In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"RCE"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "92434238328359427533805480715019279874",
"length": 2353
},
"id": "ASB-A-503553199-14f92940",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp",
"function": "CryptoHalHidl::decrypt"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"116398976274676807861815055289584391941",
"144317834197804583949997704591105021970",
"147067926655243079586098172697376885330",
"285942723831502126131651310527565932076",
"113135469251638982525309867776300725927",
"129093138904405014195526321142954592500",
"40895737787732672842662480881686154399",
"148783010962463127287152237223160048083",
"168955615500345530522198269264285280441",
"313379577613574381757961755922643803424",
"83643775489853916012032244592934079138",
"222521284778517660635009885536991421320",
"224966072402027058726543161868259709962",
"98276915140238329207042575926922369718",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"134364018144186566264125387777498138511",
"149868529080580380637069160283616294179",
"218253371168153009013225208173018335318",
"94954489847986270897814025138479459219",
"45452348122889708970495160176549014179",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"126192705618309597571155756133316523772",
"121466845780643183219795647460322583345",
"262145893499572881063429645494824764706",
"266482545227411205518500696047058882807",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"65013863520470319012736106432974236627",
"207196781909596399081362088776521240324",
"224783454770738306129470391464221900167",
"137412916443155729926891781434010460193",
"43998913130146404373175798102228618596",
"140324134320773802349254854693533219961",
"143510049864936205968745167793803641314",
"217630865572033851871391177092231929703",
"207597191516229269494749986377042254386",
"76224918123594561487589507487694908951",
"3315583183640191004808358994239975169",
"285942723831502126131651310527565932076",
"69377276031023104359280074458199200",
"31451994447820162396160053222244904029",
"103292613294194618301090808048417885156",
"240383456580837307609549218965605765866",
"304038706053863636628608171608407446510",
"19241433767607171292137599708155935456",
"40895737787732672842662480881686154399",
"148783010962463127287152237223160048083",
"6019751444033728271651278321775587380",
"298561757863771037628801531619808354220",
"87862376165794177556139523739713054007",
"86558970956858919306395349958263772137",
"283078373913132637920361235025203878981",
"207276655054412565720638547593102862345",
"7114904997161513856332652620509900859",
"327116597062309669203493986337525652112",
"226333665939632082820152346548804491537",
"15881474750550441046290989403409160152",
"181339437694405268335675565121145925012",
"250648878431517122544931706910189892077",
"299034132317418941813999046670409991286",
"262131140628425635339924652572131932065",
"245217853799649921407548552994557282721",
"1665265598784236769067475452822540325",
"56576164625086392116991568975763343249",
"279005522122040059704478803535762457368",
"84420590869722032276215518787457953036",
"282975713035789680523692938293529047918",
"20114173836857800832094337338252293498",
"120149911597141318724565993443871246697",
"213974903398465951796525481660494066625",
"57949316274029036641531162643638830274",
"281426264921375968003178789156568089006",
"57044648719669651296930628389230216866",
"122032936837011585324362025997363063415",
"214373073903971531096058767188982768501",
"263467896103836171117833028625040785815",
"110484051799541595975308021471984614192",
"72860955570186862848693659413217974433",
"1797775694978919423589994485615793459"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-5dc986ea",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "200880785744942607413972324021338563214",
"length": 1811
},
"id": "ASB-A-503553199-74b17b53",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp",
"function": "CryptoHalAidl::decrypt"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "237773480675931473865997001437160967337",
"length": 1688
},
"id": "ASB-A-503553199-78cbfbca",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp",
"function": "CryptoHalAidl::getKeyHandle"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"136008561558159789284414860699517000464",
"48635667608573517773652543280526156176",
"327092663611281307060453440134973237387",
"285942723831502126131651310527565932076",
"333546094596967691317017634368707064669",
"37092323462678109533672285988556644479",
"220206364210764897706975496541329102040",
"118978195093481164640349737686971345037",
"233265661325395061770860100951380337574",
"196756497943387505117716285871187629403",
"191274056032492496807218854557493005033",
"245346087701279825504642507143938474522",
"221656391331580916660637165273768986696",
"197509512699706598034966443902633891852",
"91807024994307410411347546242987825299",
