ASB-A-501467247

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-501467247.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-501467247
Aliases
  • A-501467247
  • CVE-2026-58933
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T16:56:25Z
Summary
[none]
Details

In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/av/+/f96778b1c09dadf119dc89ccdc030aafd2ca1232"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "177097525524166619768057861543823577820",
                "length":  9015
            },
            "id":  "ASB-A-501467247-3037f137",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/f96778b1c09dadf119dc89ccdc030aafd2ca1232",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp",
                "function":  "C2SoftApvDec::outputBuffer"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "54188562263792233002577015533996679196",
                "length":  4747
            },
            "id":  "ASB-A-501467247-5207db16",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/f96778b1c09dadf119dc89ccdc030aafd2ca1232",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp",
                "function":  "C2SoftApvDec::process"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "16265666744820221475281771137361814903",
                    "13691461543068655900772832046018554109",
                    "127891695354739092437265180096440632726",
                    "10264305234725924288253848067995582406",
                    "284738947892107953173605978835009329766",
                    "137969635652422045824621184586008298855",
                    "120617803438681886879521846681967728196",
                    "6082164603585023760962098921432761070",
                    "6832932605069395949314562082453745579",
                    "174665499851122666361230805535301903028",
                    "94685592512341428750641702180488254240",
                    "221978912978261298338948968263912952081",
                    "39026225067156604891824260993186349787",
                    "310271938091124703409103544820172948182",
                    "90502856049347749289058443668923839716",
                    "125409524848312952304955866848188003195"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-501467247-661a87f5",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/f96778b1c09dadf119dc89ccdc030aafd2ca1232",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-501467247.json"

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/av/+/5f5a0d25e71c1bfaaec4b0fd8e07ed1f310a6068"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "201665678393525683707306615144761322746",
                "length":  8840
            },
            "id":  "ASB-A-501467247-073c08ac",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/5f5a0d25e71c1bfaaec4b0fd8e07ed1f310a6068",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp",
                "function":  "C2SoftApvDec::outputBuffer"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "16265666744820221475281771137361814903",
                    "13691461543068655900772832046018554109",
                    "127891695354739092437265180096440632726",
                    "10264305234725924288253848067995582406",
                    "284738947892107953173605978835009329766",
                    "137969635652422045824621184586008298855",
                    "120617803438681886879521846681967728196",
                    "6082164603585023760962098921432761070",
                    "6832932605069395949314562082453745579",
                    "174665499851122666361230805535301903028",
                    "94685592512341428750641702180488254240",
                    "221978912978261298338948968263912952081",
                    "39026225067156604891824260993186349787",
                    "310271938091124703409103544820172948182",
                    "90502856049347749289058443668923839716",
                    "125409524848312952304955866848188003195"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-501467247-6e7ee7cb",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/5f5a0d25e71c1bfaaec4b0fd8e07ed1f310a6068",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "26286947209059836925671057043401762352",
                "length":  4434
            },
            "id":  "ASB-A-501467247-d0ba3f77",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/5f5a0d25e71c1bfaaec4b0fd8e07ed1f310a6068",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp",
                "function":  "C2SoftApvDec::process"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-501467247.json"

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/av/+/87074030d87b06a64be14a4a638b08174341d620"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "177097525524166619768057861543823577820",
                "length":  9015
            },
            "id":  "ASB-A-501467247-0b0cbe53",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/87074030d87b06a64be14a4a638b08174341d620",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp",
                "function":  "C2SoftApvDec::outputBuffer"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "16265666744820221475281771137361814903",
                    "13691461543068655900772832046018554109",
                    "127891695354739092437265180096440632726",
                    "10264305234725924288253848067995582406",
                    "284738947892107953173605978835009329766",
                    "137969635652422045824621184586008298855",
                    "120617803438681886879521846681967728196",
                    "6082164603585023760962098921432761070",
                    "6832932605069395949314562082453745579",
                    "174665499851122666361230805535301903028",
                    "94685592512341428750641702180488254240",
                    "221978912978261298338948968263912952081",
                    "39026225067156604891824260993186349787",
                    "310271938091124703409103544820172948182",
                    "90502856049347749289058443668923839716",
                    "125409524848312952304955866848188003195"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-501467247-d2ca4770",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/87074030d87b06a64be14a4a638b08174341d620",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "26286947209059836925671057043401762352",
                "length":  4434
            },
            "id":  "ASB-A-501467247-f7f36c91",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/87074030d87b06a64be14a4a638b08174341d620",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp",
                "function":  "C2SoftApvDec::process"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-501467247.json"

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/av/+/15891c9875f6c8767e924cf374940183ec94c325"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "26286947209059836925671057043401762352",
                "length":  4434
            },
            "id":  "ASB-A-501467247-63d12523",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/15891c9875f6c8767e924cf374940183ec94c325",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp",
                "function":  "C2SoftApvDec::process"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "16265666744820221475281771137361814903",
                    "13691461543068655900772832046018554109",
                    "127891695354739092437265180096440632726",
                    "10264305234725924288253848067995582406",
                    "284738947892107953173605978835009329766",
                    "137969635652422045824621184586008298855",
                    "120617803438681886879521846681967728196",
                    "6082164603585023760962098921432761070",
                    "6832932605069395949314562082453745579",
                    "174665499851122666361230805535301903028",
                    "94685592512341428750641702180488254240",
                    "221978912978261298338948968263912952081",
                    "39026225067156604891824260993186349787",
                    "310271938091124703409103544820172948182",
                    "90502856049347749289058443668923839716",
                    "125409524848312952304955866848188003195"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-501467247-8d179bc6",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/15891c9875f6c8767e924cf374940183ec94c325",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "177097525524166619768057861543823577820",
                "length":  9015
            },
            "id":  "ASB-A-501467247-e8f67b8e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/15891c9875f6c8767e924cf374940183ec94c325",
            "target":  {
                "file":  "media/codec2/components/apv/C2SoftApvDec.cpp",
                "function":  "C2SoftApvDec::outputBuffer"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-501467247.json"