{"id":"ASB-A-245860753","details":"In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-245860753","CVE-2023-20933"],"modified":"2026-05-27T15:53:17.428190120Z","published":"2023-02-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-02-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/av/+/00b6f6cca7801af8e4922449c7a377580c3eb389"}],"affected":[{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2023-02-01"}]}],"versions":["10"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["195771132498353675778178038790744234274","283917087939508580305909056688610271141","54452993273338206969982828029700289290","240219030592540120609269609342431114431","271095360212183576637552594437456864858","160689402165286310868329599178989121390","197652399789819557504180485495660674915","190768781848204380446745431773544128350","155842385800346442198184381666063305142","327521223003569800639353822523166057927","140619396885548034999809414273713122663","11713208038806537967951164962955060856","216961234792189817130078700742607469711","266092802255511205820369679199307300203","302456623666006417151043599394519011484","215046765637258160732689681161787582021","21936243226990756968394318364026074111","310865987361377859754143701687031153914","306579690729525088739072148531594124814","211727500339522484989305084084476641162","308586419202029625455148753693282668097","62632362115229284145669770628789108850","65008860511451646113750862329827632245","94486142899492582347078492469079790039","13272621584204411530125512177898627794","74259557418061591987139016870971187008","89569784343966228103780214879122129411","133282178178175478091870134211885057344","256976031629012604115141580009917669518","288922316652935533009596492616384686056","94152388211339719165743058786914412104","136588214266095393191479300673457834747","55050480324275898428535269537096443402","296424450196866186901853813381821061400","194295272037103563298550742060154496729","51857839119091754729201227472489179211","244544207620674005082460446041956186353","97115158774179577444889913600171132748","85506153746297930018218962084681107428","175290627554071011733832730439271835744","166900942587294650301130983079592784008","234006897922361765056933205738299904793","162135836263229099170192650193970699934","230380260537775819857457730812766029962","304666372334593617629636190224963702128","28824481836871489709881564803836736476","142477197619791097166799711033076158092","33175447537377487386786568429260233789","285851943550835365650635949359450155551","99030419239317289796186304187369100290","3519032748978453646555304614502918176","53873487557361801009873393172022624392","132773482351748193730170408347181012120","161329266470295193220368819381489265148","201456563596739278441342882750079444979","171448794613727389791560098286139510450","170418779053876299550777086687602937701","69817176269633676718170134081912590305","288225800776878746203529521368719644530","326624575886478219529739227666601934273","238873045493790534855157543762749219565","171829644212483627738330097311887647798","213452640518062699514505660414514344366"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/0ccdce19f669cd628ab6d116c131efc8d15707ee","deprecated":false,"target":{"file":"media/libstagefright/MediaCodec.cpp"},"signature_version":"v1","id":"ASB-A-245860753-01cfb8e9"},{"signature_type":"Function","digest":{"function_hash":"254587908152381824039496027383820736438","length":170},"source":"https://android.googlesource.com/platform/frameworks/av/+/0ccdce19f669cd628ab6d116c131efc8d15707ee","id":"ASB-A-245860753-277ef692","target":{"function":"MediaCodec::~MediaCodec","file":"media/libstagefright/MediaCodec.cpp"},"deprecated":false,"signature_version":"v1"},{"signature_version":"v1","digest":{"function_hash":"62745601788174656217984942014996143475","length":210},"source":"https://android.googlesource.com/platform/frameworks/av/+/0ccdce19f669cd628ab6d116c131efc8d15707ee","signature_type":"Function","target":{"function":"MediaCodec::getMetrics","file":"media/libstagefright/MediaCodec.cpp"},"id":"ASB-A-245860753-2cb53f80","deprecated":false},{"signature_version":"v1","digest":{"function_hash":"152603022201530832833148629890336260094","length":24244},"source":"https://android.googlesource.com/platform/frameworks/av/+/0ccdce19f669cd628ab6d116c131efc8d15707ee","signature_type":"Function","target":{"function":"MediaCodec::onMessageReceived","file":"media/libstagefright/MediaCodec.cpp"},"id":"ASB-A-245860753-3e365b36","deprecated":false},{"deprecated":false,"digest":{"function_hash":"28482987950201535866470372511772974412","length":782},"source":"https://android.googlesource.com/platform/frameworks/av/+/0ccdce19f669cd628ab6d116c131efc8d15707ee","signature_version":"v1","target":{"function":"MediaCodec::updateAnalyticsItem","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-690124cf"},{"signature_type":"Function","id":"ASB-A-245860753-a9f20032","source":"https://android.googlesource.com/platform/frameworks/av/+/0ccdce19f669cd628ab6d116c131efc8d15707ee","digest":{"function_hash":"132806644109488274351999097379989076249","length":221},"target":{"function":"MediaCodec::flushAnalyticsItem","file":"media/libstagefright/MediaCodec.cpp"},"deprecated":false,"signature_version":"v1"},{"signature_type":"Function","digest":{"function_hash":"305321134307877997606360624254804335189","length":2662},"source":"https://android.googlesource.com/platform/frameworks/av/+/0ccdce19f669cd628ab6d116c131efc8d15707ee","deprecated":false,"target":{"function":"MediaCodec::configure","file":"media/libstagefright/MediaCodec.cpp"},"signature_version":"v1","id":"ASB-A-245860753-d54a2179"},{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["275083794522876483790565058264096686722","65193444857528956814896804459219743296","108642853979884469013171595661799086878","29565747877396805097910961774844546365","43603989874310423894457723215059218087","75587773866531719609257389330360215940","94138123887745206356246410794733274943","34327948074746131286843996242613010431","192970027884140665642422181298679786271","35528955882160142481785389814884984247","146051034147582229320450677130028404841","159678226160753982307632478443486204368"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/0ccdce19f669cd628ab6d116c131efc8d15707ee","id":"ASB-A-245860753-f84b8a11","target":{"file":"media/libstagefright/include/media/stagefright/MediaCodec.h"},"deprecated":false,"signature_version":"v1"}],"spl":"2023-02-01","fixes":["https://android.googlesource.com/platform/frameworks/av/+/0ccdce19f669cd628ab6d116c131efc8d15707ee"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-245860753.