017597048391689759204",
                    "83260207085371833142489186515381243468",
                    "91208842172226989133040558546500255937",
                    "80266642597725350487066667390151499716",
                    "210580323162054253763715699525664376731"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-8d205f09",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_bs.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "53014484021076817078859907083358306847",
                "length":  1761
            },
            "id":  "ASB-A-478124606-a51c6639",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv.c",
                "function":  "dec_thread_tile"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "175092859714511684876533468835861832948",
                "length":  526
            },
            "id":  "ASB-A-478124606-b17dd50a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_bs.c",
                "function":  "oapv_bsr_peek"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "323727509444774205589738595846239853095",
                "length":  1165
            },
            "id":  "ASB-A-478124606-b26a7e35",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_vlc.c",
                "function":  "oapvd_vlc_ac_coef"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "198250105740684287578220815530859541630",
                "length":  775
            },
            "id":  "ASB-A-478124606-b9e0525f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_vlc.c",
                "function":  "dec_vlc_read"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "228502162527749515677552261237725722741",
                "length":  154
            },
            "id":  "ASB-A-478124606-d296696c",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_bs.c",
                "function":  "oapv_bsr_clz"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "335754887932454428605391085836974774803",
                    "23073939777133765238185730170854103037",
                    "222272779358279063980047276172481085286",
                    "159201349010399792549150310507773593624"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-d73ea00c",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_vlc.h"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "24299824089452477255494986298712744140",
                    "124428885708269670929362292312237158953",
                    "291349350841167724974127040080329753374",
                    "212588353507798469078058025939531368401"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-478124606-dccf698d",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_def.h"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "304509763199965577256509434847247705885",
                "length":  1528
            },
            "id":  "ASB-A-478124606-ecfa36e3",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv.c",
                "function":  "dec_tile"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "134462073338955407775284094452072033714",
                "length":  993
            },
            "id":  "ASB-A-478124606-efa36c1a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3",
            "target":  {
                "file":  "src/oapv_vlc.c",
                "function":  "oapvd_vlc_tile_header"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-478124606.json"

Android / platform/external/libopenapv

Package

Name
platform/external/libopenapv

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/external/libopenapv/+/8541da2c50be2190616ed9abaeea2c34f2aecedc"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-478124606.json"