ASB-A-514726373

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-514726373.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-514726373
Aliases
  • A-514726373
  • CVE-2026-58815
Published
2026-10-01T00:00:00Z
Modified
2026-10-05T16:41:13Z
Summary
[none]
Details

In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/av

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-10-01

Affected versions

Other
17-next

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891"
    ],
    "severity":  "High",
    "spl":  "2026-10-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "275150273072351215133578721630898545008",
                "length":  1002
            },
            "id":  "ASB-A-514726373-2a6c3e1a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::combineZoomAndCropLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "179758240752519011393216494687436240203",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860",
                    "75563956489123310105824543081396315280",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-2d7bcdbd",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "25411288601131841478158790363941039164",
                "length":  1690
            },
            "id":  "ASB-A-514726373-3ffb8ac5",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "177134945130609403526027331892132346226",
                "length":  1296
            },
            "id":  "ASB-A-514726373-9de92768",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "291967336686081296019815118771421633954",
                "length":  959
            },
            "id":  "ASB-A-514726373-b4fe01e4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "214233183269884780697834414422340922556",
                    "178051445211934578539417423094018238083",
                    "53668853485344262158026800101593436667",
                    "190492755055456371448222885857780737713",
                    "63048936980803247891752213114368544235",
                    "224599691522526178675736832332076337276",
                    "224619774011325978759073836401543319193",
                    "190492755055456371448222885857780737713"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-bb702274",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "315847301760250309934671351759096471318",
                    "270345038857063431117627370608846180218",
                    "336030648698709875256478862603203013004",
                    "195959486274956561089876305998896541669",
                    "32027843578070269219290192743029728842",
                    "229840293568576258897175234844520494355",
                    "121635816874031211927716652827650376561",
                    "195959486274956561089876305998896541669"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-dfee5c43",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "292953314012415161134905039138842414611",
                "length":  1162
            },
            "id":  "ASB-A-514726373-f6bbc522",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::separateZoomFromCropLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "234234116791490063955826466228807376022",
                "length":  2139
            },
            "id":  "ASB-A-514726373-f80e132f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureResult"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-514726373.json"
platform/frameworks/av

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-10-01

Affected versions

Other
15

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610"
    ],
    "severity":  "High",
    "spl":  "2026-10-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "291967336686081296019815118771421633954",
                "length":  959
            },
            "id":  "ASB-A-514726373-0ae2a478",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "315847301760250309934671351759096471318",
                    "270345038857063431117627370608846180218",
                    "336030648698709875256478862603203013004",
                    "195959486274956561089876305998896541669",
                    "32027843578070269219290192743029728842",
                    "229840293568576258897175234844520494355",
                    "121635816874031211927716652827650376561",
                    "195959486274956561089876305998896541669"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-1a709e59",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "177134945130609403526027331892132346226",
                "length":  1296
            },
            "id":  "ASB-A-514726373-71389839",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "234234116791490063955826466228807376022",
                "length":  2139
            },
            "id":  "ASB-A-514726373-7dc2849e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "292953314012415161134905039138842414611",
                "length":  1162
            },
            "id":  "ASB-A-514726373-aec5e19a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::separateZoomFromCropLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "179758240752519011393216494687436240203",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860",
                    "75563956489123310105824543081396315280",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-bb8dfdc0",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "25411288601131841478158790363941039164",
                "length":  1690
            },
            "id":  "ASB-A-514726373-c399b439",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "275150273072351215133578721630898545008",
                "length":  1002
            },
            "id":  "ASB-A-514726373-eab5f3da",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::combineZoomAndCropLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "214233183269884780697834414422340922556",
                    "178051445211934578539417423094018238083",
                    "53668853485344262158026800101593436667",
                    "190492755055456371448222885857780737713",
                    "63048936980803247891752213114368544235",
                    "224599691522526178675736832332076337276",
                    "224619774011325978759073836401543319193",
                    "190492755055456371448222885857780737713"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-f5cdaaf0",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-514726373.json"
platform/frameworks/av