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-02-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"306716335016490630727290556708333423222","length":204},"source":"https://android.googlesource.com/platform/frameworks/av/+/49e842e70836bbd58970beefac9c7b6bfe6a124b","signature_version":"v1","target":{"function":"MediaCodec::getMetrics","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-186e5bc4"},{"signature_type":"Function","digest":{"function_hash":"327331162590141873754935056660072694050","length":1260},"source":"https://android.googlesource.com/platform/frameworks/av/+/49e842e70836bbd58970beefac9c7b6bfe6a124b","deprecated":false,"target":{"function":"MediaCodec::updateMediametrics","file":"media/libstagefright/MediaCodec.cpp"},"signature_version":"v1","id":"ASB-A-245860753-2ac94fb1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["41190422924152808861721145803057268146","176810714098043572346718042039933954381","199897645119819999698362872590766182142","148255456866732521062234854473066491202","106976997540500384180003885880660555498","130528134439791419603049238002320749294","100701308285441873836988593936841465865","152978265050019762266054923683350391777","227896943506219702693975149295359255757","151499181485164766670934277512677349738","112843965905600109229498519000226700742","42564143121071993522160713730153162147","258114789091570452289111294040375568885","173053755379993081943597058051380390663","123954950427384920477658378093648382078","189628295655389205039047583201073794456","237718315780737835935311239282071720751","150499223124920352624728907687790334459","111983692381643075627576538068124119080","27733239678777106669431307525243765661","93701715675990230175798180129686574006","309633854154855143970604671161239647669","275400384828926441263181277056380375215","90936472954641955854583584645927567198","294246282462140806826452481037202216205","190356077919582178822867757488571689221","183626656812276990004912487521625141902","238017130717872175388031871789418448692","60383234836356798844002547574296425713","102679145231534621925956081735315146444","171211638977561546667621538757059054235","121367319081864691621892592530254782238","157280595658617805194327303266578659095","75640543315790667285199119297382211996","223489615795316913654083727883913637554","85650229286238745673919757475353617076","68496755232298157831013302712284336693","105877222598590634972561181505993491977","7890615070386901344820763542514093812","124915717598556278790942804758944312585","58948803121123058847634097335619967110","208603240422982060086499575129572780757","37860518651969834005737788594926696971","278456327641120270792447431183265417831","131448219974430304962300830316115015611","101101352989621279119615020551280158710","82316697143864584125369906453847015913","181944730968625100450453081667519593751","334674932581421057437379504971187377833","115130424634000164154734150847010847569","209901076507261060334850232652953643689","19045863254681857551607243303366003843","264321028155448420647046338608717233988","138689496677784823465373089033983913638","56821713320911810076975678954666914074","6497338773293382555957009144158076403","111888636469372108495255634571203487207","266066967233272869424986285394080619487","317915925595152161492771069329808814074","139032655578991253418842263979302134891","152544031844959368195389897769302943637","230380260537775819857457730812766029962","304666372334593617629636190224963702128","98916138680842901573279586482274749442","89089876275349717202583777510171234056","227373901346824720319738431925360466938","202086396634568542397963225558812293383","158278306602596005252481721498835911358","244630936587078231963221983297184573444","331037056000410705486209111200225189261","153162247191771108126814716750618297858","3623488977958175578833365242805005677","150058014364134295561924480701205627961","173286340883287940569331462971557927161","324980744930061256080515268231345716372","171448794613727389791560098286139510450","170418779053876299550777086687602937701","69817176269633676718170134081912590305","288225800776878746203529521368719644530","326624575886478219529739227666601934273","238873045493790534855157543762749219565","171829644212483627738330097311887647798","213452640518062699514505660414514344366"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/49e842e70836bbd58970beefac9c7b6bfe6a124b","signature_version":"v1","target":{"file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Line","id":"ASB-A-245860753-3a478182"},{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["161129591442204720542668883177655805995","111409457836327169375762318998774788992","92540976279414074787646780574620297120","66312782648254188354316209359055158437","165572324744445471207179798685254000199","217384200689386894271375456947079208279","153339489461746648322569216507641190119","127571648457722765149868133770967768773","63840913869922099555833266938590630767","1080719756204828968607997762953963194","79367649663091181818194955260554358725"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/49e842e70836bbd58970beefac9c7b6bfe6a124b","id":"ASB-A-245860753-3ee90b7f","target":{"file":"media/libstagefright/include/media/stagefright/MediaCodec.h"},"deprecated":false,"signature_version":"v1"},{"signature_type":"Function","digest":{"function_hash":"218732062169752104327551746583195842106","length":215},"source":"https://android.googlesource.com/platform/frameworks/av/+/49e842e70836bbd58970beefac9c7b6bfe6a124b","deprecated":false,"target":{"function":"MediaCodec::flushMediametrics","file":"media/libstagefright/MediaCodec.cpp"},"signature_version":"v1","id":"ASB-A-245860753-47e7299f"},{"deprecated":false,"digest":{"function_hash":"24078113455900422907260498211087981