{"id":"ASB-A-199065614","details":"In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-199065614","CVE-2021-0967"],"modified":"2026-07-09T15:25:53.339171538Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"}],"affected":[{"package":{"name":"platform/external/tremolo","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-12-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2021-12-01","severity":"Critical","types":["RCE"],"fixes":["https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98"],"vanir_signatures":[{"id":"ASB-A-199065614-70785f35","deprecated":false,"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["283907216798165190887483150812033779415","223758015922827605261211922374714667770","262018871547780842885395873034666610153","333815952413443724382805765283054342519","216146141015898520695890522937916786417","86583533079008663551828712955095069856","254509260040014177799783226571601448295"]},"signature_type":"Line","source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98","target":{"file":"Tremolo/floor0.c"}},{"id":"ASB-A-199065614-fb9ce46f","signature_version":"v1","deprecated":false,"digest":{"function_hash":"109006750531075486498998274146426777530","length":1046},"signature_type":"Function","source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98","target":{"file":"Tremolo/floor0.c","function":"floor0_inverse1"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-199065614.json"}},{"package":{"name":"platform/external/tremolo","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-12-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2021-12-01","severity":"High","types":["ID"],"fixes":["https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98"],"vanir_signatures":[{"id":"ASB-A-199065614-35eb8375","signature_version":"v1","deprecated":false,"digest":{"function_hash":"109006750531075486498998274146426777530","length":1046},"signature_type":"Function","source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98","target":{"file":"Tremolo/floor0.c","function":"floor0_inverse1"}},{"id":"ASB-A-199065614-f077b9be","signature_version":"v1","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["283907216798165190887483150812033779415","223758015922827605261211922374714667770","262018871547780842885395873034666610153","333815952413443724382805765283054342519","216146141015898520695890522937916786417","86583533079008663551828712955095069856","254509260040014177799783226571601448295"]},"signature_type":"Line","source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98","target":{"file":"Tremolo/floor0.c"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-199065614.json"}},{"package":{"name":"platform/external/tremolo","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-12-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-12-01","severity":"High","types":["ID"],"fixes":["https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98"],"vanir_signatures":[{"id":"ASB-A-199065614-401782d1","deprecated":false,"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["283907216798165190887483150812033779415","223758015922827605261211922374714667770","262018871547780842885395873034666610153","333815952413443724382805765283054342519","216146141015898520695890522937916786417","86583533079008663551828712955095069856","254509260040014177799783226571601448295"]},"signature_type":"Line","source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98","target":{"file":"Tremolo/floor0.c"}},{"id":"ASB-A-199065614-a4857e36","deprecated":false,"signature_version":"v1","digest":{"function_hash":"109006750531075486498998274146426777530","length":1046},"signature_type":"Function","source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98","target":{"file":"Tremolo/floor0.c","function":"floor0_inverse1"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-199065614.json"}},{"package":{"name":"platform/external/tremolo","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-12-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2021-12-01","severity":"High","types":["ID"],"fixes":["https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98"],"vanir_signatures":[{"id":"ASB-A-199065614-ac9bf025","deprecated":false,"signature_version":"v1","digest":{"function_hash":"109006750531075486498998274146426777530","length":1046},"signature_type":"Function","source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98","target":{"file":"Tremolo/floor0.c","function":"floor0_inverse1"}},{"id":"ASB-A-199065614-f563e363","deprecated":false,"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["283907216798165190887483150812033779415","223758015922827605261211922374714667770","262018871547780842885395873034666610153","333815952413443724382805765283054342519","216146141015898520695890522937916786417","86583533079008663551828712955095069856","254509260040014177799783226571601448295"]},"signature_type":"Line","source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98","target":{"file":"Tremolo/floor0.c"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-199065614.json"}}],"schema_version":"1.7.5"}