{"id":"ASB-A-298057702","details":"In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-298057702","CVE-2023-40077"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/av/+/58fd993a89a3a22fa5a4a1a4548125c6783ec80c"}],"affected":[{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2023-12-01"}]}],"versions":["14-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196"],"severity":"Critical","spl":"2023-12-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-298057702-164b0e19","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","target":{"file":"media/module/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","15600682338450327382560076975837243885","125354958160092802429146562220425657449","145223589000727474561977894963958446316","227892277488239637546648527374123349457"],"threshold":0.9}},{"digest":{"function_hash":"53306167433269421111706409143521071482","length":73},"id":"ASB-A-298057702-38b930e8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::clear"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"22971970037536531725100604479695516728","length":349},"id":"ASB-A-298057702-55d186f3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::dumpToLog"}},{"source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::remove"},"deprecated":false,"digest":{"function_hash":"55173831832855155563492366957021512072","length":207},"id":"ASB-A-298057702-6462224d","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","target":{"function":"MetaDataBase::hasData","file":"media/module/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"function_hash":"245559816575705263568317161581911053966","length":164},"id":"ASB-A-298057702-86176428","signature_type":"Function","signature_version":"v1"},{"target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::setData"},"deprecated":false,"digest":{"function_hash":"175696268568583217842178294542562977543","length":395},"id":"ASB-A-298057702-9573264c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196"},{"deprecated":false,"digest":{"function_hash":"48664191158994694456287320300999414801","length":327},"id":"ASB-A-298057702-97b44d7c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::findData"}},{"deprecated":false,"digest":{"function_hash":"188048871823142734216492310045652806664","length":428},"id":"ASB-A-298057702-b41f8d14","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::toString"}},{"deprecated":false,"digest":{"function_hash":"194709428110958800386906704381491643876","length":944},"id":"ASB-A-298057702-c8f24a39","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/90fb4ca425444429ada6ce0de1c13d35829bc196","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::writeToParcel"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-12-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"],"severity":"Critical","spl":"2023-12-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::findData"},"deprecated":false,"digest":{"length":327,"function_hash":"48664191158994694456287320300999414801"},"id":"ASB-A-298057702-1c3212de","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::remove"},"deprecated":false,"digest":{"length":207,"function_hash":"55173831832855155563492366957021512072"},"id":"ASB-A-298057702-322c6c86","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-298057702-409fc5a7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::hasData"},"deprecated":false,"digest":{"function_hash":"245559816575705263568317161581911053966","length":164}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::clear"},"deprecated":false,"digest":{"length":73,"function_hash":"53306167433269421111706409143521071482"},"id":"ASB-A-298057702-689e189c","signature_type":"Function"},{"deprecated":false,"digest":{"length":944,"function_hash":"194709428110958800386906704381491643876"},"id":"ASB-A-298057702-babe4ee1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::writeToParcel"}},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::dumpToLog"},"deprecated":false,"digest":{"function_hash":"309146812019522743025181760492134961754","length":350},"id":"ASB-A-298057702-e273d193","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","57039235074992601129765161197659465993","188042787196234033121544054866144156065","145223589000727474561977894963958446316","227892277488239637546648527374123349457"],"threshold":0.9},"id":"ASB-A-298057702-e6918dbb","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::setData"},"deprecated":false,"digest":{"function_hash":"175696268568583217842178294542562977543","length":395},"id":"ASB-A-298057702-f15e583b","signature_type":"Function","signature_version":"v1"},{"target":{"function":"MetaDataBase::toString","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"length":429,"function_hash":"29780867610742078482622038467121351946"},"id":"ASB-A-298057702-f5e43e7a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-12-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"Critical","spl":"2023-12-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::clear"},"deprecated":false,"digest":{"function_hash":"53306167433269421111706409143521071482","length":73},"id":"ASB-A-298057702-0f97