351","length":2533},"source":"https://android.googlesource.com/platform/frameworks/av/+/49e842e70836bbd58970beefac9c7b6bfe6a124b","signature_version":"v1","target":{"function":"MediaCodec::configure","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-973f0482"},{"signature_type":"Function","id":"ASB-A-245860753-a5a988e0","source":"https://android.googlesource.com/platform/frameworks/av/+/49e842e70836bbd58970beefac9c7b6bfe6a124b","digest":{"function_hash":"162571016146897542429030954833846385130","length":27608},"target":{"function":"MediaCodec::onMessageReceived","file":"media/libstagefright/MediaCodec.cpp"},"deprecated":false,"signature_version":"v1"},{"signature_version":"v1","digest":{"function_hash":"319854821911800359099818958306672209907","length":130},"source":"https://android.googlesource.com/platform/frameworks/av/+/49e842e70836bbd58970beefac9c7b6bfe6a124b","signature_type":"Function","target":{"function":"MediaCodec::~MediaCodec","file":"media/libstagefright/MediaCodec.cpp"},"id":"ASB-A-245860753-ce7af690","deprecated":false}],"spl":"2023-02-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/av/+/49e842e70836bbd58970beefac9c7b6bfe6a124b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-245860753.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-02-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"198262797482498100015379766478439659658","length":1946},"source":"https://android.googlesource.com/platform/frameworks/av/+/45c90c7d7fa2f1a2b66ae8243f2869bebfdbe3f4","signature_version":"v1","target":{"function":"MediaCodec::updateMediametrics","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-13d81df4"},{"deprecated":false,"digest":{"function_hash":"166652882469255181397394861536064859133","length":29486},"source":"https://android.googlesource.com/platform/frameworks/av/+/45c90c7d7fa2f1a2b66ae8243f2869bebfdbe3f4","signature_version":"v1","target":{"function":"MediaCodec::onMessageReceived","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-2c7c2b4c"},{"deprecated":false,"digest":{"function_hash":"325477544014748644723402947293562450044","length":5245},"source":"https://android.googlesource.com/platform/frameworks/av/+/45c90c7d7fa2f1a2b66ae8243f2869bebfdbe3f4","signature_version":"v1","target":{"function":"MediaCodec::configure","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-2ee1c965"},{"deprecated":false,"digest":{"function_hash":"306716335016490630727290556708333423222","length":204},"source":"https://android.googlesource.com/platform/frameworks/av/+/45c90c7d7fa2f1a2b66ae8243f2869bebfdbe3f4","signature_version":"v1","target":{"function":"MediaCodec::getMetrics","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-3afe7487"},{"signature_type":"Function","digest":{"function_hash":"218732062169752104327551746583195842106","length":215},"source":"https://android.googlesource.com/platform/frameworks/av/+/45c90c7d7fa2f1a2b66ae8243f2869bebfdbe3f4","id":"ASB-A-245860753-3b9c3a26","target":{"function":"MediaCodec::flushMediametrics","file":"media/libstagefright/MediaCodec.cpp"},"deprecated":false,"signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["161129591442204720542668883177655805995","111409457836327169375762318998774788992","92540976279414074787646780574620297120","66312782648254188354316209359055158437","165572324744445471207179798685254000199","217384200689386894271375456947079208279","153339489461746648322569216507641190119","127571648457722765149868133770967768773","70441025592111923066945309783506096633","262335798124903763690174806107147503957","223160234148360182852545698040382692091","278049451789887004953206832527188299479","14767037480615985302680468542287736926","30376891084294877672090147934937951825","336468902122982668118723243520019305280"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/45c90c7d7fa2f1a2b66ae8243f2869bebfdbe3f4","signature_version":"v1","target":{"file":"media/libstagefright/include/media/stagefright/MediaCodec.h"},"signature_type":"Line","id":"ASB-A-245860753-74eab543"},{"signature_type":"Function","digest":{"function_hash":"283133019395657723830778806765527799639","length":2627},"source":"https://android.googlesource.com/platform/frameworks/av/+/45c90c7d7fa2f1a2b66ae8243f2869bebfdbe3f4","deprecated":false,"target":{"function":"MediaCodec::shapeMediaFormat","file":"media/libstagefright/MediaCodec.cpp"},"signature_version":"v1","id":"ASB-A-245860753-986a4d3f"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["191649006885668986584786956219114104877","158082337995942630131477652816447428686","255453646349876057122994541475778688867","148255456866732521062234854473066491202","106976997540500384180003885880660555498","130528134439791419603049238002320749294","100701308285441873836988593936841465865","152978265050019762266054923683350391777","227896943506219702693975149295359255757","151499181485164766670934277512677349738","112843965905600109229498519000226700742","42564143121071993522160713730153162147","258114789091570452289111294040375568885","173053755379993081943597058051380390663","123954950427384920477658378093648382078","189628295655389205039047583201073794456","237718315780737835935311239282071720751","150499223124920352624728907687790334459","111983692381643075627576538068124119080","27733239678777106669431307525243765661","93701715675990230175798180129686574006","309633854154855143970604671161239647669","275400384828926441263181277056380375215","90936472954641955854583584645927567198","294246282462140806826452481037202216205","190356077919582178822867757488571689221","183626656812276990004912487521625141902","238017130717872175388031871789418448692","60383234836356798844002547574296425713","102679145231534621925956081735315146444","171211638977561546667621538757059054235","121367319081864691621892592530254782238","157280595658617805194327303266578659095","75640543315790667285199119297382211996","223489615795316913654083727883913637554","85650229286238745673919757475353617076","68496755232298157831013302712284336693","105877222598590634972561181505993491977","7890615070386901344820763542514093812","124915717598556278790942804758944312585","218381225142796012147390041611856027139","208603240422982060086499575129572780757","89069