In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/av/+/4a8f9e81f1a3a68997640901c9609ac4aea70f8b"
],
"severity": "Moderate",
"spl": "2021-06-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"300585093410639656505867506267845368856",
"17267186837245124185419382308300513777",
"294294871855883533675667540792231867578",
"105031559810947757209742234609958146026"
],
"threshold": 0.9
},
"id": "PUB-A-172716941-04ac8281",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/4a8f9e81f1a3a68997640901c9609ac4aea70f8b",
"target": {
"file": "media/libstagefright/codecs/m4v_h263/enc/src/mp4enc_api.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "127043776089505450809936863600186662559",
"length": 20236
},
"id": "PUB-A-172716941-1c4b7f2b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/av/+/4a8f9e81f1a3a68997640901c9609ac4aea70f8b",
"target": {
"file": "media/libstagefright/codecs/m4v_h263/enc/src/mp4enc_api.cpp",
"function": "PVInitVideoEncoder"
}
}
]
}