"272109828673099621766261200380740956770",
"207278089970017946743408300575451191763",
"258666164178266283933372222089453439398",
"118332572697807363083292559092338100192",
"273038495151766704808870951527749028681",
"274634139571376668004029799847625548468",
"25883699426543808867326309373871996582",
"60740564716100833256380720417113043055",
"39458620374552610452147445337805116010",
"261074441871728517804849358376896350558",
"256043012620736512752740614296039015182",
"325491407528119250033729238168324735350",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"275056379839181534498614673314199877156",
"29239130922964393257781451674865544953",
"12578003895640142125219427048509205696",
"136144622019402990528837963678912623703",
"165429788176609819731150160320016343720",
"97289575300937336424996323910462288049",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"87214930949180766090976868650283061878",
"120907023513460396919560620619550025002",
"91629993407600847374262374916569297505",
"282540319885443976458835008791693562154",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"194681484590750655057844816950106742643",
"18991182563141039352516291201079683499",
"331270146420827840503178519813839606939",
"116788108612278656850534679359039800622",
"43054030431655639192701776020475262316",
"87434548352434590928216364180120070439",
"109046738105289833418291027950127217119",
"270542522638883787688999035069556902205",
"281471280782935070035228086677293807404",
"36256514487544869762194684680382629802",
"132239540320029282884077024506692346235",
"282464679918916064853664307207267990597"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-90a86452",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"RCE"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"116398976274676807861815055289584391941",
"144317834197804583949997704591105021970",
"147067926655243079586098172697376885330",
"285942723831502126131651310527565932076",
"113135469251638982525309867776300725927",
"75015547659590843503738443812212805285",
"254594088162181329254417714744487875650",
"155550046294398328893379336929957131126",
"111100672753509616641667418178021369443",
"89092135095173198862533738118120719175",
"250892092583501519193408132002799559603",
"57460130377377281888938520764923655239",
"88383886198204233019760992139271429034",
"276747662368406441524385544832867075017",
"57138066119033913426898533764205060256",
"262017377830166637243703104086683105607",
"134328847476308565405679037776609912206",
"210950281116017447448969185203946104468",
"169357150729953615763616905120740670960",
"50742627826775266345577540302875832381",
"274634139571376668004029799847625548468",
"83376367523670122139517861304614521770",
"313379577613574381757961755922643803424",
"83643775489853916012032244592934079138",
"222521284778517660635009885536991421320",
"224966072402027058726543161868259709962",
"98276915140238329207042575926922369718",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"134364018144186566264125387777498138511",
"149868529080580380637069160283616294179",
"218253371168153009013225208173018335318",
"94954489847986270897814025138479459219",
"45452348122889708970495160176549014179",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"126192705618309597571155756133316523772",
"121466845780643183219795647460322583345",
"262145893499572881063429645494824764706",
"266482545227411205518500696047058882807",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"65013863520470319012736106432974236627",
"207196781909596399081362088776521240324",
"224783454770738306129470391464221900167",
"137412916443155729926891781434010460193",
"43998913130146404373175798102228618596",
"140324134320773802349254854693533219961",
"143510049864936205968745167793803641314",
"217630865572033851871391177092231929703",
"190661198040804045582720927270526044982",
"140543795695882449030112144213893832564",
"198399827718627901327817990770396249386"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-b507c3c3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "287854885063672603448585964689917529946",
"length": 2093
},
"id": "ASB-A-503553199-c4ebbb96",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp",
"function": "CryptoHalAidl::decrypt"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"136008561558159789284414860699517000464",
"48635667608573517773652543280526156176",
"327092663611281307060453440134973237387",
"285942723831502126131651310527565932076",
"333546094596967691317017634368707064669",
"37092323462678109533672285988556644479",
"220206364210764897706975496541329102040",
"118978195093481164640349737686971345037",
"233265661325395061770860100951380337574",
"196756497943387505117716285871187629403",
"191274056032492496807218854557493005033",
"245346087701279825504642507143938474522",
"221656391331580916660637165273768986696",
"197509512699706598034966443902633891852",
"91807024994307410411347546242987825299",
