In 'ih264efindbskipparams()' of ih264eme.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "severity": "Moderate", "vanir_signatures": [ { "deprecated": false, "target": { "file": "encoder/ih264e_api.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "200379714733293227417754227594358170013", "15268792044800260968382807296639589458", "290916752263289187891812336718207654893", "54901536950139771812429537628854285332" ] }, "source": "https://android.googlesource.com/platform/external/libavc/+/2f3d043b17d00df222ec19c11014c7de27caa6f5", "id": "PUB-A-193442575-8d68cb8d", "signature_type": "Line" }, { "deprecated": false, "target": { "function": "ih264e_init_mem_rec", "file": "encoder/ih264e_api.c" }, "signature_version": "v1", "digest": { "function_hash": "156282991969587907165341020502167311297", "length": 15858.0 }, "source": "https://android.googlesource.com/platform/external/libavc/+/2f3d043b17d00df222ec19c11014c7de27caa6f5", "id": "PUB-A-193442575-9873b76b", "signature_type": "Function" } ], "spl": "2021-12-01", "fixes": [ "https://android.googlesource.com/platform/external/libavc/+/2f3d043b17d00df222ec19c11014c7de27caa6f5" ], "types": [ "ID" ] }