498434061273700879601083689847497","250196938337506140164600071572867889606","157561994242112233912139729849292398101","274813870101491597767454230507415817266","101101352989621279119615020551280158710","82316697143864584125369906453847015913","181944730968625100450453081667519593751","334674932581421057437379504971187377833","115130424634000164154734150847010847569","209901076507261060334850232652953643689","19045863254681857551607243303366003843","264321028155448420647046338608717233988","77125653434579834390574487403797004169","250131666497721371733349196324485742133","230585557503903666478979429459220127686","252859767074345115635735535808763897309","59070301821756309801484355260524466966","311984481182935573009333176756782753727","133564779918134715912919440041880890716","26605519890991775993681506618259383643","250152434977375752799543770355477939545","303511748905872179453082865310665547839","209197727053980883817566050294696325600","95043605704502643076391160638692045740","15537302711767591304057461333146997374","144608184611417790620258455161316869722","152616704629915235021965478184255586912","67362515813947297651123150605481004122","178485314511197322475669697593399505744","77987538090208586217688434574765134646","338313094349560983384253822726530957829","260723859150364585599748527376653696631","111998548635869487600231742667655809746","305764652456365031574767893705495525876","315758060441537001165082815707992948444","145038838254975387617105475818872175740","114861942833867326088958895026736721016","288038822190427005209450568387429117920","278793008273707257002958783367273680323","240858095226114707061980248693483474502","185346984642932589781881760477283276487","58527823182463377219243548379762055367","290833672997393431551725868486790949667","303560513258426900100116011756625753583","252722558886304014923741980286333682373","233653946410811609888275335427329404188","108040982084443756532313631872607673236","141473630839885203190613424426783942326","277519047241120321773763692854030602435","289227179938880693855447755606373780812","254659025133461758964007060341934934662","187708488245149201648454549222385757578","232520589076548556703053301336274212034","248034793578368219416404975592178185660","327386580465360939623054883628441896409","125024031588541079832509546633767378849","232745067386774225481208806576089707133","64341474441434548372433316855701563546","121462126899717820925173351361301767334","1402029787951133785154243920358627250","231406088511426271995905463313985542024","145405014882969791103268033733457951397","279610542846731877861983485444032793274","240419358782031702333994392214593404942","164221201444496821233735045484081509530","83139591143113956910111068882754344280","120395998136803636060958657870568851961","139377443315035820878778269644926684862","203053292854161689708363478696047497096","193246000925261765836886857671375926594","250817581101852859799882063655385534411","271576022412515565199461409941565993668","139677446863230889989877352862438063701","120567228395685224305445319785917617098","34384032064534592082413012909468227393","197029982588996953065627460685490320240","211339708030893371528585327073238761617","102821846807316889691311356527028993691","171530630869942797131954212961915568002","283807501449021989766021939702198105152","6497338773293382555957009144158076403","111888636469372108495255634571203487207","266066967233272869424986285394080619487","317915925595152161492771069329808814074","139032655578991253418842263979302134891","152544031844959368195389897769302943637","230380260537775819857457730812766029962","159537370757228516811940919093292788527","145174937718208784041847993372356393941","307019922239991982392639245041567686837","305264433157562854411995857505036170381","251971060376737814349535897998189765354","227710646540424891471149787662113251275","267148316230639020899944789603371722709","13842880436437421768152971389345659525","289547477346140784345414504700632422842","252831094595208938406000758626601188322","318174018152415421749202906097467893917","89085750860320886959309317803579649860","162246708490510436171059169013971901147","22840613390470764447098344648569118429","182394208407927010553796467586404235853","53410533022400730163050531188297317259","214411803037764834911718278988417609389","294000547020636798392286238391703474604","183501121086657098270630748220897072512","188552313956137218704647253433877761265","307952484447718375423692152016575426294","176786493673694485900013482024201659337","321198001980746030254066848978376223070","253054273996452297629540434077260736396","3674879041600199205523232182539935203","120472970545653834757804221746335981148","308885146955504251624078693559433755850","312560437090243981978288353531626691306","59539882020751158758700935029850376622","162061677106233082749749595582043195801","49144305490289409171725899381167374257","112300236930115945237971169117107448543","228651644285673314034871234418231678558","299134906906419516699297329917944628633","156660456158407534929318700343333462448","289316142282010428237705569158362174022","256798908039485495425416510764683183438","227120632897037287346343624038549796185","312590308681958814963660927525389196317","273327597305806349046778422650265207457","137226159175569276763588119199397190078","89089876275349717202583777510171234056","227373901346824720319738431925360466938","202086396634568542397963225558812293383","158278306602596005252481721498835911358","244630936587078231963221983297184573444","331037056000410705486209111200225189261","153162247191771108126814716750618297858","3623488977958175578833365242805005677","150058014364134295561924480701205627961","173286340883287940569331462971557927161","324980744930061256080515268231345716372","171448794613727389791560098286139510450","170418779053876299550777086687602937701","69817176269633676718170134081912590305","288225800776878746203529521368719644530","181700031921540181946801623000818151913","238873045493790534855157543762749219565","171829644212483627738330097311887647798","213452640518062699514505660414514344366"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/45c90c7d7fa2f1a2b66ae8243f2869bebfdbe3f4","signature_version":"v1","target":{"file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Line","id":"ASB-A-245860753-9b6f5c69"},{"signature_version":"v1","digest":{"function_hash":"319854821911800359099818958306672209907","length":130},"source":"https://android.googlesource.com/platform/frameworks/av/+/45c90c7d7fa2f1a2b66ae8243f2869bebfdbe3f4","signature_type":"Function","target":{"function":"MediaCodec::~MediaCodec","file":"media/libstagefright/MediaCodec.cpp"},"id":"ASB-A-245860753-e3c29f4e","deprecated":false}],"spl":"2023-02-01","fixes":["https://android.googlesource.com/platform/frameworks/av/+/45c90c7d7fa2f1a2b66ae8243f2869bebfdbe3f4"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-245860753.