{"id":"ASB-A-478124606","details":"In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-478124606","CVE-2026-58953"],"modified":"2026-11-02T17:11:13.083550694Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/external/libopenapv","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"target":{"file":"src/oapv.c","function":"dec_tile"},"deprecated":false,"digest":{"function_hash":"304509763199965577256509434847247705885","length":1528},"id":"ASB-A-478124606-06f2788b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv_bs.c"},"deprecated":false,"digest":{"line_hashes":["306804655663609708053570445986652972827","271769846158795932412533941088557846299","112725039428213394537080601234569683558","214980807704459883699026575005624121250","338475022908473599457876451107278927354","129856564121979987101349095868281975328","242653130481442389304060870280167761095","19308259885312375685746337165777377997","150440855871668812117387500967960312950","237877512175035462728050920614871973796","252423143556877284495697777512069414042","61240530469258535065456462259423966260","143343539864825261223885910677250485423","199532666720922573736772660516350799118","146226301090825216612362640354154089979","176007854568102923446011280445130182235","85431138741438263788386946471009644546","116135739372737370574656444719424773907","194333161924062695752037670500011229622","84527681032850362373221215218492932657","330829212851336659845811060538936316757","294944023577829576056060612975112069553","11144669591723803568800545081821014377","205009662030054944248770864599460471939","251291473154044715053758012145394088525","41654096441434770155285296418027351041","328167015960346937091485131308517119468","20578911872139070486687222702294768069","239414867931028058884868431129173036311","12789179172785958517994863701747246256","67444290424705675629706357587212145603","158785208660245008790867600711172988694","311502288273218698717497428406924691144","315367800638012135768278615368187544784","71672643260819613228664109529507406011","7853634349394412991935963511304339536","165949888578219813618922492546738911716","237744939036304065738139853108912846348","238959474484942934390120705823094406454","135694976395886761089745359255197330290","103132673492479084383104907917935944861","25418283315573414025102630921081130684","335467826470230855006771857751035619220","128331209363596338074436698001227040097","36707425311434315623998470648293536111","274838023426205517685950910692585820942","259191217111629825277269215498463173570","98177808795342052940002560203577178489","145029076144936712055427468182664847659","221287633221672739765505091662520635696","262470943217184442513977348239904549628","173639732677598946076231497405749832476","244615105662105983091734978711446354278","21018449969440410178863008171396888249","242252854948067413057046059910645579546","118349590793566906895442192158082968578","294399330592000323492380550160441018418","318192401988385998374077156004222022675","12677579531060476387850160464306973889","174599115623368950862509021293263403127","336986513905335099392235919030965343742","130992990759172349133139882588022623037","12845305304196998185692949225243329701","85715853989418861017597048391689759204","83260207085371833142489186515381243468","91208842172226989133040558546500255937","80266642597725350487066667390151499716","329688334822125548632723255542873377280"],"threshold":0.9},"id":"ASB-A-478124606-13256706"},{"target":{"file":"src/oapv_util.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["147050356653216684935792238045634359841","123496936225680246358031799757483224112","108468987849756238203526932703015286336"]},"id":"ASB-A-478124606-1affa3c3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e"},{"target":{"file":"src/oapv.c"},"deprecated":false,"digest":{"line_hashes":["239329642146514748903978093476090598727","101109709445647059337800382182087333968","176046405233506440653480221972580046968","294174477047956553513649127000797317914","92218081432883727278144579584979645457","273048989266109036554905973230155631668","131666277530245530940960776689985285081","273184981547904851951165610296399744631","315214060938318040172042576520503603445","314126125481345429640827542972405497814","281984085029316835727903236777758036856","182893831875177041081401620446169956987","254168080067341664539420207172469196756","270659347195035892037179824466284256818","1885873059059631248358670437844860646","36557522877706766483917953179468526904","29441619613574880947181336571169337367","210028066345968799100768555683848586909","51258820658087766907403574593921480201","214122098925104425265452367613389888858","53885938550019886034590500589470600690","1618521718667826152626377611836360724","229593935279824006931151405555090849001","169525748279002839779985149513926473189","105996551948169960559938569987618915920","234854497332659537940337756036190549925","128920509490591609330158795742631845641","248349050343778294827386199050030771812","279763120690161080177032474953122780228","162935706999297070426506574264185122686","174605168341335202007655342