In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "275150273072351215133578721630898545008",
"length": 1002
},
"id": "ASB-A-514726373-2a6c3e1a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::combineZoomAndCropLocked"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"179758240752519011393216494687436240203",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860",
"75563956489123310105824543081396315280",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-2d7bcdbd",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25411288601131841478158790363941039164",
"length": 1690
},
"id": "ASB-A-514726373-3ffb8ac5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "177134945130609403526027331892132346226",
"length": 1296
},
"id": "ASB-A-514726373-9de92768",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "291967336686081296019815118771421633954",
"length": 959
},
"id": "ASB-A-514726373-b4fe01e4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"214233183269884780697834414422340922556",
"178051445211934578539417423094018238083",
"53668853485344262158026800101593436667",
"190492755055456371448222885857780737713",
"63048936980803247891752213114368544235",
"224599691522526178675736832332076337276",
"224619774011325978759073836401543319193",
"190492755055456371448222885857780737713"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-bb702274",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"315847301760250309934671351759096471318",
"270345038857063431117627370608846180218",
"336030648698709875256478862603203013004",
"195959486274956561089876305998896541669",
"32027843578070269219290192743029728842",
"229840293568576258897175234844520494355",
"121635816874031211927716652827650376561",
"195959486274956561089876305998896541669"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-dfee5c43",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "292953314012415161134905039138842414611",
"length": 1162
},
"id": "ASB-A-514726373-f6bbc522",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::separateZoomFromCropLocked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "234234116791490063955826466228807376022",
"length": 2139
},
"id": "ASB-A-514726373-f80e132f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureResult"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "291967336686081296019815118771421633954",
"length": 959
},
"id": "ASB-A-514726373-0ae2a478",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"315847301760250309934671351759096471318",
"270345038857063431117627370608846180218",
"336030648698709875256478862603203013004",
"195959486274956561089876305998896541669",
"32027843578070269219290192743029728842",
"229840293568576258897175234844520494355",
"121635816874031211927716652827650376561",
"195959486274956561089876305998896541669"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-1a709e59",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "177134945130609403526027331892132346226",
"length": 1296
},
"id": "ASB-A-514726373-71389839",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "234234116791490063955826466228807376022",
"length": 2139
},
"id": "ASB-A-514726373-7dc2849e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "292953314012415161134905039138842414611",
"length": 1162
},
"id": "ASB-A-514726373-aec5e19a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::separateZoomFromCropLocked"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"179758240752519011393216494687436240203",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860",
"75563956489123310105824543081396315280",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-bb8dfdc0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25411288601131841478158790363941039164",
"length": 1690
},
"id": "ASB-A-514726373-c399b439",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "275150273072351215133578721630898545008",
"length": 1002
},
"id": "ASB-A-514726373-eab5f3da",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::combineZoomAndCropLocked"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"214233183269884780697834414422340922556",
"178051445211934578539417423094018238083",
"53668853485344262158026800101593436667",
"190492755055456371448222885857780737713",
"63048936980803247891752213114368544235",
"224599691522526178675736832332076337276",
"224619774011325978759073836401543319193",
"190492755055456371448222885857780737713"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-f5cdaaf0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"179758240752519011393216494687436240203",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860",
"75563956489123310105824543081396315280",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-2c4053e0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25411288601131841478158790363941039164",
"length": 1690
},
"id": "ASB-A-514726373-5c9a710b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "177134945130609403526027331892132346226",
"length": 1296
},
"id": "ASB-A-514726373-7ce5ed3e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "234234116791490063955826466228807376022",
"length": 2139
},
"id": "ASB-A-514726373-92bddfa8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "275150273072351215133578721630898545008",
"length": 1002
},
"id": "ASB-A-514726373-998156e7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::combineZoomAndCropLocked"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"315847301760250309934671351759096471318",
"270345038857063431117627370608846180218",
"336030648698709875256478862603203013004",
"195959486274956561089876305998896541669",
"32027843578070269219290192743029728842",
"229840293568576258897175234844520494355",
"121635816874031211927716652827650376561",
"195959486274956561089876305998896541669"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-b8746f96",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "291967336686081296019815118771421633954",
"length": 959
},
"id": "ASB-A-514726373-bdd98909",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"214233183269884780697834414422340922556",
"178051445211934578539417423094018238083",
"53668853485344262158026800101593436667",
"190492755055456371448222885857780737713",
"63048936980803247891752213114368544235",
"224599691522526178675736832332076337276",
"224619774011325978759073836401543319193",
"190492755055456371448222885857780737713"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-debc4e61",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "292953314012415161134905039138842414611",
"length": 1162
},
"id": "ASB-A-514726373-e5c97bb8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::separateZoomFromCropLocked"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "292953314012415161134905039138842414611",
"length": 1162
},
"id": "ASB-A-514726373-167122d2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::separateZoomFromCropLocked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "177134945130609403526027331892132346226",