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-02-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"247184658494069731263442755269838565795","length":5245},"source":"https://android.googlesource.com/platform/frameworks/av/+/06c55ca214c354d3804bb098726effabd8cd1068","signature_version":"v1","target":{"function":"MediaCodec::configure","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-118c1b27"},{"signature_type":"Function","digest":{"function_hash":"319854821911800359099818958306672209907","length":130},"source":"https://android.googlesource.com/platform/frameworks/av/+/06c55ca214c354d3804bb098726effabd8cd1068","id":"ASB-A-245860753-135f30f4","target":{"function":"MediaCodec::~MediaCodec","file":"media/libstagefright/MediaCodec.cpp"},"deprecated":false,"signature_version":"v1"},{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["161129591442204720542668883177655805995","111409457836327169375762318998774788992","92540976279414074787646780574620297120","66312782648254188354316209359055158437","165572324744445471207179798685254000199","217384200689386894271375456947079208279","153339489461746648322569216507641190119","127571648457722765149868133770967768773","70441025592111923066945309783506096633","262335798124903763690174806107147503957","223160234148360182852545698040382692091","278049451789887004953206832527188299479","14767037480615985302680468542287736926","30376891084294877672090147934937951825","336468902122982668118723243520019305280"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/06c55ca214c354d3804bb098726effabd8cd1068","signature_type":"Line","target":{"file":"media/libstagefright/include/media/stagefright/MediaCodec.h"},"id":"ASB-A-245860753-47c9079e","deprecated":false},{"deprecated":false,"digest":{"function_hash":"218732062169752104327551746583195842106","length":215},"source":"https://android.googlesource.com/platform/frameworks/av/+/06c55ca214c354d3804bb098726effabd8cd1068","signature_version":"v1","target":{"function":"MediaCodec::flushMediametrics","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-52706824"},{"signature_version":"v1","digest":{"function_hash":"198262797482498100015379766478439659658","length":1946},"source":"https://android.googlesource.com/platform/frameworks/av/+/06c55ca214c354d3804bb098726effabd8cd1068","signature_type":"Function","target":{"function":"MediaCodec::updateMediametrics","file":"media/libstagefright/MediaCodec.cpp"},"id":"ASB-A-245860753-ba49eb89","deprecated":false},{"signature_type":"Function","id":"ASB-A-245860753-c4d82a58","source":"https://android.googlesource.com/platform/frameworks/av/+/06c55ca214c354d3804bb098726effabd8cd1068","digest":{"function_hash":"166652882469255181397394861536064859133","length":29486},"target":{"function":"MediaCodec::onMessageReceived","file":"media/libstagefright/MediaCodec.cpp"},"deprecated":false,"signature_version":"v1"},{"signature_type":"Function","digest":{"function_hash":"283133019395657723830778806765527799639","length":2627},"source":"https://android.googlesource.com/platform/frameworks/av/+/06c55ca214c354d3804bb098726effabd8cd1068","id":"ASB-A-245860753-d6007724","target":{"function":"MediaCodec::shapeMediaFormat","file":"media/libstagefright/MediaCodec.cpp"},"deprecated":false,"signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"306716335016490630727290556708333423222","length":204},"source":"https://android.googlesource.com/platform/frameworks/av/+/06c55ca214c354d3804bb098726effabd8cd1068","signature_version":"v1","target":{"function":"MediaCodec::getMetrics","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-e0aec223"},{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["191649006885668986584786956219114104877","158082337995942630131477652816447428686","255453646349876057122994541475778688867","148255456866732521062234854473066491202","106976997540500384180003885880660555498","130528134439791419603049238002320749294","100701308285441873836988593936841465865","152978265050019762266054923683350391777","227896943506219702693975149295359255757","151499181485164766670934277512677349738","112843965905600109229498519000226700742","42564143121071993522160713730153162147","258114789091570452289111294040375568885","173053755379993081943597058051380390663","123954950427384920477658378093648382078","189628295655389205039047583201073794456","237718315780737835935311239282071720751","150499223124920352624728907687790334459","111983692381643075627576538068124119080","27733239678777106669431307525243765661","93701715675990230175798180129686574006","309633854154855143970604671161239647669","275400384828926441263181277056380375215","90936472954641955854583584645927567198","294246282462140806826452481037202216205","190356077919582178822867757488571689221","183626656812276990004912487521625141902","306712052076658327476937563735544085339","182541903453833357463539431191730864466","334471697169768866972767610086435923212","21996073694567872497976487545869134689","171211638977561546667621538757059054235","121367319081864691621892592530254782238","157280595658617805194327303266578659095","75640543315790667285199119297382211996","223489615795316913654083727883913637554","85650229286238745673919757475353617076","68496755232298157831013302712284336693","105877222598590634972561181505993491977","138095174972331043108404382072104284228","110010454172629645407275827951619257780","210553995867081197917210742220904578748","282604499568368584698121103942643323486","208603240422982060086499575129572780757","