266530897110","1814490243741682279243296330529410490","333454433662276566841560616737477149102","339753233595786447842404646605408185197","324864308235104476399383658457906605085","129581166109840480952838168061559133778","83852411108015663104263225862268165805","136781218407767748766908859247542972884","316939013605634255763082182884100836839","322677907805894311630098471024059827223","142275687027076111449207509124152496519","184785431483777127876798953210339412013","59106938563390495535365185168417307259","96183739387179562417019199986959627931","223125402843962535832248360112879936603","182971226288859980219919698629680058638","59250864092907034765585699566882015254","29755457884751664375758377593626658044","119324402956080843397358957091966819682","78915033041301612133919486716279642796","223211093430888477146531372307897440842","126340139673492301332787214545411264223","186239961034851186470776194620962884875","295806556824921962116527987823588526460","215986198611229174127753559492658147843","308949372283613419884281148474461124819","318439228090912079909564722051046189400","193680610683980090843527592510121842958","7828066856350110254512018871113895881","56308778265669279605770655914495907825","215233084059914509675558779650843201254","3837572756956821808094453142752620364","168820007040917980411651407480417715974","107806087649097319545689671750915423690","315849012866434527055330841009427073615","31466360744841959203378280586177519321","12913500712749295036472228529819126514","20406241604057270937152598257574114573","33037266663065025943695430794275420312","131848601318329001776686680398593989832","331705577761588409149184528469755880124","297717367304203077131142994209034743487","282035020923381897945115063423621215745","43550344364306564570964734786220665774","284399742772853075016280965455917196289","78056266077423531884559891796370956387","136985291040526130018158336875566632234","293479879884500827543794473855152777829","101093044892966115096908655085335995844","70947536885213457410629269953178080377","62864589195712273510709164707786880337","226944782384258045680483643330522244291","186255800714842142053193070458453047225","295736305746204396114197169908737195803","93871653515690149694395343548110070128","199397271668470670358634454868592661255","146729232025414793704214775599029398800","22901352951280097055438074499786079197","300498843291646514472694013008341245771","101477119255938033330232701287294757819","192742265263238391388546272328215697386","168561447191033538372252447592300351765","37477320204451634619002727673702708264","9035475226428839892137460094787793947","124088389033324053389333526190712546519","36386380494205004636193439412861049838","250353755738093301581054263957556455713","228099480152790068895883853517329640167","59107187795056781296333637527654447190","130806101748916765789821907318178191939","90613091123340144205575205044715288731","51141299669298409802223948235647789640","171181786958034312804215959867603077119","229914389482565099990640290597402886623","17088332540924695131607181558903436337","37140832682917657222634490197400116055","94974281826502338049089358415750443578","216676809737650295086482112875615391422","7358342534158399663086004234311308762","283937845236780742085033184666888599024"],"threshold":0.9},"id":"ASB-A-478124606-1cc363b3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e"},{"digest":{"function_hash":"16466931485842259072619927108384739158","length":525},"id":"ASB-A-478124606-1cfb5f11","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"function":"dec_vlc_read_kparam0","file":"src/oapv_vlc.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"66320045164103590324610109887674655984","length":283},"id":"ASB-A-478124606-1d1b976e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"function":"oapv_bsr_init","file":"src/oapv_bs.c"}},{"target":{"file":"src/oapv_def.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["24299824089452477255494986298712744140","124428885708269670929362292312237158953","291349350841167724974127040080329753374","212588353507798469078058025939531368401"]},"id":"ASB-A-478124606-42c68dcc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e"},{"digest":{"line_hashes":["27199045464969355336091187534681226732","161114728030417761492814237674770660262","110362082685764601468679850542153759077","158767099594946616623027512775582209642"],"threshold":0.9},"id":"ASB-A-478124606-43fbba91","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv_util.h"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv_vlc.c","function":"dec_vlc_read"},"deprecated":false,"digest":{"function_hash":"198250105740684287578220815530859541630","length":775},"id":"ASB-A-478124606-49a5442b","signature_type":"Function"},{"target":{"file":"src/oapv_bs.h"},"deprecated":false,"digest":{"line_hashes":["133169548545843719690903104216108619919","176435776860383617290850880426760374226","221328182751127852249546860487057488949","36732613122352367222671873116867195773","158106557060977467071005935978803744150","89717524343309193563831639176681260866","10237655853521209206023734