"length": 1296
},
"id": "ASB-A-514726373-2c94ffe2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"315847301760250309934671351759096471318",
"270345038857063431117627370608846180218",
"336030648698709875256478862603203013004",
"195959486274956561089876305998896541669",
"32027843578070269219290192743029728842",
"229840293568576258897175234844520494355",
"121635816874031211927716652827650376561",
"195959486274956561089876305998896541669"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-6a41498e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "234234116791490063955826466228807376022",
"length": 2139
},
"id": "ASB-A-514726373-8f4453f6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25411288601131841478158790363941039164",
"length": 1690
},
"id": "ASB-A-514726373-93a42db1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"179758240752519011393216494687436240203",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860",
"75563956489123310105824543081396315280",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-acfc861c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"214233183269884780697834414422340922556",
"178051445211934578539417423094018238083",
"53668853485344262158026800101593436667",
"190492755055456371448222885857780737713",
"63048936980803247891752213114368544235",
"224599691522526178675736832332076337276",
"224619774011325978759073836401543319193",
"190492755055456371448222885857780737713"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-d4044abc",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "275150273072351215133578721630898545008",
"length": 1002
},
"id": "ASB-A-514726373-df703c31",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::combineZoomAndCropLocked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "291967336686081296019815118771421633954",
"length": 959
},
"id": "ASB-A-514726373-ee0b094f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureRequest"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "177134945130609403526027331892132346226",
"length": 1296
},
"id": "ASB-A-514726373-3a3d5cc8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "291967336686081296019815118771421633954",
"length": 959
},
"id": "ASB-A-514726373-4caebbf5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "292953314012415161134905039138842414611",
"length": 1162
},
"id": "ASB-A-514726373-56c368a5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::separateZoomFromCropLocked"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"315847301760250309934671351759096471318",
"270345038857063431117627370608846180218",
"336030648698709875256478862603203013004",
"195959486274956561089876305998896541669",
"32027843578070269219290192743029728842",
"229840293568576258897175234844520494355",
"121635816874031211927716652827650376561",
"195959486274956561089876305998896541669"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-6f2334f5",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25411288601131841478158790363941039164",
"length": 1690
},
"id": "ASB-A-514726373-79d84efc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"214233183269884780697834414422340922556",
"178051445211934578539417423094018238083",
"53668853485344262158026800101593436667",
"190492755055456371448222885857780737713",
"63048936980803247891752213114368544235",
"224599691522526178675736832332076337276",
"224619774011325978759073836401543319193",
"190492755055456371448222885857780737713"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-80c06cdb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "275150273072351215133578721630898545008",
"length": 1002
},
"id": "ASB-A-514726373-82ceb302",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::combineZoomAndCropLocked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "234234116791490063955826466228807376022",
"length": 2139
},
"id": "ASB-A-514726373-9f8fff56",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"179758240752519011393216494687436240203",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860",
"75563956489123310105824543081396315280",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-e6f22c6b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "275150273072351215133578721630898545008",
"length": 1002
},
"id": "ASB-A-514726373-014bd552",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::combineZoomAndCropLocked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "234234116791490063955826466228807376022",
"length": 2139
},
"id": "ASB-A-514726373-3bf786ed",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"214233183269884780697834414422340922556",
"178051445211934578539417423094018238083",
"53668853485344262158026800101593436667",
"190492755055456371448222885857780737713",
"63048936980803247891752213114368544235",
"224599691522526178675736832332076337276",
"224619774011325978759073836401543319193",
"190492755055456371448222885857780737713"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-4238f369",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"315847301760250309934671351759096471318",
"270345038857063431117627370608846180218",
"336030648698709875256478862603203013004",
"195959486274956561089876305998896541669",
"32027843578070269219290192743029728842",
"229840293568576258897175234844520494355",
"121635816874031211927716652827650376561",
"195959486274956561089876305998896541669"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-55d39b2d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "177134945130609403526027331892132346226",
"length": 1296
},
"id": "ASB-A-514726373-ad09d220",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureResult"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"179758240752519011393216494687436240203",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860",
"75563956489123310105824543081396315280",
"26137776904044601012398876760704663405",
"298309828796884160570095485289012676668",
"148004985610565716641359983312592148860"
],
"threshold": 0.9
},
"id": "ASB-A-514726373-c87ed3ef",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25411288601131841478158790363941039164",
"length": 1690
},
"id": "ASB-A-514726373-d2141d69",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
"target": {
"file": "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
"function": "RotateAndCropMapper::updateCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "291967336686081296019815118771421633954",
"length": 959
},
"id": "ASB-A-514726373-d9071d0c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
"target": {
"file": "services/camera/libcameraservice/device3/DistortionMapper.cpp",
"function": "DistortionMapper::correctCaptureRequest"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "292953314012415161134905039138842414611",
"length": 1162
},
"id": "ASB-A-514726373-e39992c4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
"target": {
"file": "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
"function": "ZoomRatioMapper::separateZoomFromCropLocked"
}
}
]
}