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-10-01

Affected versions

Other
16

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe"
    ],
    "severity":  "High",
    "spl":  "2026-10-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "179758240752519011393216494687436240203",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860",
                    "75563956489123310105824543081396315280",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-2c4053e0",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "25411288601131841478158790363941039164",
                "length":  1690
            },
            "id":  "ASB-A-514726373-5c9a710b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "177134945130609403526027331892132346226",
                "length":  1296
            },
            "id":  "ASB-A-514726373-7ce5ed3e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "234234116791490063955826466228807376022",
                "length":  2139
            },
            "id":  "ASB-A-514726373-92bddfa8",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "275150273072351215133578721630898545008",
                "length":  1002
            },
            "id":  "ASB-A-514726373-998156e7",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::combineZoomAndCropLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "315847301760250309934671351759096471318",
                    "270345038857063431117627370608846180218",
                    "336030648698709875256478862603203013004",
                    "195959486274956561089876305998896541669",
                    "32027843578070269219290192743029728842",
                    "229840293568576258897175234844520494355",
                    "121635816874031211927716652827650376561",
                    "195959486274956561089876305998896541669"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-b8746f96",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "291967336686081296019815118771421633954",
                "length":  959
            },
            "id":  "ASB-A-514726373-bdd98909",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "214233183269884780697834414422340922556",
                    "178051445211934578539417423094018238083",
                    "53668853485344262158026800101593436667",
                    "190492755055456371448222885857780737713",
                    "63048936980803247891752213114368544235",
                    "224599691522526178675736832332076337276",
                    "224619774011325978759073836401543319193",
                    "190492755055456371448222885857780737713"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-debc4e61",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "292953314012415161134905039138842414611",
                "length":  1162
            },
            "id":  "ASB-A-514726373-e5c97bb8",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::separateZoomFromCropLocked"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-514726373.json"
platform/frameworks/av

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-10-01

Affected versions

Other
16-qpr2

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b"
    ],
    "severity":  "High",
    "spl":  "2026-10-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "292953314012415161134905039138842414611",
                "length":  1162
            },
            "id":  "ASB-A-514726373-167122d2",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::separateZoomFromCropLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "177134945130609403526027331892132346226",
                "length":  1296
            },
            "id":  "ASB-A-514726373-2c94ffe2",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "315847301760250309934671351759096471318",
                    "270345038857063431117627370608846180218",
                    "336030648698709875256478862603203013004",
                    "195959486274956561089876305998896541669",
                    "32027843578070269219290192743029728842",
                    "229840293568576258897175234844520494355",
                    "121635816874031211927716652827650376561",
                    "195959486274956561089876305998896541669"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-6a41498e",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "234234116791490063955826466228807376022",
                "length":  2139
            },
            "id":  "ASB-A-514726373-8f4453f6",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "25411288601131841478158790363941039164",
                "length":  1690
            },
            "id":  "ASB-A-514726373-93a42db1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "179758240752519011393216494687436240203",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860",
                    "75563956489123310105824543081396315280",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-acfc861c",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "214233183269884780697834414422340922556",
                    "178051445211934578539417423094018238083",
                    "53668853485344262158026800101593436667",
                    "190492755055456371448222885857780737713",
                    "63048936980803247891752213114368544235",
                    "224599691522526178675736832332076337276",
                    "224619774011325978759073836401543319193",
                    "190492755055456371448222885857780737713"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-d4044abc",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "275150273072351215133578721630898545008",
                "length":  1002
            },
            "id":  "ASB-A-514726373-df703c31",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::combineZoomAndCropLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "291967336686081296019815118771421633954",
                "length":  959
            },
            "id":  "ASB-A-514726373-ee0b094f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureRequest"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-514726373.json"
platform/frameworks/av