192286015275","260192127668897634885246901860032426904"],"threshold":0.9},"id":"ASB-A-478124606-6343e9cc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["335754887932454428605391085836974774803","23073939777133765238185730170854103037","222272779358279063980047276172481085286","159201349010399792549150310507773593624"]},"id":"ASB-A-478124606-6d54a424","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv_vlc.h"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["74021786905311137162275303801071098230","26677658313310906307817955968255029035","303858925878780297480239578054940197224","235929103430223362826079516282464127497","239301728585373180550476678895101557161","8566693063610802158286835632209192044","302088609220890105451025977012436836341","334215800561222670216838392834907481777","282558485312344349227609501944819129874","126659844574465620064927835095020627273","106677581945077371867324509187338750707","151558839360520687717706232594343850154","147581319475150494157951370458192018318","302748215506842911373538919059108775804","74860011428565250318361712076481827844","97641507736914500207191860069416412179","83059087936997439508928961725772058727","3549865711972120249220306737536563183","109666576042273775729460453338269169382","147473072431640190936247871892466893884","155500121178186328230434587628917262460","277912535146321897015050596591114954099","143913562549146751349960878669883545112","223169346524573435355099022841021985016","309875227547343292514110431412504324503","72128049240308970200138367593713570397"]},"id":"ASB-A-478124606-8677493e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv_vlc.c"}},{"digest":{"function_hash":"175092859714511684876533468835861832948","length":526},"id":"ASB-A-478124606-8b59a79b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"function":"oapv_bsr_peek","file":"src/oapv_bs.c"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv_bs.c","function":"bsr_skip_code"},"deprecated":false,"digest":{"function_hash":"16980636363961906479745580504469655787","length":244},"id":"ASB-A-478124606-9cb739b4","signature_type":"Function"},{"id":"ASB-A-478124606-a42b780a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv_bs.c","function":"oapv_bsr_clz_in_code"},"deprecated":false,"digest":{"length":242,"function_hash":"296678529983667054113800305808697830943"}},{"digest":{"function_hash":"323727509444774205589738595846239853095","length":1165},"id":"ASB-A-478124606-c1adcaa6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv_vlc.c","function":"oapvd_vlc_ac_coef"},"deprecated":false},{"target":{"file":"src/oapv.c","function":"oapvd_decode"},"deprecated":false,"digest":{"function_hash":"218866355101441239577545530846259733104","length":2892},"id":"ASB-A-478124606-cfc12a31","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e"},{"digest":{"function_hash":"209881597997428982643119472358018285228","length":168},"id":"ASB-A-478124606-d1a0c901","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv.c","function":"dec_frm_finish"},"deprecated":false},{"digest":{"length":154,"function_hash":"228502162527749515677552261237725722741"},"id":"ASB-A-478124606-d8ed833b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv_bs.c","function":"oapv_bsr_clz"},"deprecated":false},{"source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv_vlc.c","function":"oapvd_vlc_tile_header"},"deprecated":false,"digest":{"length":993,"function_hash":"134462073338955407775284094452072033714"},"id":"ASB-A-478124606-fc5b6513","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":1761,"function_hash":"53014484021076817078859907083358306847"},"id":"ASB-A-478124606-fcb0ec7d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e","target":{"file":"src/oapv.c","function":"dec_thread_tile"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-478124606.json"}},{"package":{"name":"platform/external/libopenapv","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_util.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["27199045464969355336091187534681226732","161114728030417761492814237674770660262","110362082685764601468679850542153759077","158767099594946616623027512775582209642"]},"id":"ASB-A-478124606-05f66bbf"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_util.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["147050356653216684935792238045634359841","123496936225680246358031799757483224112","108468987849756238203526932703015286336"]},"id":"ASB-A-478124606-12615ba4"},{"deprecated":false,"digest":{"function_hash":"296678529983667054113800305808697830943","length":242},"id":"ASB-A-478124606-25234c90","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_bs.c","function":"oapv_bsr_clz_in_code"}},{"target":{"function":"oapv_bsr_init","file":"src/oapv_bs.c"},"deprecated":false,"digest":{"function_hash":"66320045164103590324610109887674655984","length":283},"id":"ASB-A-478124606-38a43792","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3"},{"source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_bs.