ASB-A-514742326

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-514742326.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-514742326
Aliases
  • A-514742326
  • CVE-2026-59007
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:18Z
Summary
[none]
Details

In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/external/tremolo

Package

Name
platform/external/tremolo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/external/tremolo/+/7293b0a896ee258313883f5524808e4f7e805ec7"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "45318754271443057343943407153384163978",
                    "239111757268572975061013203374924915441",
                    "42781308874658528488261558576152563352",
                    "117661771552018516039628416726088430641",
                    "256359462783803452103432786340413599571",
                    "295174463214016385185206805881210205461",
                    "141779184894958483831093257684776325473",
                    "177546944375658555101314857342736091042",
                    "24501705285254126956623151758883478902",
                    "169905001120274148386038866990632095855",
                    "287220085769450145435636540042052020183",
                    "310414535695212554891768593564908799005",
                    "212061589184013496000955713186428926716"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514742326-34ab46c7",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/7293b0a896ee258313883f5524808e4f7e805ec7",
            "target":  {
                "file":  "Tremolo/codebook.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "23479044413098028882852927506384667309",
                "length":  1707
            },
            "id":  "ASB-A-514742326-b991a0af",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/7293b0a896ee258313883f5524808e4f7e805ec7",
            "target":  {
                "file":  "Tremolo/codebook.c",
                "function":  "decode_packed_entry_number"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"
platform/external/tremolo

Package

Name
platform/external/tremolo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/external/tremolo/+/f3acaf250bfaeebcac9ffc5b4a5c5f7888fedc61"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "23479044413098028882852927506384667309",
                "length":  1707
            },
            "id":  "ASB-A-514742326-df605e27",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/f3acaf250bfaeebcac9ffc5b4a5c5f7888fedc61",
            "target":  {
                "file":  "Tremolo/codebook.c",
                "function":  "decode_packed_entry_number"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "45318754271443057343943407153384163978",
                    "239111757268572975061013203374924915441",
                    "42781308874658528488261558576152563352",
                    "117661771552018516039628416726088430641",
                    "256359462783803452103432786340413599571",
                    "295174463214016385185206805881210205461",
                    "141779184894958483831093257684776325473",
                    "177546944375658555101314857342736091042",
                    "24501705285254126956623151758883478902",
                    "169905001120274148386038866990632095855",
                    "287220085769450145435636540042052020183",
                    "310414535695212554891768593564908799005",
                    "212061589184013496000955713186428926716"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514742326-e9e63343",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/f3acaf250bfaeebcac9ffc5b4a5c5f7888fedc61",
            "target":  {
                "file":  "Tremolo/codebook.c"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"
platform/external/tremolo

Package

Name
platform/external/tremolo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/external/tremolo/+/ac51ebd999b5ee84b82218e1c7952ebacc762c57"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "45318754271443057343943407153384163978",
                    "239111757268572975061013203374924915441",
                    "42781308874658528488261558576152563352",
                    "117661771552018516039628416726088430641",
                    "256359462783803452103432786340413599571",
                    "295174463214016385185206805881210205461",
                    "141779184894958483831093257684776325473",
                    "177546944375658555101314857342736091042",
                    "24501705285254126956623151758883478902",
                    "169905001120274148386038866990632095855",
                    "287220085769450145435636540042052020183",
                    "310414535695212554891768593564908799005",
                    "212061589184013496000955713186428926716"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514742326-b5599758",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/ac51ebd999b5ee84b82218e1c7952ebacc762c57",
            "target":  {
                "file":  "Tremolo/codebook.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "23479044413098028882852927506384667309",
                "length":  1707
            },
            "id":  "ASB-A-514742326-ebc0ffc8",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/ac51ebd999b5ee84b82218e1c7952ebacc762c57",
            "target":  {
                "file":  "Tremolo/codebook.c",
                "function":  "decode_packed_entry_number"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"
platform/external/tremolo

Package

Name
platform/external/tremolo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/external/tremolo/+/581dcb064d61921c1826afee12088c5553bfc344"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "45318754271443057343943407153384163978",
                    "239111757268572975061013203374924915441",
                    "42781308874658528488261558576152563352",
                    "117661771552018516039628416726088430641",
                    "256359462783803452103432786340413599571",
                    "295174463214016385185206805881210205461",
                    "141779184894958483831093257684776325473",
                    "177546944375658555101314857342736091042",
                    "24501705285254126956623151758883478902",
                    "169905001120274148386038866990632095855",
                    "287220085769450145435636540042052020183",
                    "310414535695212554891768593564908799005",
                    "212061589184013496000955713186428926716"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514742326-a78ba635",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/581dcb064d61921c1826afee12088c5553bfc344",
            "target":  {
                "file":  "Tremolo/codebook.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "23479044413098028882852927506384667309",
                "length":  1707
            },
            "id":  "ASB-A-514742326-e311f0a4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/581dcb064d61921c1826afee12088c5553bfc344",
            "target":  {
                "file":  "Tremolo/codebook.c",
                "function":  "decode_packed_entry_number"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"
platform/external/tremolo

Package

Name
platform/external/tremolo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/external/tremolo/+/42acdf0d25ce8017d274193210c3181d106e46e0"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "45318754271443057343943407153384163978",
                    "239111757268572975061013203374924915441",
                    "42781308874658528488261558576152563352",
                    "117661771552018516039628416726088430641",
                    "256359462783803452103432786340413599571",
                    "295174463214016385185206805881210205461",
                    "141779184894958483831093257684776325473",
                    "177546944375658555101314857342736091042",
                    "24501705285254126956623151758883478902",
                    "169905001120274148386038866990632095855",
                    "287220085769450145435636540042052020183",
                    "310414535695212554891768593564908799005",
                    "212061589184013496000955713186428926716"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514742326-44284347",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/42acdf0d25ce8017d274193210c3181d106e46e0",
            "target":  {
                "file":  "Tremolo/codebook.c"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "23479044413098028882852927506384667309",
                "length":  1707
            },
            "id":  "ASB-A-514742326-abe414cc",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/42acdf0d25ce8017d274193210c3181d106e46e0",
            "target":  {
                "file":  "Tremolo/codebook.c",
                "function":  "decode_packed_entry_number"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"
platform/external/tremolo

Package

Name
platform/external/tremolo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/external/tremolo/+/4b126f5f3f6e44cf2910dbe9dc0a5bba638e39ed"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "23479044413098028882852927506384667309",
                "length":  1707
            },
            "id":  "ASB-A-514742326-29424def",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/4b126f5f3f6e44cf2910dbe9dc0a5bba638e39ed",
            "target":  {
                "file":  "Tremolo/codebook.c",
                "function":  "decode_packed_entry_number"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "45318754271443057343943407153384163978",
                    "239111757268572975061013203374924915441",
                    "42781308874658528488261558576152563352",
                    "117661771552018516039628416726088430641",
                    "256359462783803452103432786340413599571",
                    "295174463214016385185206805881210205461",
                    "141779184894958483831093257684776325473",
                    "177546944375658555101314857342736091042",
                    "24501705285254126956623151758883478902",
                    "169905001120274148386038866990632095855",
                    "287220085769450145435636540042052020183",
                    "310414535695212554891768593564908799005",
                    "212061589184013496000955713186428926716"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-514742326-2a750fcc",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/external/tremolo/+/4b126f5f3f6e44cf2910dbe9dc0a5bba638e39ed",
            "target":  {
                "file":  "Tremolo/codebook.c"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"