{"id":"ASB-A-180643802","details":"In encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-180643802","CVE-2021-0601"],"modified":"2026-05-01T15:24:27.653932Z","published":"2021-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-07-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/external/libavc/+/986b1ff02fbf8551e92e6ba9cf64d5fca47957af"}],"affected":[{"package":{"name":"platform/external/libavc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-07-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee"],"vanir_signatures":[{"signature_version":"v1","id":"ASB-A-180643802-a1cea66c","deprecated":false,"target":{"file":"encoder/ih264e_encode.c"},"source":"https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee","digest":{"line_hashes":["152128979686507355399083197395511762325","235545754153587913987685669556146839908","299391878607679255579570198903437000985","214899986774788340182805700242888315087","90170871739304703676024247611335011793","338341256232503626339833401064382191077","319031204955547856882813367115909703360","338621859644450332677038639402955710732","194612750216407029034858922625555059254","48622303887002426794863616126266369657","5071574520099667180840358995296431232","224440547954643568732075908406388477055","210815134797275149822619722424026810468","280686452572912265750715486863273193624","339315792793344661289450215603944726695","48302890080237155647560266910544941623","83493336723794550489891997967858810267","239812073350062746969484720151900738030","203694765653438298258183752664330246534","124927458872649891757322455532215470760","10645617912484589472704075130130620553"],"threshold":0.9},"signature_type":"Line"},{"signature_version":"v1","id":"ASB-A-180643802-d375a3f0","deprecated":false,"target":{"file":"encoder/ih264e_encode.c","function":"ih264e_encode"},"source":"https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee","digest":{"length":8478,"function_hash":"63457180486982320506698189365348422781"},"signature_type":"Function"}],"types":["ID"],"spl":"2021-07-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-180643802.json"}},{"package":{"name":"platform/external/libavc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-07-01"}]}],"versions":["9"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee"],"vanir_signatures":[{"signature_version":"v1","id":"ASB-A-180643802-2ffd71bc","deprecated":false,"target":{"file":"encoder/ih264e_encode.c"},"source":"https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee","digest":{"line_hashes":["152128979686507355399083197395511762325","235545754153587913987685669556146839908","299391878607679255579570198903437000985","214899986774788340182805700242888315087","90170871739304703676024247611335011793","338341256232503626339833401064382191077","319031204955547856882813367115909703360","338621859644450332677038639402955710732","194612750216407029034858922625555059254","48622303887002426794863616126266369657","5071574520099667180840358995296431232","224440547954643568732075908406388477055","210815134797275149822619722424026810468","280686452572912265750715486863273193624","339315792793344661289450215603944726695","48302890080237155647560266910544941623","83493336723794550489891997967858810267","239812073350062746969484720151900738030","203694765653438298258183752664330246534","124927458872649891757322455532215470760","10645617912484589472704075130130620553"],"threshold":0.9},"signature_type":"Line"},{"signature_version":"v1","id":"ASB-A-180643802-a43fe2e3","deprecated":false,"target":{"file":"encoder/ih264e_encode.c","function":"ih264e_encode"},"source":"https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee","digest":{"length":8478,"function_hash":"63457180486982320506698189365348422781"},"signature_type":"Function"}],"types":["ID"],"spl":"2021-07-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-180643802.json"}},{"package":{"name":"platform/external/libavc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-07-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee"],"vanir_signatures":[{"signature_version":"v1","id":"ASB-A-180643802-6416af33","deprecated":false,"target":{"file":"encoder/ih264e_encode.c"},"source":"https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee","digest":{"line_hashes":["152128979686507355399083197395511762325","235545754153587913987685669556146839908","299391878607679255579570198903437000985","214899986774788340182805700242888315087","90170871739304703676024247611335011793","338341256232503626339833401064382191077","319031204955547856882813367115909703360","338621859644450332677038639402955710732","194612750216407029034858922625555059254","48622303887002426794863616126266369657","5071574520099667180840358995296431232","224440547954643568732075908406388477055","210815134797275149822619722424026810468","280686452572912265750715486863273193624","339315792793344661289450215603944726695","48302890080237155647560266910544941623","83493336723794550489891997967858810267","239812073350062746969484720151900738030","203694765653438298258183752664330246534","124927458872649891757322455532215470760","10645617912484589472704075130130620553"],"threshold":0.9},"signature_type":"Line"},{"signature_version":"v1","id":"ASB-A-180643802-9d5dface","deprecated":false,"target":{"file":"encoder/ih264e_encode.c","function":"ih264e_encode"},"source":"https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee","digest":{"length":8478,"function_hash":"63457180486982320506698189365348422781"},"signature_type":"Function"}],"types":["ID"],"spl":"2021-07-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-180643802.json"}},{"package":{"name":"platform/external/libavc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-07-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee"],"vanir_signatures":[{"signature_version":"v1","id":"ASB-A-180643802-1c22b89d","deprecated":false,"target":{"file":"encoder/ih264e_encode.c","function":"ih264e_encode"},"source":"https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee","digest":{"length":8478,"function_hash":"63457180486982320506698189365348422781"},"signature_type":"Function"},{"signature_version":"v1","id":"ASB-A-180643802-616588c0","deprecated":false,"target":{"file":"encoder/ih264e_encode.c"},"source":"https://android.googlesource.com/platform/external/libavc/+/3e73f0d56298ba6256927928669d0cc6e4b1c9ee","digest":{"line_hashes":["152128979686507355399083197395511762325","235545754153587913987685669556146839908","299391878607679255579570198903437000985","214899986774788340182805700242888315087","90170871739304703676024247611335011793","338341256232503626339833401064382191077","319031204955547856882813367115909703360","338621859644450332677038639402955710732","194612750216407029034858922625555059254","48622303887002426794863616126266369657","5071574520099667180840358995296431232","224440547954643568732075908406388477055","210815134797275149822619722424026810468","280686452572912265750715486863273193624","339315792793344661289450215603944726695","48302890080237155647560266910544941623","83493336723794550489891997967858810267","239812073350062746969484720151900738030","203694765653438298258183752664330246534","124927458872649891757322455532215470760","10645617912484589472704075130130620553"],"threshold":0.9},"signature_type":"Line"}],"types":["ID"],"spl":"2021-07-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-180643802.json"}}],"schema_version":"1.7.5"}