a075"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","57039235074992601129765161197659465993","188042787196234033121544054866144156065","145223589000727474561977894963958446316","227892277488239637546648527374123349457"]},"id":"ASB-A-298057702-1faab949","signature_type":"Line"},{"target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::toString"},"deprecated":false,"digest":{"function_hash":"29780867610742078482622038467121351946","length":429},"id":"ASB-A-298057702-43564994","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"deprecated":false,"digest":{"length":164,"function_hash":"245559816575705263568317161581911053966"},"id":"ASB-A-298057702-4aa43689","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::hasData"}},{"id":"ASB-A-298057702-65e507c2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::dumpToLog"},"deprecated":false,"digest":{"function_hash":"309146812019522743025181760492134961754","length":350}},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::setData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"function_hash":"175696268568583217842178294542562977543","length":395},"id":"ASB-A-298057702-7e6f072a","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":207,"function_hash":"55173831832855155563492366957021512072"},"id":"ASB-A-298057702-8d063426","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::remove","file":"media/libstagefright/foundation/MetaDataBase.cpp"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::writeToParcel"},"deprecated":false,"digest":{"function_hash":"194709428110958800386906704381491643876","length":944},"id":"ASB-A-298057702-dd20e1ec","signature_type":"Function"},{"target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::findData"},"deprecated":false,"digest":{"length":327,"function_hash":"48664191158994694456287320300999414801"},"id":"ASB-A-298057702-ecd878b8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-12-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::hasData"},"deprecated":false,"digest":{"function_hash":"245559816575705263568317161581911053966","length":164},"id":"ASB-A-298057702-0fb9d10f","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::dumpToLog","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"function_hash":"309146812019522743025181760492134961754","length":350},"id":"ASB-A-298057702-13ea5a2c","signature_type":"Function"},{"deprecated":false,"digest":{"length":944,"function_hash":"194709428110958800386906704381491643876"},"id":"ASB-A-298057702-330ddfa0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::writeToParcel"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::remove","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"function_hash":"55173831832855155563492366957021512072","length":207},"id":"ASB-A-298057702-51ec40c7","signature_type":"Function"},{"id":"ASB-A-298057702-5d8b9f36","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::setData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"function_hash":"175696268568583217842178294542562977543","length":395}},{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::findData"},"deprecated":false,"digest":{"length":327,"function_hash":"48664191158994694456287320300999414801"},"id":"ASB-A-298057702-87397bdb","signature_type":"Function","signature_version":"v1"},{"target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::toString"},"deprecated":false,"digest":{"length":429,"function_hash":"29780867610742078482622038467121351946"},"id":"ASB-A-298057702-a6fe1cc8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::clear"},"deprecated":false,"digest":{"function_hash":"53306167433269421111706409143521071482","length":73},"id":"ASB-A-298057702-b12d52fa","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","57039235074992601129765161197659465993","188042787196234033121544054866144156065","145223589000727474561977894963958446316","227892277488239637546648527374123349457"],"threshold":0.9},"id":"ASB-A-298057702-e36f85b6","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"],"severity":"Critical","spl":"2023-12-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-12-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::dumpToLog"},"deprecated":false,"digest":{"function_hash":"309146812019522743025181760492134961754","length":350},"id":"ASB-A-298057702-050b257e","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::clear"},"deprecated":false,"digest":{"function_hash":"53306167433269421111706409143521071482","length":73},"id":"ASB-A-298057702-34a57b6b","signature_type":"Function"},{"id":"ASB-A-298057702-8b1e10ad","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"function":"MetaDataBase::toString","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"length":429,"function_hash":"29780867610742078482622038467121351946"}},{"deprecated":false,"digest":{"length":327,"function_hash":"48664191158994694456287320300999414801"},"id":"ASB-A-298057702-9429d16c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::findData"}},{"target":{"function":"MetaDataBase::setData","file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"function_hash":"175696268568583217842178294542562977