{"id":"ASB-A-170583712","details":"In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-170583712","CVE-2021-0312"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"}],"affected":[{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2021-01-01"}]}],"versions":["8.0"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["35969745467140153420269884546249223733","163890503151680721010229003767362840997","334944658491036062801750695156032612346","36470602929049131359654912299983453251","161513806015684829239961770287057044677","117570554900801317788512462967374031273","21923244347889040259252389135378428649","89393972909082461759015933345696837263","100409944432215240503304345631931477202","220449605193009327918995916309739600801","103753806716805338520374960634746074664","240941158663170686019195137218288933372","200024492283056690497080706707162076071","218687176731151315613749527035846505891","319536988498836699308303664318762097787","295922930630507173323190405350635329485"],"threshold":0.9},"id":"ASB-A-170583712-752eb439","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"file":"media/extractors/wav/WAVExtractor.cpp"}},{"target":{"file":"media/extractors/wav/WAVExtractor.cpp","function":"WAVSource::read"},"deprecated":false,"digest":{"length":3173,"function_hash":"190432385760440718665531223676726104827"},"id":"ASB-A-170583712-9f20b3df","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"},{"target":{"file":"media/extractors/wav/WAVExtractor.cpp","function":"WAVSource::WAVSource"},"deprecated":false,"digest":{"function_hash":"81378374973515139533293277370691355537","length":519},"id":"ASB-A-170583712-9f702407","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"],"severity":"High","spl":"2021-01-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170583712.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-01-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2021-01-01","types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"file":"media/extractors/wav/WAVExtractor.cpp","function":"WAVSource::WAVSource"},"deprecated":false,"digest":{"length":519,"function_hash":"81378374973515139533293277370691355537"},"id":"ASB-A-170583712-35f29c23"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"file":"media/extractors/wav/WAVExtractor.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["35969745467140153420269884546249223733","163890503151680721010229003767362840997","334944658491036062801750695156032612346","36470602929049131359654912299983453251","161513806015684829239961770287057044677","117570554900801317788512462967374031273","21923244347889040259252389135378428649","89393972909082461759015933345696837263","100409944432215240503304345631931477202","220449605193009327918995916309739600801","103753806716805338520374960634746074664","240941158663170686019195137218288933372","200024492283056690497080706707162076071","218687176731151315613749527035846505891","319536988498836699308303664318762097787","295922930630507173323190405350635329485"]},"id":"ASB-A-170583712-4a12fb49","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"190432385760440718665531223676726104827","length":3173},"id":"ASB-A-170583712-a144de18","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"function":"WAVSource::read","file":"media/extractors/wav/WAVExtractor.cpp"}}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170583712.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-01-01"}]}],"versions":["9"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"line_hashes":["35969745467140153420269884546249223733","163890503151680721010229003767362840997","334944658491036062801750695156032612346","36470602929049131359654912299983453251","161513806015684829239961770287057044677","117570554900801317788512462967374031273","21923244347889040259252389135378428649","89393972909082461759015933345696837263","100409944432215240503304345631931477202","220449605193009327918995916309739600801","103753806716805338520374960634746074664","240941158663170686019195137218288933372","200024492283056690497080706707162076071","218687176731151315613749527035846505891","319536988498836699308303664318762097787","295922930630507173323190405350635329485"],"threshold":0.9},"id":"ASB-A-170583712-01e551c6","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"file":"media/extractors/wav/WAVExtractor.cpp"},"deprecated":false},{"id":"ASB-A-170583712-9c667588","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"file":"media/extractors/wav/WAVExtractor.cpp","function":"WAVSource::WAVSource"},"deprecated":false,"digest":{"function_hash":"81378374973515139533293277370691355537","length":519}},{"id":"ASB-A-170583712-e311d696","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"file":"media/extractors/wav/WAVExtractor.cpp","function":"WAVSource::read"},"deprecated":false,"digest":{"length":3173,"function_hash":"190432385760440718665531223676726104827"}}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"],"severity":"High","spl":"2021-01-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170583712.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-01-01"}]}],"versions":["10"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"function":"WAVSource::read","file":"media/extractors/wav/WAVExtractor.cpp"},"deprecated":false,"digest":{"function_hash":"190432385760440718665531223676726104827","length":3173},"id":"ASB-A-170583712-3c9e4e47","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-170583712-57e3b4b9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"file":"media/extractors/wav/WAVExtractor.cpp"},"deprecated":false,"digest":{"line_hashes":["35969745467140153420269884546249223733","163890503151680721010229003767362840997","334944658491036062801750695156032612346","36470602929049131359654912299983453251","161513806015684829239961770287057044677","117570554900801317788512462967374031273","21923244347889040259252389135378428649","89393972909082461759015933345696837263","100409944432215240503304345631931477202","220449605193009327918995916309739600801","103753806716805338520374960634746074664","240941158663170686019195137218288933372","200024492283056690497080706707162076071","218687176731151315613749527035846505891","319536988498836699308303664318762097787","295922930630507173323190405350635329485"],"threshold":0.9}},{"id":"ASB-A-170583712-a4e60525","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"file":"media/extractors/wav/WAVExtractor.cpp","function":"WAVSource::WAVSource"},"deprecated":false,"digest":{"function_hash":"81378374973515139533293277370691355537","length":519}}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"],"severity":"High","spl":"2021-01-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170583712.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-01-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","spl":"2021-01-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"file":"media/extractors/wav/WAVExtractor.cpp"},"deprecated":false,"digest":{"line_hashes":["35969745467140153420269884546249223733","163890503151680721010229003767362840997","334944658491036062801750695156032612346","36470602929049131359654912299983453251","161513806015684829239961770287057044677","117570554900801317788512462967374031273","21923244347889040259252389135378428649","89393972909082461759015933345696837263","100409944432215240503304345631931477202","220449605193009327918995916309739600801","103753806716805338520374960634746074664","240941158663170686019195137218288933372","200024492283056690497080706707162076071","218687176731151315613749527035846505891","319536988498836699308303664318762097787","295922930630507173323190405350635329485"],"threshold":0.9},"id":"ASB-A-170583712-0ba3a3fc","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","target":{"function":"WAVSource::read","file":"media/extractors/wav/WAVExtractor.cpp"},"deprecated":false,"digest":{"function_hash":"190432385760440718665531223676726104827","length":3173},"id":"ASB-A-170583712-7a91cdf6","signature_type":"Function","signature_version":"v1"},{"target":{"file":"media/extractors/wav/WAVExtractor.cpp","function":"WAVSource::WAVSource"},"deprecated":false,"digest":{"length":519,"function_hash":"81378374973515139533293277370691355537"},"id":"ASB-A-170583712-f602efd7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170583712.json"}}],"schema_version":"1.9.0"}