{"id":"ASB-A-298057702","details":"In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-298057702","CVE-2023-40077"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2023-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/av/+/58fd993a89a3a22fa5a4a1a4548125c6783ec80c"}],"affected":[{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2023-12-01"}]}],"versions":["14-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","target":{"file":"media/module/foundation/MetaDataBase.cpp"},"digest":{"threshold":0.9,"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","15600682338450327382560076975837243885","125354958160092802429146562220425657449","145223589000727474561977894963958446316","227892277488239637546648527374123349457"]},"signature_version":"v1","deprecated":false,"signature_type":"Line","id":"ASB-A-298057702-164b0e19"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","signature_type":"Function","digest":{"length":73,"function_hash":"53306167433269421111706409143521071482"},"id":"ASB-A-298057702-38b930e8","deprecated":false,"signature_version":"v1","target":{"function":"MetaDataBase::clear","file":"media/module/foundation/MetaDataBase.cpp"}},{"signature_type":"Function","target":{"function":"MetaDataBase::dumpToLog","file":"media/module/foundation/MetaDataBase.cpp"},"digest":{"length":349,"function_hash":"22971970037536531725100604479695516728"},"id":"ASB-A-298057702-55d186f3","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","signature_version":"v1"},{"signature_version":"v1","signature_type":"Function","digest":{"length":207,"function_hash":"55173831832855155563492366957021512072"},"id":"ASB-A-298057702-6462224d","deprecated":false,"target":{"function":"MetaDataBase::remove","file":"media/module/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196"},{"id":"ASB-A-298057702-86176428","target":{"function":"MetaDataBase::hasData","file":"media/module/foundation/MetaDataBase.cpp"},"digest":{"length":164,"function_hash":"245559816575705263568317161581911053966"},"source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","deprecated":false,"signature_version":"v1","signature_type":"Function"},{"signature_version":"v1","signature_type":"Function","digest":{"length":395,"function_hash":"175696268568583217842178294542562977543"},"id":"ASB-A-298057702-9573264c","deprecated":false,"target":{"function":"MetaDataBase::setData","file":"media/module/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","signature_type":"Function","digest":{"length":327,"function_hash":"48664191158994694456287320300999414801"},"id":"ASB-A-298057702-97b44d7c","deprecated":false,"signature_version":"v1","target":{"function":"MetaDataBase::findData","file":"media/module/foundation/MetaDataBase.cpp"}},{"signature_version":"v1","signature_type":"Function","digest":{"length":428,"function_hash":"188048871823142734216492310045652806664"},"id":"ASB-A-298057702-b41f8d14","deprecated":false,"target":{"function":"MetaDataBase::toString","file":"media/module/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196"},{"target":{"function":"MetaDataBase::writeToParcel","file":"media/module/foundation/MetaDataBase.cpp"},"signature_type":"Function","digest":{"length":944,"function_hash":"194709428110958800386906704381491643876"},"signature_version":"v1","deprecated":false,"id":"ASB-A-298057702-c8f24a39","source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196"}],"types":["EoP"],"severity":"Critical","spl":"2023-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-12-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_type":"Function","digest":{"length":327,"function_hash":"48664191158994694456287320300999414801"},"id":"ASB-A-298057702-1c3212de","deprecated":false,"signature_version":"v1","target":{"function":"MetaDataBase::findData","file":"media/libstagefright/foundation/MetaDataBase.cpp"}},{"signature_version":"v1","signature_type":"Function","digest":{"length":207,"function_hash":"55173831832855155563492366957021512072"},"id":"ASB-A-298057702-322c6c86","deprecated":false,"target":{"function":"MetaDataBase::remove","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"signature_type":"Function","target":{"function":"MetaDataBase::hasData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":164,"function_hash":"245559816575705263568317161581911053966"},"id":"ASB-A-298057702-409fc5a7","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_version":"v1"},{"signature_type":"Function","target":{"function":"MetaDataBase::clear","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":73,"function_hash":"53306167433269421111706409143521071482"},"id":"ASB-A-298057702-689e189c","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::writeToParcel","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":944,"function_hash":"194709428110958800386906704381491643876"},"signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-298057702-babe4ee1"},{"signature_type":"Function","target":{"function":"MetaDataBase::dumpToLog","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":350,"function_hash":"309146812019522743025181760492134961754"},"id":"ASB-A-298057702-e273d193","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_version":"v1"},{"signature_type":"Line","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"threshold":0.9,"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","57039235074992601129765161197659465993","188042787196234033121544054866144156065","145223589000727474561977894963958446316","227892277488239637546648527374123349457"]},"id":"ASB-A-298057702-e6918dbb","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_version":"v1"},{"signature_type":"Function","target":{"function":"MetaDataBase::setData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":395,"function_hash":"175696268568583217842178294542562977543"},"id":"ASB-A-298057702-f15e583b","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_version":"v1"},{"signature_version":"v1","signature