"272109828673099621766261200380740956770",
"207278089970017946743408300575451191763",
"258666164178266283933372222089453439398",
"118332572697807363083292559092338100192",
"273038495151766704808870951527749028681",
"274634139571376668004029799847625548468",
"25883699426543808867326309373871996582",
"60740564716100833256380720417113043055",
"39458620374552610452147445337805116010",
"261074441871728517804849358376896350558",
"256043012620736512752740614296039015182",
"325491407528119250033729238168324735350",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"275056379839181534498614673314199877156",
"29239130922964393257781451674865544953",
"12578003895640142125219427048509205696",
"136144622019402990528837963678912623703",
"165429788176609819731150160320016343720",
"97289575300937336424996323910462288049",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"87214930949180766090976868650283061878",
"120907023513460396919560620619550025002",
"91629993407600847374262374916569297505",
"282540319885443976458835008791693562154",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"194681484590750655057844816950106742643",
"18991182563141039352516291201079683499",
"331270146420827840503178519813839606939",
"116788108612278656850534679359039800622",
"43054030431655639192701776020475262316",
"87434548352434590928216364180120070439",
"109046738105289833418291027950127217119",
"270542522638883787688999035069556902205",
"281471280782935070035228086677293807404",
"36256514487544869762194684680382629802",
"132239540320029282884077024506692346235",
"282464679918916064853664307207267990597"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-c720bb77",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "92434238328359427533805480715019279874",
"length": 2353
},
"id": "ASB-A-503553199-d865b3ff",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp",
"function": "CryptoHalHidl::decrypt"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"RCE"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"116398976274676807861815055289584391941",
"144317834197804583949997704591105021970",
"147067926655243079586098172697376885330",
"285942723831502126131651310527565932076",
"113135469251638982525309867776300725927",
"75015547659590843503738443812212805285",
"254594088162181329254417714744487875650",
"155550046294398328893379336929957131126",
"111100672753509616641667418178021369443",
"89092135095173198862533738118120719175",
"250892092583501519193408132002799559603",
"57460130377377281888938520764923655239",
"88383886198204233019760992139271429034",
"276747662368406441524385544832867075017",
"57138066119033913426898533764205060256",
"262017377830166637243703104086683105607",
"134328847476308565405679037776609912206",
"210950281116017447448969185203946104468",
"169357150729953615763616905120740670960",
"50742627826775266345577540302875832381",
"274634139571376668004029799847625548468",
"83376367523670122139517861304614521770",
"313379577613574381757961755922643803424",
"83643775489853916012032244592934079138",
"222521284778517660635009885536991421320",
"224966072402027058726543161868259709962",
"98276915140238329207042575926922369718",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"134364018144186566264125387777498138511",
"149868529080580380637069160283616294179",
"218253371168153009013225208173018335318",
"94954489847986270897814025138479459219",
"45452348122889708970495160176549014179",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"126192705618309597571155756133316523772",
"121466845780643183219795647460322583345",
"262145893499572881063429645494824764706",
"266482545227411205518500696047058882807",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"65013863520470319012736106432974236627",
"207196781909596399081362088776521240324",
"224783454770738306129470391464221900167",
"137412916443155729926891781434010460193",
"43998913130146404373175798102228618596",
"140324134320773802349254854693533219961",
"143510049864936205968745167793803641314",
"217630865572033851871391177092231929703",
"190661198040804045582720927270526044982",
"140543795695882449030112144213893832564",
"198399827718627901327817990770396249386"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-18feb29b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "287854885063672603448585964689917529946",
"length": 2093
},
"id": "ASB-A-503553199-ca3b4bf5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp",
"function": "CryptoHalAidl::decrypt"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "92434238328359427533805480715019279874",
"length": 2353
},
"id": "ASB-A-503553199-ec4ea0c2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp",
"function": "CryptoHalHidl::decrypt"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"136008561558159789284414860699517000464",
"48635667608573517773652543280526156176",
"327092663611281307060453440134973237387",
"285942723831502126131651310527565932076",
