[ADT-3 R] RVC - CTS: StagefrightTest#testStagefright_bug_65483665 failure

2021-02-0100:00:00

Google

osv.dev

0.001 Low

EPSS

Percentile

39.9%

JSON

In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

CPENameOperatorVersion
platform/frameworks/aveq11
platform/frameworks/aveq10

CPE	Name	Operator	Version
	platform/frameworks/av	eq	11
	platform/frameworks/av	eq	10

References

android.googlesource.com/platform/frameworks/av/+/5fe4a516e5f194b03153a9f544b4f79da18c46d0

source.android.com/security/bulletin/2021-02-01

0.001 Low

EPSS

Percentile

39.9%

JSON

Related for OSV:ASB-A-160346309