_type":"Function","digest":{"length":429,"function_hash":"29780867610742078482622038467121351946"},"id":"ASB-A-298057702-f5e43e7a","deprecated":false,"target":{"function":"MetaDataBase::toString","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"}],"types":["EoP"],"severity":"Critical","spl":"2023-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-12-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_type":"Function","digest":{"length":73,"function_hash":"53306167433269421111706409143521071482"},"id":"ASB-A-298057702-0f97a075","deprecated":false,"signature_version":"v1","target":{"function":"MetaDataBase::clear","file":"media/libstagefright/foundation/MetaDataBase.cpp"}},{"target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","57039235074992601129765161197659465993","188042787196234033121544054866144156065","145223589000727474561977894963958446316","227892277488239637546648527374123349457"]},"signature_version":"v1","deprecated":false,"id":"ASB-A-298057702-1faab949","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"target":{"function":"MetaDataBase::toString","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"signature_type":"Function","digest":{"length":429,"function_hash":"29780867610742078482622038467121351946"},"signature_version":"v1","deprecated":false,"id":"ASB-A-298057702-43564994","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::hasData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":164,"function_hash":"245559816575705263568317161581911053966"},"signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-298057702-4aa43689"},{"target":{"function":"MetaDataBase::dumpToLog","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"signature_type":"Function","digest":{"length":350,"function_hash":"309146812019522743025181760492134961754"},"signature_version":"v1","deprecated":false,"id":"ASB-A-298057702-65e507c2","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"signature_type":"Function","target":{"function":"MetaDataBase::setData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":395,"function_hash":"175696268568583217842178294542562977543"},"id":"ASB-A-298057702-7e6f072a","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_version":"v1"},{"signature_version":"v1","signature_type":"Function","digest":{"length":207,"function_hash":"55173831832855155563492366957021512072"},"id":"ASB-A-298057702-8d063426","deprecated":false,"target":{"function":"MetaDataBase::remove","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"signature_version":"v1","signature_type":"Function","digest":{"length":944,"function_hash":"194709428110958800386906704381491643876"},"id":"ASB-A-298057702-dd20e1ec","deprecated":false,"target":{"function":"MetaDataBase::writeToParcel","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"signature_version":"v1","signature_type":"Function","digest":{"length":327,"function_hash":"48664191158994694456287320300999414801"},"id":"ASB-A-298057702-ecd878b8","deprecated":false,"target":{"function":"MetaDataBase::findData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"}],"types":["EoP"],"severity":"Critical","spl":"2023-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-12-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_type":"Function","digest":{"length":164,"function_hash":"245559816575705263568317161581911053966"},"id":"ASB-A-298057702-0fb9d10f","deprecated":false,"signature_version":"v1","target":{"function":"MetaDataBase::hasData","file":"media/libstagefright/foundation/MetaDataBase.cpp"}},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_type":"Function","digest":{"length":350,"function_hash":"309146812019522743025181760492134961754"},"id":"ASB-A-298057702-13ea5a2c","deprecated":false,"signature_version":"v1","target":{"function":"MetaDataBase::dumpToLog","file":"media/libstagefright/foundation/MetaDataBase.cpp"}},{"signature_version":"v1","signature_type":"Function","digest":{"length":944,"function_hash":"194709428110958800386906704381491643876"},"id":"ASB-A-298057702-330ddfa0","deprecated":false,"target":{"function":"MetaDataBase::writeToParcel","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::remove","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":207,"function_hash":"55173831832855155563492366957021512072"},"signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-298057702-51ec40c7"},{"signature_version":"v1","signature_type":"Function","digest":{"length":395,"function_hash":"175696268568583217842178294542562977543"},"id":"ASB-A-298057702-5d8b9f36","deprecated":false,"target":{"function":"MetaDataBase::setData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_type":"Function","digest":{"length":327,"function_hash":"48664191158994694456287320300999414801"},"id":"ASB-A-298057702-87397bdb","deprecated":false,"signature_version":"v1","target":{"function":"MetaDataBase::findData","file":"media/libstagefright/foundation/MetaDataBase.cpp"}},{"signature_type":"Function","target":{"function":"MetaDataBase::toString","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":429,"function_hash":"29780867610742078482622038467121351946"},"id":"ASB-A-298057702-a6fe1cc8","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::clear","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":73,"function_hash":"53306167433269421111706409143521071482"},"signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-298057702-b12d52fa"},{"id":"ASB-A-298057702-e36f85b6","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"threshold":0.9,"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","57039235074992601129765161197659465993","188042787196234033121544054866144156065","145223589000727474561977894963958446316","227892277488239637546648527374123349457"]},"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","deprecated":false,"signature_version":"v1","signature_type":"Line"}],"types":["EoP"],"severity":"Critical","spl":"2023-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