[Information leak in frameworks/av/drm/mediadrm/plugins/clearkey/hidl/CryptoPlugin.cpp#186] - ASAN READ

2021-04-0100:00:00

Google

osv.dev

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

JSON

In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/frameworks/aveq10
platform/hardware/interfaceseq8.1
platform/frameworks/aveq11
platform/hardware/interfaceseq9
platform/hardware/interfaceseq11
platform/hardware/interfaceseq10
platform/frameworks/aveq8.1
platform/frameworks/aveq9

Name	Operator	Version
platform/frameworks/av	eq	10
platform/hardware/interfaces	eq	8.1
platform/frameworks/av	eq	11
platform/hardware/interfaces	eq	9
platform/hardware/interfaces	eq	11
platform/hardware/interfaces	eq	10
platform/frameworks/av	eq	8.1
platform/frameworks/av	eq	9