{"id":"ASB-A-170583712","details":"In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-170583712","CVE-2021-0312"],"modified":"2026-04-28T15:17:37.552933Z","published":"2021-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"}],"affected":[{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2021-01-01"}]}],"versions":["8.0"],"ecosystem_specific":{"spl":"2021-01-01","vanir_signatures":[{"id":"ASB-A-170583712-752eb439","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["35969745467140153420269884546249223733","163890503151680721010229003767362840997","334944658491036062801750695156032612346","36470602929049131359654912299983453251","161513806015684829239961770287057044677","117570554900801317788512462967374031273","21923244347889040259252389135378428649","89393972909082461759015933345696837263","100409944432215240503304345631931477202","220449605193009327918995916309739600801","103753806716805338520374960634746074664","240941158663170686019195137218288933372","200024492283056690497080706707162076071","218687176731151315613749527035846505891","319536988498836699308303664318762097787","295922930630507173323190405350635329485"]},"signature_type":"Line","deprecated":false,"target":{"file":"media/extractors/wav/WAVExtractor.cpp"}},{"id":"ASB-A-170583712-9f20b3df","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"function_hash":"190432385760440718665531223676726104827","length":3173},"signature_type":"Function","deprecated":false,"target":{"function":"WAVSource::read","file":"media/extractors/wav/WAVExtractor.cpp"}},{"id":"ASB-A-170583712-9f702407","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"function_hash":"81378374973515139533293277370691355537","length":519},"signature_type":"Function","deprecated":false,"target":{"function":"WAVSource::WAVSource","file":"media/extractors/wav/WAVExtractor.cpp"}}],"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170583712.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-01-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2021-01-01","vanir_signatures":[{"id":"ASB-A-170583712-35f29c23","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"function_hash":"81378374973515139533293277370691355537","length":519},"signature_type":"Function","deprecated":false,"target":{"function":"WAVSource::WAVSource","file":"media/extractors/wav/WAVExtractor.cpp"}},{"id":"ASB-A-170583712-4a12fb49","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["35969745467140153420269884546249223733","163890503151680721010229003767362840997","334944658491036062801750695156032612346","36470602929049131359654912299983453251","161513806015684829239961770287057044677","117570554900801317788512462967374031273","21923244347889040259252389135378428649","89393972909082461759015933345696837263","100409944432215240503304345631931477202","220449605193009327918995916309739600801","103753806716805338520374960634746074664","240941158663170686019195137218288933372","200024492283056690497080706707162076071","218687176731151315613749527035846505891","319536988498836699308303664318762097787","295922930630507173323190405350635329485"]},"signature_type":"Line","deprecated":false,"target":{"file":"media/extractors/wav/WAVExtractor.cpp"}},{"id":"ASB-A-170583712-a144de18","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"function_hash":"190432385760440718665531223676726104827","length":3173},"signature_type":"Function","deprecated":false,"target":{"function":"WAVSource::read","file":"media/extractors/wav/WAVExtractor.cpp"}}],"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170583712.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-01-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2021-01-01","vanir_signatures":[{"id":"ASB-A-170583712-01e551c6","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["35969745467140153420269884546249223733","163890503151680721010229003767362840997","334944658491036062801750695156032612346","36470602929049131359654912299983453251","161513806015684829239961770287057044677","117570554900801317788512462967374031273","21923244347889040259252389135378428649","89393972909082461759015933345696837263","100409944432215240503304345631931477202","220449605193009327918995916309739600801","103753806716805338520374960634746074664","240941158663170686019195137218288933372","200024492283056690497080706707162076071","218687176731151315613749527035846505891","319536988498836699308303664318762097787","295922930630507173323190405350635329485"]},"signature_type":"Line","deprecated":false,"target":{"file":"media/extractors/wav/WAVExtractor.cpp"}},{"id":"ASB-A-170583712-9c667588","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"function_hash":"81378374973515139533293277370691355537","length":519},"signature_type":"Function","deprecated":false,"target":{"function":"WAVSource::WAVSource","file":"media/extractors/wav/WAVExtractor.cpp"}},{"id":"ASB-A-170583712-e311d696","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"function_hash":"190432385760440718665531223676726104827","length":3173},"signature_type":"Function","deprecated":false,"target":{"function":"WAVSource::read","file":"media/extractors/wav/WAVExtractor.cpp"}}],"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170583712.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-01-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2021-01-01","vanir_signatures":[{"id":"ASB-A-170583712-3c9e4e47","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"function_hash":"190432385760440718665531223676726104827","length":3173},"signature_type":"Function","deprecated":false,"target":{"function":"WAVSource::read","file":"media/extractors/wav/WAVExtractor.cpp"}},{"id":"ASB-A-170583712-57e3b4b9","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["35969745467140153420269884546249223733","163890503151680721010229003767362840997","334944658491036062801750695156032612346","36470602929049131359654912299983453251","161513806015684829239961770287057044677","117570554900801317788512462967374031273","21923244347889040259252389135378428649","89393972909082461759015933345696837263","100409944432215240503304345631931477202","220449605193009327918995916309739600801","103753806716805338520374960634746074664","240941158663170686019195137218288933372","200024492283056690497080706707162076071","218687176731151315613749527035846505891","319536988498836699308303664318762097787","295922930630507173323190405350635329485"]},"signature_type":"Line","deprecated":false,"target":{"file":"media/extractors/wav/WAVExtractor.cpp"}},{"id":"ASB-A-170583712-a4e60525","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"function_hash":"81378374973515139533293277370691355537","length":519},"signature_type":"Function","deprecated":false,"target":{"function":"WAVSource::WAVSource","file":"media/extractors/wav/WAVExtractor.cpp"}}],"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170583712.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-01-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-01-01","vanir_signatures":[{"id":"ASB-A-170583712-0ba3a3fc","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["35969745467140153420269884546249223733","163890503151680721010229003767362840997","334944658491036062801750695156032612346","36470602929049131359654912299983453251","161513806015684829239961770287057044677","117570554900801317788512462967374031273","21923244347889040259252389135378428649","89393972909082461759015933345696837263","100409944432215240503304345631931477202","220449605193009327918995916309739600801","103753806716805338520374960634746074664","240941158663170686019195137218288933372","200024492283056690497080706707162076071","218687176731151315613749527035846505891","319536988498836699308303664318762097787","295922930630507173323190405350635329485"]},"signature_type":"Line","deprecated":false,"target":{"file":"media/extractors/wav/WAVExtractor.cpp"}},{"id":"ASB-A-170583712-7a91cdf6","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"function_hash":"190432385760440718665531223676726104827","length":3173},"signature_type":"Function","deprecated":false,"target":{"function":"WAVSource::read","file":"media/extractors/wav/WAVExtractor.cpp"}},{"id":"ASB-A-170583712-f602efd7","source":"https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c","signature_version":"v1","digest":{"function_hash":"81378374973515139533293277370691355537","length":519},"signature_type":"Function","deprecated":false,"target":{"function":"WAVSource::WAVSource","file":"media/extractors/wav/WAVExtractor.cpp"}}],"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/bb460899b97f260e7ed556b578318b1133335e1c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170583712.json"}}],"schema_version":"1.7.5"}