543","length":395},"id":"ASB-A-298057702-a4c7a300","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"},{"id":"ASB-A-298057702-b6388577","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::remove"},"deprecated":false,"digest":{"function_hash":"55173831832855155563492366957021512072","length":207}},{"deprecated":false,"digest":{"function_hash":"194709428110958800386906704381491643876","length":944},"id":"ASB-A-298057702-ce514813","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::writeToParcel"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","57039235074992601129765161197659465993","188042787196234033121544054866144156065","145223589000727474561977894963958446316","227892277488239637546648527374123349457"],"threshold":0.9},"id":"ASB-A-298057702-ddc7b76a","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"245559816575705263568317161581911053966","length":164},"id":"ASB-A-298057702-f27d09df","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9","target":{"file":"media/libstagefright/foundation/MetaDataBase.cpp","function":"MetaDataBase::hasData"}}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/3c1d9613ef64e01d2e81c4aa44c90dcd8ca958b9"],"severity":"Critical","spl":"2023-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2023-12-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"function":"MetaDataBase::clear","file":"media/module/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"function_hash":"53306167433269421111706409143521071482","length":73},"id":"ASB-A-298057702-012aa645","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"function":"MetaDataBase::toString","file":"media/module/foundation/MetaDataBase.cpp"},"deprecated":false,"digest":{"length":429,"function_hash":"29780867610742078482622038467121351946"},"id":"ASB-A-298057702-05d30357","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::remove"},"deprecated":false,"digest":{"length":207,"function_hash":"55173831832855155563492366957021512072"},"id":"ASB-A-298057702-208f4ea7","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::writeToParcel"},"deprecated":false,"digest":{"function_hash":"194709428110958800386906704381491643876","length":944},"id":"ASB-A-298057702-4e828a57","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["244319712793244425102007124655707433228","260118210064859206548348440852154892820","100957007211784539508826744850153929967","272796453660105516353111201915921380203","226576312175207538758640357804206738183","32528416037915169947029207358397201679","234479922790555306085990354585645107173","175005767325615549808831198920653265655","326878793529054592505717251685389394899","273211442842194810386650410472658375008","130589996484598312861762658065314759364","72405015742117409050157966040669010540","286769495337028016553883545483357657076","1365179774077916083917231208033050894","146271763818314134856869573962125950376","79537611373386822965055253316006374131","203332525672315243695055440988382590601","207306234918555656951594550531012609884","37054623378801301460500002254675361703","248396142990988958783921854904333739096","29124664604950481010426928877134330283","321504687895118151851930274551020450220","269440994916920168440537378510609415081","114118145041772818619173878280373624090","88367295062945091298180690726376565026","204257197674564862692249767499332680936","242903581933114961860732313952182262463","225136740585580171414302455120559554796","108916889757061919262848430782804157026","46319670440565651627674789641159609694","170817521390960710972998028979264681752","32893598990312446918282275528455861729","3355994305371326062997009229290898422","15600682338450327382560076975837243885","125354958160092802429146562220425657449","145223589000727474561977894963958446316","227892277488239637546648527374123349457"],"threshold":0.9},"id":"ASB-A-298057702-5c36d140","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"file":"media/module/foundation/MetaDataBase.cpp"}},{"deprecated":false,"digest":{"function_hash":"48664191158994694456287320300999414801","length":327},"id":"ASB-A-298057702-d067220f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::findData"}},{"id":"ASB-A-298057702-dffb1bec","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::dumpToLog"},"deprecated":false,"digest":{"length":350,"function_hash":"309146812019522743025181760492134961754"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"file":"media/module/foundation/MetaDataBase.cpp","function":"MetaDataBase::hasData"},"deprecated":false,"digest":{"length":164,"function_hash":"245559816575705263568317161581911053966"},"id":"ASB-A-298057702-e537e403"},{"deprecated":false,"digest":{"length":395,"function_hash":"175696268568583217842178294542562977543"},"id":"ASB-A-298057702-e670f658","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19","target":{"function":"MetaDataBase::setData","file":"media/module/foundation/MetaDataBase.cpp"}}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/300e148b8e80387fa5c9a69feb38f8af53541d19"],"severity":"Critical","spl":"2023-12-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-298057702.json"}}],"schema_version":"1.9.0"}