37860518651969834005737788594926696971","278456327641120270792447431183265417831","131448219974430304962300830316115015611","101101352989621279119615020551280158710","82316697143864584125369906453847015913","181944730968625100450453081667519593751","334674932581421057437379504971187377833","115130424634000164154734150847010847569","209901076507261060334850232652953643689","19045863254681857551607243303366003843","264321028155448420647046338608717233988","77125653434579834390574487403797004169","250131666497721371733349196324485742133","230585557503903666478979429459220127686","252859767074345115635735535808763897309","59070301821756309801484355260524466966","311984481182935573009333176756782753727","133564779918134715912919440041880890716","26605519890991775993681506618259383643","250152434977375752799543770355477939545","303511748905872179453082865310665547839","209197727053980883817566050294696325600","95043605704502643076391160638692045740","15537302711767591304057461333146997374","144608184611417790620258455161316869722","152616704629915235021965478184255586912","67362515813947297651123150605481004122","178485314511197322475669697593399505744","77987538090208586217688434574765134646","338313094349560983384253822726530957829","260723859150364585599748527376653696631","111998548635869487600231742667655809746","305764652456365031574767893705495525876","315758060441537001165082815707992948444","145038838254975387617105475818872175740","114861942833867326088958895026736721016","288038822190427005209450568387429117920","278793008273707257002958783367273680323","240858095226114707061980248693483474502","185346984642932589781881760477283276487","58527823182463377219243548379762055367","290833672997393431551725868486790949667","303560513258426900100116011756625753583","252722558886304014923741980286333682373","233653946410811609888275335427329404188","108040982084443756532313631872607673236","141473630839885203190613424426783942326","277519047241120321773763692854030602435","289227179938880693855447755606373780812","254659025133461758964007060341934934662","187708488245149201648454549222385757578","232520589076548556703053301336274212034","248034793578368219416404975592178185660","327386580465360939623054883628441896409","125024031588541079832509546633767378849","232745067386774225481208806576089707133","64341474441434548372433316855701563546","121462126899717820925173351361301767334","1402029787951133785154243920358627250","231406088511426271995905463313985542024","145405014882969791103268033733457951397","279610542846731877861983485444032793274","240419358782031702333994392214593404942","164221201444496821233735045484081509530","83139591143113956910111068882754344280","120395998136803636060958657870568851961","139377443315035820878778269644926684862","203053292854161689708363478696047497096","193246000925261765836886857671375926594","250817581101852859799882063655385534411","271576022412515565199461409941565993668","139677446863230889989877352862438063701","120567228395685224305445319785917617098","34384032064534592082413012909468227393","197029982588996953065627460685490320240","211339708030893371528585327073238761617","102821846807316889691311356527028993691","171530630869942797131954212961915568002","283807501449021989766021939702198105152","6497338773293382555957009144158076403","111888636469372108495255634571203487207","266066967233272869424986285394080619487","317915925595152161492771069329808814074","139032655578991253418842263979302134891","152544031844959368195389897769302943637","230380260537775819857457730812766029962","159537370757228516811940919093292788527","145174937718208784041847993372356393941","307019922239991982392639245041567686837","305264433157562854411995857505036170381","251971060376737814349535897998189765354","227710646540424891471149787662113251275","267148316230639020899944789603371722709","13842880436437421768152971389345659525","289547477346140784345414504700632422842","252831094595208938406000758626601188322","318174018152415421749202906097467893917","89085750860320886959309317803579649860","162246708490510436171059169013971901147","22840613390470764447098344648569118429","182394208407927010553796467586404235853","53410533022400730163050531188297317259","214411803037764834911718278988417609389","294000547020636798392286238391703474604","183501121086657098270630748220897072512","188552313956137218704647253433877761265","307952484447718375423692152016575426294","176786493673694485900013482024201659337","321198001980746030254066848978376223070","253054273996452297629540434077260736396","3674879041600199205523232182539935203","120472970545653834757804221746335981148","308885146955504251624078693559433755850","312560437090243981978288353531626691306","59539882020751158758700935029850376622","162061677106233082749749595582043195801","49144305490289409171725899381167374257","112300236930115945237971169117107448543","228651644285673314034871234418231678558","299134906906419516699297329917944628633","156660456158407534929318700343333462448","289316142282010428237705569158362174022","256798908039485495425416510764683183438","227120632897037287346343624038549796185","312590308681958814963660927525389196317","273327597305806349046778422650265207457","137226159175569276763588119199397190078","89089876275349717202583777510171234056","227373901346824720319738431925360466938","202086396634568542397963225558812293383","158278306602596005252481721498835911358","244630936587078231963221983297184573444","331037056000410705486209111200225189261","153162247191771108126814716750618297858","3623488977958175578833365242805005677","150058014364134295561924480701205627961","173286340883287940569331462971557927161","324980744930061256080515268231345716372","171448794613727389791560098286139510450","170418779053876299550777086687602937701","69817176269633676718170134081912590305","288225800776878746203529521368719644530","181700031921540181946801623000818151913","238873045493790534855157543762749219565","171829644212483627738330097311887647798","213452640518062699514505660414514344366"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/06c55ca214c354d3804bb098726effabd8cd1068","id":"ASB-A-245860753-f9c22f05","target":{"file":"media/libstagefright/MediaCodec.cpp"},"deprecated":false,"signature_version":"v1"}],"spl":"2023-02-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/av/+/06c55ca214c354d3804bb098726effabd8cd1068"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-245860753.