-12-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"],"vanir_signatures":[{"target":{"function":"MetaDataBase::dumpToLog","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"signature_type":"Function","digest":{"length":350,"function_hash":"309146812019522743025181760492134961754"},"signature_version":"v1","deprecated":false,"id":"ASB-A-298057702-050b257e","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"signature_type":"Function","target":{"function":"MetaDataBase::clear","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":73,"function_hash":"53306167433269421111706409143521071482"},"id":"ASB-A-298057702-34a57b6b","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_type":"Function","digest":{"length":429,"function_hash":"29780867610742078482622038467121351946"},"id":"ASB-A-298057702-8b1e10ad","deprecated":false,"signature_version":"v1","target":{"function":"MetaDataBase::toString","file":"media/libstagefright/foundation/MetaDataBase.cpp"}},{"signature_version":"v1","signature_type":"Function","digest":{"length":327,"function_hash":"48664191158994694456287320300999414801"},"id":"ASB-A-298057702-9429d16c","deprecated":false,"target":{"function":"MetaDataBase::findData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_type":"Function","digest":{"length":395,"function_hash":"175696268568583217842178294542562977543"},"id":"ASB-A-298057702-a4c7a300","deprecated":false,"signature_version":"v1","target":{"function":"MetaDataBase::setData","file":"media/libstagefright/foundation/MetaDataBase.cpp"}},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::remove","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":207,"function_hash":"55173831832855155563492366957021512072"},"signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-298057702-b6388577"},{"signature_version":"v1","signature_type":"Function","digest":{"length":944,"function_hash":"194709428110958800386906704381491643876"},"id":"ASB-A-298057702-ce514813","deprecated":false,"target":{"function":"MetaDataBase::writeToParcel","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"signature_type":"Line","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"threshold":0.9,"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","57039235074992601129765161197659465993","188042787196234033121544054866144156065","145223589000727474561977894963958446316","227892277488239637546648527374123349457"]},"id":"ASB-A-298057702-ddc7b76a","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_version":"v1"},{"signature_type":"Function","target":{"function":"MetaDataBase::hasData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"digest":{"length":164,"function_hash":"245559816575705263568317161581911053966"},"id":"ASB-A-298057702-f27d09df","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","signature_version":"v1"}],"types":["EoP"],"severity":"Critical","spl":"2023-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2023-12-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19"],"vanir_signatures":[{"signature_type":"Function","target":{"function":"MetaDataBase::clear","file":"media/module/foundation/MetaDataBase.cpp"},"digest":{"length":73,"function_hash":"53306167433269421111706409143521071482"},"id":"ASB-A-298057702-012aa645","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","signature_version":"v1"},{"signature_version":"v1","signature_type":"Function","digest":{"length":429,"function_hash":"29780867610742078482622038467121351946"},"id":"ASB-A-298057702-05d30357","deprecated":false,"target":{"function":"MetaDataBase::toString","file":"media/module/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","signature_type":"Function","digest":{"length":207,"function_hash":"55173831832855155563492366957021512072"},"id":"ASB-A-298057702-208f4ea7","deprecated":false,"signature_version":"v1","target":{"function":"MetaDataBase::remove","file":"media/module/foundation/MetaDataBase.cpp"}},{"signature_version":"v1","signature_type":"Function","digest":{"length":944,"function_hash":"194709428110958800386906704381491643876"},"id":"ASB-A-298057702-4e828a57","deprecated":false,"target":{"function":"MetaDataBase::writeToParcel","file":"media/module/foundation/MetaDataBase.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","15600682338450327382560076975837243885","125354958160092802429146562220425657449","145223589000727474561977894963958446316","227892277488239637546648527374123349457"]},"id":"ASB-A-298057702-5c36d140","deprecated":false,"signature_version":"v1","target":{"file":"media/module/foundation/MetaDataBase.cpp"}},{"signature_type":"Function","target":{"function":"MetaDataBase::findData","file":"media/module/foundation/MetaDataBase.cpp"},"digest":{"length":327,"function_hash":"48664191158994694456287320300999414801"},"id":"ASB-A-298057702-d067220f","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","signature_version":"v1"},{"id":"ASB-A-298057702-dffb1bec","target":{"function":"MetaDataBase::dumpToLog","file":"media/module/foundation/MetaDataBase.cpp"},"digest":{"length":350,"function_hash":"309146812019522743025181760492134961754"},"source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","deprecated":false,"signature_version":"v1","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"function":"MetaDataBase::hasData","file":"media/module/foundation/MetaDataBase.cpp"},"digest":{"length":164,"function_hash":"245559816575705263568317161581911053966"},"signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-298057702-e537e403"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"function":"MetaDataBase::setData","file":"media/module/foundation/MetaDataBase.cpp"},"digest":{"length":395,"function_hash":"175696268568583217842178294542562977543"},"signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-298057702-e670f658"}],"types":["EoP"],"severity":"Critical","spl":"2023-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}}],"schema_version":"1.7.5"}