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-10-01

Affected versions

Other
17

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a"
    ],
    "severity":  "High",
    "spl":  "2026-10-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "177134945130609403526027331892132346226",
                "length":  1296
            },
            "id":  "ASB-A-514726373-3a3d5cc8",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "291967336686081296019815118771421633954",
                "length":  959
            },
            "id":  "ASB-A-514726373-4caebbf5",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "292953314012415161134905039138842414611",
                "length":  1162
            },
            "id":  "ASB-A-514726373-56c368a5",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::separateZoomFromCropLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "315847301760250309934671351759096471318",
                    "270345038857063431117627370608846180218",
                    "336030648698709875256478862603203013004",
                    "195959486274956561089876305998896541669",
                    "32027843578070269219290192743029728842",
                    "229840293568576258897175234844520494355",
                    "121635816874031211927716652827650376561",
                    "195959486274956561089876305998896541669"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-6f2334f5",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "25411288601131841478158790363941039164",
                "length":  1690
            },
            "id":  "ASB-A-514726373-79d84efc",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "214233183269884780697834414422340922556",
                    "178051445211934578539417423094018238083",
                    "53668853485344262158026800101593436667",
                    "190492755055456371448222885857780737713",
                    "63048936980803247891752213114368544235",
                    "224599691522526178675736832332076337276",
                    "224619774011325978759073836401543319193",
                    "190492755055456371448222885857780737713"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-80c06cdb",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "275150273072351215133578721630898545008",
                "length":  1002
            },
            "id":  "ASB-A-514726373-82ceb302",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::combineZoomAndCropLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "234234116791490063955826466228807376022",
                "length":  2139
            },
            "id":  "ASB-A-514726373-9f8fff56",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "179758240752519011393216494687436240203",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860",
                    "75563956489123310105824543081396315280",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-e6f22c6b",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-514726373.json"
platform/frameworks/av

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-10-01

Affected versions

Other
14

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae"
    ],
    "severity":  "High",
    "spl":  "2026-10-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "275150273072351215133578721630898545008",
                "length":  1002
            },
            "id":  "ASB-A-514726373-014bd552",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::combineZoomAndCropLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "234234116791490063955826466228807376022",
                "length":  2139
            },
            "id":  "ASB-A-514726373-3bf786ed",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "214233183269884780697834414422340922556",
                    "178051445211934578539417423094018238083",
                    "53668853485344262158026800101593436667",
                    "190492755055456371448222885857780737713",
                    "63048936980803247891752213114368544235",
                    "224599691522526178675736832332076337276",
                    "224619774011325978759073836401543319193",
                    "190492755055456371448222885857780737713"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-4238f369",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "315847301760250309934671351759096471318",
                    "270345038857063431117627370608846180218",
                    "336030648698709875256478862603203013004",
                    "195959486274956561089876305998896541669",
                    "32027843578070269219290192743029728842",
                    "229840293568576258897175234844520494355",
                    "121635816874031211927716652827650376561",
                    "195959486274956561089876305998896541669"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-55d39b2d",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "177134945130609403526027331892132346226",
                "length":  1296
            },
            "id":  "ASB-A-514726373-ad09d220",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureResult"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "179758240752519011393216494687436240203",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860",
                    "75563956489123310105824543081396315280",
                    "26137776904044601012398876760704663405",
                    "298309828796884160570095485289012676668",
                    "148004985610565716641359983312592148860"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514726373-c87ed3ef",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "25411288601131841478158790363941039164",
                "length":  1690
            },
            "id":  "ASB-A-514726373-d2141d69",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/RotateAndCropMapper.cpp",
                "function":  "RotateAndCropMapper::updateCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "291967336686081296019815118771421633954",
                "length":  959
            },
            "id":  "ASB-A-514726373-d9071d0c",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/DistortionMapper.cpp",
                "function":  "DistortionMapper::correctCaptureRequest"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "292953314012415161134905039138842414611",
                "length":  1162
            },
            "id":  "ASB-A-514726373-e39992c4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae",
            "target":  {
                "file":  "services/camera/libcameraservice/device3/ZoomRatioMapper.cpp",
                "function":  "ZoomRatioMapper::separateZoomFromCropLocked"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-514726373.json"