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-02-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"spl":"2023-02-01","vanir_signatures":[{"signature_type":"Function","digest":{"function_hash":"112451123299391709867296147906038924858","length":2100},"source":"https://android.googlesource.com/platform/frameworks/av/+/c126c81bd9e92a168b83e919a3264e6c4a45be29","id":"ASB-A-245860753-04fc4420","target":{"function":"MediaCodec::updateMediametrics","file":"media/libstagefright/MediaCodec.cpp"},"deprecated":false,"signature_version":"v1"},{"signature_type":"Function","digest":{"function_hash":"177945488724102690595830001643299241240","length":5905},"source":"https://android.googlesource.com/platform/frameworks/av/+/c126c81bd9e92a168b83e919a3264e6c4a45be29","id":"ASB-A-245860753-0ea7e278","target":{"function":"MediaCodec::configure","file":"media/libstagefright/MediaCodec.cpp"},"deprecated":false,"signature_version":"v1"},{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["292470771830709128603755106178904323758","191649006885668986584786956219114104877","158082337995942630131477652816447428686","255453646349876057122994541475778688867","148255456866732521062234854473066491202","106976997540500384180003885880660555498","130528134439791419603049238002320749294","100701308285441873836988593936841465865","152978265050019762266054923683350391777","227896943506219702693975149295359255757","151499181485164766670934277512677349738","112843965905600109229498519000226700742","42564143121071993522160713730153162147","258114789091570452289111294040375568885","173053755379993081943597058051380390663","123954950427384920477658378093648382078","173253195666273061493408550291347976089","209276175725445306497496627243878990875","150499223124920352624728907687790334459","111983692381643075627576538068124119080","27733239678777106669431307525243765661","93701715675990230175798180129686574006","309633854154855143970604671161239647669","275400384828926441263181277056380375215","90936472954641955854583584645927567198","294246282462140806826452481037202216205","171803499894932162578208472847821277350","183626656812276990004912487521625141902","306712052076658327476937563735544085339","182541903453833357463539431191730864466","334471697169768866972767610086435923212","21996073694567872497976487545869134689","171211638977561546667621538757059054235","121367319081864691621892592530254782238","157280595658617805194327303266578659095","75640543315790667285199119297382211996","223489615795316913654083727883913637554","85650229286238745673919757475353617076","68496755232298157831013302712284336693","105877222598590634972561181505993491977","138095174972331043108404382072104284228","110010454172629645407275827951619257780","280772018814971711353496968536708146545","220229141002830543101616538780746838459","208603240422982060086499575129572780757","8991409728744785417603954617867036358","94258782420577104734230877890004427677","22903154975727334846461864356095565320","4380132249742590788647417502325396109","102835916878411906493949779277177336954","181944730968625100450453081667519593751","334674932581421057437379504971187377833","115130424634000164154734150847010847569","209901076507261060334850232652953643689","19045863254681857551607243303366003843","264321028155448420647046338608717233988","77125653434579834390574487403797004169","250131666497721371733349196324485742133","230585557503903666478979429459220127686","252859767074345115635735535808763897309","192347419894259960349097379439658749133","95173987794412928577931969294595827032","240541777343299332127943951835995655486","51275109531998837940278337752178171173","26605519890991775993681506618259383643","250152434977375752799543770355477939545","303511748905872179453082865310665547839","209197727053980883817566050294696325600","95043605704502643076391160638692045740","15537302711767591304057461333146997374","144608184611417790620258455161316869722","152616704629915235021965478184255586912","67362515813947297651123150605481004122","178485314511197322475669697593399505744","77987538090208586217688434574765134646","338313094349560983384253822726530957829","260723859150364585599748527376653696631","111998548635869487600231742667655809746","110084773639685673134982689107010509454","315758060441537001165082815707992948444","145038838254975387617105475818872175740","114861942833867326088958895026736721016","288038822190427005209450568387429117920","278793008273707257002958783367273680323","240858095226114707061980248693483474502","185346984642932589781881760477283276487","58527823182463377219243548379762055367","290833672997393431551725868486790949667","303560513258426900100116011756625753583","252722558886304014923741980286333682373","233653946410811609888275335427329404188","108040982084443756532313631872607673236","141473630839885203190613424426783942326","277519047241120321773763692854030602435","289227179938880693855447755606373780812","254659025133461758964007060341934934662","187708488245149201648454549222385757578","232520589076548556703053301336274212034","86880949690420303238975839081739305709","206546524042806118017181534885445064104","157632691101670596226128992152987483497","60786854247663499240292004072227161855","64341474441434548372433316855701563546","121462126899717820925173351361301767334","1402029787951133785154243920358627250","231406088511426271995905463313985542024","145405014882969791103268033733457951397","279610542846731877861983485444032793274","240419358782031702333994392214593404942","164221201444496821233735045484081509530","83139591143113956910111068882754344280","120395998136803636060958657870568851961","139377443315035820878778269644926684862","203053292854161689708363478696047497096","193246000925261765836886857671375926594","250817581101852859799882063655385534411","271576022412515565199461409941565993668","139677446863230889989877352862438063701","120567228395685224305445319785917617098