"333546094596967691317017634368707064669",
"37092323462678109533672285988556644479",
"220206364210764897706975496541329102040",
"118978195093481164640349737686971345037",
"233265661325395061770860100951380337574",
"196756497943387505117716285871187629403",
"191274056032492496807218854557493005033",
"245346087701279825504642507143938474522",
"221656391331580916660637165273768986696",
"197509512699706598034966443902633891852",
"91807024994307410411347546242987825299",
"272109828673099621766261200380740956770",
"207278089970017946743408300575451191763",
"258666164178266283933372222089453439398",
"118332572697807363083292559092338100192",
"273038495151766704808870951527749028681",
"274634139571376668004029799847625548468",
"25883699426543808867326309373871996582",
"60740564716100833256380720417113043055",
"39458620374552610452147445337805116010",
"261074441871728517804849358376896350558",
"256043012620736512752740614296039015182",
"325491407528119250033729238168324735350",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"275056379839181534498614673314199877156",
"29239130922964393257781451674865544953",
"12578003895640142125219427048509205696",
"136144622019402990528837963678912623703",
"165429788176609819731150160320016343720",
"97289575300937336424996323910462288049",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"87214930949180766090976868650283061878",
"120907023513460396919560620619550025002",
"91629993407600847374262374916569297505",
"282540319885443976458835008791693562154",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"194681484590750655057844816950106742643",
"18991182563141039352516291201079683499",
"331270146420827840503178519813839606939",
"116788108612278656850534679359039800622",
"43054030431655639192701776020475262316",
"87434548352434590928216364180120070439",
"109046738105289833418291027950127217119",
"270542522638883787688999035069556902205",
"281471280782935070035228086677293807404",
"36256514487544869762194684680382629802",
"132239540320029282884077024506692346235",
"282464679918916064853664307207267990597"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-ef0b1f00",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"RCE"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"116398976274676807861815055289584391941",
"144317834197804583949997704591105021970",
"147067926655243079586098172697376885330",
"285942723831502126131651310527565932076",
"113135469251638982525309867776300725927",
"75015547659590843503738443812212805285",
"254594088162181329254417714744487875650",
"155550046294398328893379336929957131126",
"111100672753509616641667418178021369443",
"89092135095173198862533738118120719175",
"250892092583501519193408132002799559603",
"57460130377377281888938520764923655239",
"88383886198204233019760992139271429034",
"276747662368406441524385544832867075017",
"57138066119033913426898533764205060256",
"262017377830166637243703104086683105607",
"134328847476308565405679037776609912206",
"210950281116017447448969185203946104468",
"169357150729953615763616905120740670960",
"50742627826775266345577540302875832381",
"274634139571376668004029799847625548468",
"83376367523670122139517861304614521770",
"313379577613574381757961755922643803424",
"83643775489853916012032244592934079138",
"222521284778517660635009885536991421320",
"224966072402027058726543161868259709962",
"98276915140238329207042575926922369718",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"134364018144186566264125387777498138511",
"149868529080580380637069160283616294179",
"218253371168153009013225208173018335318",
"94954489847986270897814025138479459219",
"45452348122889708970495160176549014179",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"126192705618309597571155756133316523772",
"121466845780643183219795647460322583345",
"262145893499572881063429645494824764706",
"266482545227411205518500696047058882807",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"65013863520470319012736106432974236627",
"207196781909596399081362088776521240324",
"224783454770738306129470391464221900167",
"137412916443155729926891781434010460193",
"43998913130146404373175798102228618596",
"140324134320773802349254854693533219961",
"143510049864936205968745167793803641314",
"217630865572033851871391177092231929703",
"190661198040804045582720927270526044982",
"140543795695882449030112144213893832564",
"198399827718627901327817990770396249386"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-b20c4759",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"136008561558159789284414860699517000464",
"48635667608573517773652543280526156176",
"327092663611281307060453440134973237387",
"285942723831502126131651310527565932076",
"333546094596967691317017634368707064669",
"37092323462678109533672285988556644479",
"220206364210764897706975496541329102040",
"118978195093481164640349737686971345037",
"233265661325395061770860100951380337574",
"196756497943387505117716285871187629403",
"191274056032492496807218854557493005033",
"245346087701279825504642507143938474522",
"221656391331580916660637165273768986696",
"197509512699706598034966443902633891852",
"91807024994307410411347546242987825299",
"272109828673099621766261200380740956770",
"207278089970017946743408300575451191763",
"258666164178266283933372222089453439398",
"118332572697807363083292559092338100192",
"273038495151766704808870951527749028681",
"274634139571376668004029799847625548468",
"25883699426543808867326309373871996582",
"60740564716100833256380720417113043055",
"39458620374552610452147445337805116010",
"261074441871728517804849358376896350558",
"256043012620736512752740614296039015182",
"325491407528119250033729238168324735350",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"275056379839181534498614673314199877156",
"29239130922964393257781451674865544953",
"12578003895640142125219427048509205696",
"136144622019402990528837963678912623703",
"165429788176609819731150160320016343720",
"97289575300937336424996323910462288049",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"87214930949180766090976868650283061878",
"120907023513460396919560620619550025002",
"91629993407600847374262374916569297505",
"282540319885443976458835008791693562154",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"194681484590750655057844816950106742643",
"18991182563141039352516291201079683499",
"331270146420827840503178519813839606939",
"116788108612278656850534679359039800622",
"43054030431655639192701776020475262316",
"87434548352434590928216364180120070439",
"109046738105289833418291027950127217119",
"270542522638883787688999035069556902205",
"281471280782935070035228086677293807404",
"36256514487544869762194684680382629802",
"132239540320029282884077024506692346235",
"282464679918916064853664307207267990597"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-c613b4ab",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "92434238328359427533805480715019279874",
"length": 2353
},
"id": "ASB-A-503553199-e0d1936a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp",
"function": "CryptoHalHidl::decrypt"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "287854885063672603448585964689917529946",
"length": 2093
},
"id": "ASB-A-503553199-e1b97126",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp",
"function": "CryptoHalAidl::decrypt"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"RCE"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "92434238328359427533805480715019279874",
"length": 2353
},
"id": "ASB-A-503553199-4eaf06e8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp",
"function": "CryptoHalHidl::decrypt"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "237773480675931473865997001437160967337",
"length": 1688
},
"id": "ASB-A-503553199-63d12a82",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp",
"function": "CryptoHalAidl::getKeyHandle"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"136008561558159789284414860699517000464",
"48635667608573517773652543280526156176",
"327092663611281307060453440134973237387",
"285942723831502126131651310527565932076",
"333546094596967691317017634368707064669",
"37092323462678109533672285988556644479",
"220206364210764897706975496541329102040",
"118978195093481164640349737686971345037",
"233265661325395061770860100951380337574",
"196756497943387505117716285871187629403",
"191274056032492496807218854557493005033",
"245346087701279825504642507143938474522",
"221656391331580916660637165273768986696",
"197509512699706598034966443902633891852",
"91807024994307410411347546242987825299",
"272109828673099621766261200380740956770",
"207278089970017946743408300575451191763",
"258666164178266283933372222089453439398",
"118332572697807363083292559092338100192",
"273038495151766704808870951527749028681",
"274634139571376668004029799847625548468",
"25883699426543808867326309373871996582",
"60740564716100833256380720417113043055",
"39458620374552610452147445337805116010",
"261074441871728517804849358376896350558",
"256043012620736512752740614296039015182",
"325491407528119250033729238168324735350",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"275056379839181534498614673314199877156",
"29239130922964393257781451674865544953",
"12578003895640142125219427048509205696",
"136144622019402990528837963678912623703",
"165429788176609819731150160320016343720",
"97289575300937336424996323910462288049",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"87214930949180766090976868650283061878",
"120907023513460396919560620619550025002",
"91629993407600847374262374916569297505",
"282540319885443976458835008791693562154",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"194681484590750655057844816950106742643",
"18991182563141039352516291201079683499",
"331270146420827840503178519813839606939",
"116788108612278656850534679359039800622",
"43054030431655639192701776020475262316",