","34384032064534592082413012909468227393","197029982588996953065627460685490320240","211339708030893371528585327073238761617","102821846807316889691311356527028993691","171530630869942797131954212961915568002","283807501449021989766021939702198105152","6497338773293382555957009144158076403","111888636469372108495255634571203487207","266066967233272869424986285394080619487","317915925595152161492771069329808814074","139032655578991253418842263979302134891","152544031844959368195389897769302943637","230380260537775819857457730812766029962","159537370757228516811940919093292788527","145174937718208784041847993372356393941","307019922239991982392639245041567686837","305264433157562854411995857505036170381","251971060376737814349535897998189765354","227710646540424891471149787662113251275","267148316230639020899944789603371722709","13842880436437421768152971389345659525","289547477346140784345414504700632422842","252831094595208938406000758626601188322","318174018152415421749202906097467893917","89085750860320886959309317803579649860","162246708490510436171059169013971901147","22840613390470764447098344648569118429","182394208407927010553796467586404235853","53410533022400730163050531188297317259","214411803037764834911718278988417609389","294000547020636798392286238391703474604","183501121086657098270630748220897072512","188552313956137218704647253433877761265","307952484447718375423692152016575426294","176786493673694485900013482024201659337","321198001980746030254066848978376223070","253054273996452297629540434077260736396","3674879041600199205523232182539935203","120472970545653834757804221746335981148","308885146955504251624078693559433755850","312560437090243981978288353531626691306","59539882020751158758700935029850376622","162061677106233082749749595582043195801","49144305490289409171725899381167374257","112300236930115945237971169117107448543","228651644285673314034871234418231678558","299134906906419516699297329917944628633","156660456158407534929318700343333462448","289316142282010428237705569158362174022","256798908039485495425416510764683183438","227120632897037287346343624038549796185","312590308681958814963660927525389196317","273327597305806349046778422650265207457","137226159175569276763588119199397190078","89089876275349717202583777510171234056","227373901346824720319738431925360466938","202086396634568542397963225558812293383","158278306602596005252481721498835911358","244630936587078231963221983297184573444","331037056000410705486209111200225189261","153162247191771108126814716750618297858","3623488977958175578833365242805005677","150058014364134295561924480701205627961","173286340883287940569331462971557927161","324980744930061256080515268231345716372","171448794613727389791560098286139510450","170418779053876299550777086687602937701","69817176269633676718170134081912590305","288225800776878746203529521368719644530","181700031921540181946801623000818151913","238873045493790534855157543762749219565","171829644212483627738330097311887647798","213452640518062699514505660414514344366"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/c126c81bd9e92a168b83e919a3264e6c4a45be29","deprecated":false,"target":{"file":"media/libstagefright/MediaCodec.cpp"},"signature_version":"v1","id":"ASB-A-245860753-140b1215"},{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["161129591442204720542668883177655805995","111409457836327169375762318998774788992","92540976279414074787646780574620297120","66312782648254188354316209359055158437","165572324744445471207179798685254000199","217384200689386894271375456947079208279","153339489461746648322569216507641190119","127571648457722765149868133770967768773","70441025592111923066945309783506096633","262335798124903763690174806107147503957","223160234148360182852545698040382692091","278049451789887004953206832527188299479","14767037480615985302680468542287736926","30376891084294877672090147934937951825","336468902122982668118723243520019305280"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/c126c81bd9e92a168b83e919a3264e6c4a45be29","deprecated":false,"target":{"file":"media/libstagefright/include/media/stagefright/MediaCodec.h"},"signature_version":"v1","id":"ASB-A-245860753-3e843cac"},{"deprecated":false,"digest":{"function_hash":"283133019395657723830778806765527799639","length":2627},"source":"https://android.googlesource.com/platform/frameworks/av/+/c126c81bd9e92a168b83e919a3264e6c4a45be29","signature_version":"v1","target":{"function":"MediaCodec::shapeMediaFormat","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-44be3fc7"},{"deprecated":false,"digest":{"function_hash":"218732062169752104327551746583195842106","length":215},"source":"https://android.googlesource.com/platform/frameworks/av/+/c126c81bd9e92a168b83e919a3264e6c4a45be29","signature_version":"v1","target":{"function":"MediaCodec::flushMediametrics","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-7f0a089f"},{"signature_version":"v1","digest":{"function_hash":"319854821911800359099818958306672209907","length":130},"source":"https://android.googlesource.com/platform/frameworks/av/+/c126c81bd9e92a168b83e919a3264e6c4a45be29","signature_type":"Function","target":{"function":"MediaCodec::~MediaCodec","file":"media/libstagefright/MediaCodec.cpp"},"id":"ASB-A-245860753-8a03eba9","deprecated":false},{"deprecated":false,"digest":{"function_hash":"306716335016490630727290556708333423222","length":204},"source":"https://android.googlesource.com/platform/frameworks/av/+/c126c81bd9e92a168b83e919a3264e6c4a45be29","signature_version":"v1","target":{"function":"MediaCodec::getMetrics","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-c1f4be6b"},{"deprecated":false,"digest":{"function_hash":"37646765746706396945252045597047039743","length":30488},"source":"https://android.googlesource.com/platform/frameworks/av/+/c126c81bd9e92a168b83e919a3264e6c4a45be29","signature_version":"v1","target":{"function":"MediaCodec::onMessageReceived","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-245860753-d0e7a513"}],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/av/+/c126c81bd9e92a168b83e919a3264e6c4a45be29"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-245860753.json"}}],"schema_version":"1.7.5"}