"87434548352434590928216364180120070439",
"109046738105289833418291027950127217119",
"270542522638883787688999035069556902205",
"281471280782935070035228086677293807404",
"36256514487544869762194684680382629802",
"132239540320029282884077024506692346235",
"282464679918916064853664307207267990597"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-b4495efa",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"116398976274676807861815055289584391941",
"144317834197804583949997704591105021970",
"147067926655243079586098172697376885330",
"285942723831502126131651310527565932076",
"113135469251638982525309867776300725927",
"129093138904405014195526321142954592500",
"40895737787732672842662480881686154399",
"148783010962463127287152237223160048083",
"168955615500345530522198269264285280441",
"313379577613574381757961755922643803424",
"83643775489853916012032244592934079138",
"222521284778517660635009885536991421320",
"224966072402027058726543161868259709962",
"98276915140238329207042575926922369718",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"134364018144186566264125387777498138511",
"149868529080580380637069160283616294179",
"218253371168153009013225208173018335318",
"94954489847986270897814025138479459219",
"45452348122889708970495160176549014179",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"126192705618309597571155756133316523772",
"121466845780643183219795647460322583345",
"262145893499572881063429645494824764706",
"266482545227411205518500696047058882807",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"65013863520470319012736106432974236627",
"207196781909596399081362088776521240324",
"224783454770738306129470391464221900167",
"137412916443155729926891781434010460193",
"43998913130146404373175798102228618596",
"140324134320773802349254854693533219961",
"143510049864936205968745167793803641314",
"217630865572033851871391177092231929703",
"207597191516229269494749986377042254386",
"76224918123594561487589507487694908951",
"3315583183640191004808358994239975169",
"285942723831502126131651310527565932076",
"69377276031023104359280074458199200",
"31451994447820162396160053222244904029",
"103292613294194618301090808048417885156",
"240383456580837307609549218965605765866",
"304038706053863636628608171608407446510",
"19241433767607171292137599708155935456",
"40895737787732672842662480881686154399",
"148783010962463127287152237223160048083",
"6019751444033728271651278321775587380",
"298561757863771037628801531619808354220",
"87862376165794177556139523739713054007",
"86558970956858919306395349958263772137",
"283078373913132637920361235025203878981",
"207276655054412565720638547593102862345",
"7114904997161513856332652620509900859",
"327116597062309669203493986337525652112",
"226333665939632082820152346548804491537",
"15881474750550441046290989403409160152",
"181339437694405268335675565121145925012",
"250648878431517122544931706910189892077",
"299034132317418941813999046670409991286",
"262131140628425635339924652572131932065",
"245217853799649921407548552994557282721",
"1665265598784236769067475452822540325",
"56576164625086392116991568975763343249",
"279005522122040059704478803535762457368",
"84420590869722032276215518787457953036",
"282975713035789680523692938293529047918",
"20114173836857800832094337338252293498",
"120149911597141318724565993443871246697",
"213974903398465951796525481660494066625",
"57949316274029036641531162643638830274",
"281426264921375968003178789156568089006",
"57044648719669651296930628389230216866",
"122032936837011585324362025997363063415",
"214373073903971531096058767188982768501",
"263467896103836171117833028625040785815",
"110484051799541595975308021471984614192",
"72860955570186862848693659413217974433",
"1797775694978919423589994485615793459"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-d86c81bc",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "200880785744942607413972324021338563214",
"length": 1811
},
"id": "ASB-A-503553199-f1055926",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp",
"function": "CryptoHalAidl::decrypt"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"RCE"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "92434238328359427533805480715019279874",
"length": 2353
},
"id": "ASB-A-503553199-8c144e52",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp",
"function": "CryptoHalHidl::decrypt"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "287854885063672603448585964689917529946",
"length": 2093
},
"id": "ASB-A-503553199-96a2e361",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp",
"function": "CryptoHalAidl::decrypt"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"116398976274676807861815055289584391941",
"144317834197804583949997704591105021970",
"147067926655243079586098172697376885330",
"285942723831502126131651310527565932076",
"113135469251638982525309867776300725927",
"75015547659590843503738443812212805285",
"254594088162181329254417714744487875650",
"155550046294398328893379336929957131126",
"111100672753509616641667418178021369443",
"89092135095173198862533738118120719175",
"250892092583501519193408132002799559603",
"57460130377377281888938520764923655239",
"88383886198204233019760992139271429034",
"276747662368406441524385544832867075017",
"57138066119033913426898533764205060256",
"262017377830166637243703104086683105607",
"134328847476308565405679037776609912206",
"210950281116017447448969185203946104468",
"169357150729953615763616905120740670960",
"50742627826775266345577540302875832381",
"274634139571376668004029799847625548468",
"83376367523670122139517861304614521770",
"313379577613574381757961755922643803424",
"83643775489853916012032244592934079138",
"222521284778517660635009885536991421320",
"224966072402027058726543161868259709962",
"98276915140238329207042575926922369718",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"134364018144186566264125387777498138511",
"149868529080580380637069160283616294179",
"218253371168153009013225208173018335318",
"94954489847986270897814025138479459219",
"45452348122889708970495160176549014179",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"126192705618309597571155756133316523772",
"121466845780643183219795647460322583345",
"262145893499572881063429645494824764706",
"266482545227411205518500696047058882807",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"65013863520470319012736106432974236627",
"207196781909596399081362088776521240324",
"224783454770738306129470391464221900167",
"137412916443155729926891781434010460193",
"43998913130146404373175798102228618596",
"140324134320773802349254854693533219961",
"143510049864936205968745167793803641314",
"217630865572033851871391177092231929703",
"190661198040804045582720927270526044982",
"140543795695882449030112144213893832564",
"198399827718627901327817990770396249386"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-9a2c2e5d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a",
"target": {
"file": "drm/libmediadrm/CryptoHalAidl.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"136008561558159789284414860699517000464",
"48635667608573517773652543280526156176",
"327092663611281307060453440134973237387",
"285942723831502126131651310527565932076",
"333546094596967691317017634368707064669",
"37092323462678109533672285988556644479",
"220206364210764897706975496541329102040",
"118978195093481164640349737686971345037",
"233265661325395061770860100951380337574",
"196756497943387505117716285871187629403",
"191274056032492496807218854557493005033",
"245346087701279825504642507143938474522",
"221656391331580916660637165273768986696",
"197509512699706598034966443902633891852",
"91807024994307410411347546242987825299",
"272109828673099621766261200380740956770",
"207278089970017946743408300575451191763",
"258666164178266283933372222089453439398",
"118332572697807363083292559092338100192",
"273038495151766704808870951527749028681",
"274634139571376668004029799847625548468",
"25883699426543808867326309373871996582",
"60740564716100833256380720417113043055",
"39458620374552610452147445337805116010",
"261074441871728517804849358376896350558",
"256043012620736512752740614296039015182",
"325491407528119250033729238168324735350",
"105967158675506913482857986484934857338",
"87627611245370905733461130536352361091",
"319631866705782379589029214489785891044",
"316831759714769590309849094659016502662",
"275056379839181534498614673314199877156",
"29239130922964393257781451674865544953",
"12578003895640142125219427048509205696",
"136144622019402990528837963678912623703",
"165429788176609819731150160320016343720",
"97289575300937336424996323910462288049",
"62196554265242122542547959091529437358",
"65845628554467497228578527325017616198",
"87214930949180766090976868650283061878",
"120907023513460396919560620619550025002",
"91629993407600847374262374916569297505",
"282540319885443976458835008791693562154",
"161578376365977286697917926813255733255",
"54936742693030560663003013861217745854",
"337556584201638831303813697776112788202",
"25576530792198937991657152999747664945",
"246024261220907312872164542975194544338",
"20475559665730555343652481574716889247",
"4069355993382140807969228238149826210",
"194681484590750655057844816950106742643",
"18991182563141039352516291201079683499",
"331270146420827840503178519813839606939",
"116788108612278656850534679359039800622",
"43054030431655639192701776020475262316",
"87434548352434590928216364180120070439",
"109046738105289833418291027950127217119",
"270542522638883787688999035069556902205",
"281471280782935070035228086677293807404",
"36256514487544869762194684680382629802",
"132239540320029282884077024506692346235",
"282464679918916064853664307207267990597"
],
"threshold": 0.9
},
"id": "ASB-A-503553199-fb28b302",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a",
"target": {
"file": "drm/libmediadrm/CryptoHalHidl.cpp"
}
}
]
}