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["133169548545843719690903104216108619919","176435776860383617290850880426760374226","221328182751127852249546860487057488949","36732613122352367222671873116867195773","158106557060977467071005935978803744150","89717524343309193563831639176681260866","10237655853521209206023734192286015275","260192127668897634885246901860032426904"]},"id":"ASB-A-478124606-3f49014c","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_vlc.c"},"deprecated":false,"digest":{"line_hashes":["74021786905311137162275303801071098230","26677658313310906307817955968255029035","303858925878780297480239578054940197224","235929103430223362826079516282464127497","239301728585373180550476678895101557161","8566693063610802158286835632209192044","302088609220890105451025977012436836341","334215800561222670216838392834907481777","282558485312344349227609501944819129874","126659844574465620064927835095020627273","106677581945077371867324509187338750707","151558839360520687717706232594343850154","147581319475150494157951370458192018318","302748215506842911373538919059108775804","74860011428565250318361712076481827844","97641507736914500207191860069416412179","83059087936997439508928961725772058727","3549865711972120249220306737536563183","109666576042273775729460453338269169382","147473072431640190936247871892466893884","155500121178186328230434587628917262460","277912535146321897015050596591114954099","143913562549146751349960878669883545112","223169346524573435355099022841021985016","309875227547343292514110431412504324503","72128049240308970200138367593713570397"],"threshold":0.9},"id":"ASB-A-478124606-55544b70","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-478124606-5917d11c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["239329642146514748903978093476090598727","101109709445647059337800382182087333968","176046405233506440653480221972580046968","294174477047956553513649127000797317914","92218081432883727278144579584979645457","273048989266109036554905973230155631668","131666277530245530940960776689985285081","273184981547904851951165610296399744631","315214060938318040172042576520503603445","314126125481345429640827542972405497814","281984085029316835727903236777758036856","182893831875177041081401620446169956987","254168080067341664539420207172469196756","270659347195035892037179824466284256818","1885873059059631248358670437844860646","36557522877706766483917953179468526904","29441619613574880947181336571169337367","210028066345968799100768555683848586909","51258820658087766907403574593921480201","214122098925104425265452367613389888858","53885938550019886034590500589470600690","1618521718667826152626377611836360724","229593935279824006931151405555090849001","169525748279002839779985149513926473189","105996551948169960559938569987618915920","234854497332659537940337756036190549925","128920509490591609330158795742631845641","248349050343778294827386199050030771812","279763120690161080177032474953122780228","162935706999297070426506574264185122686","174605168341335202007655342266530897110","1814490243741682279243296330529410490","333454433662276566841560616737477149102","339753233595786447842404646605408185197","324864308235104476399383658457906605085","129581166109840480952838168061559133778","83852411108015663104263225862268165805","136781218407767748766908859247542972884","316939013605634255763082182884100836839","322677907805894311630098471024059827223","142275687027076111449207509124152496519","184785431483777127876798953210339412013","59106938563390495535365185168417307259","96183739387179562417019199986959627931","223125402843962535832248360112879936603","182971226288859980219919698629680058638","59250864092907034765585699566882015254","29755457884751664375758377593626658044","119324402956080843397358957091966819682","78915033041301612133919486716279642796","223211093430888477146531372307897440842","126340139673492301332787214545411264223","186239961034851186470776194620962884875","295806556824921962116527987823588526460","215986198611229174127753559492658147843","308949372283613419884281148474461124819","318439228090912079909564722051046189400","193680610683980090843527592510121842958","7828066856350110254512018871113895881","56308778265669279605770655914495907825","215233084059914509675558779650843201254","3837572756956821808094453142752620364","168820007040917980411651407480417715974","107806087649097319545689671750915423690","315849012866434527055330841009427073615","31466360744841959203378280586177519321","12913500712749295036472228529819126514","20406241604057270937152598257574114573","33037266663065025943695430794275420312","131848601318329001776686680398593989832","331705577761588409149184528469755880124","297717367304203077131142994209034743487","282035020923381897945115063423621215745","43550344364306564570964734786220665774","284399742772853075016280965455917196289","78056266077423531884559891796370956387","136985291040526130018158336875566632234","293479879884500827543794473855152777829","101093044892966115096908655085335995844","70947536885213457410629269953178080377","62864589195712273510709164707786880337","226944782384258045680483643330522244291","186255800714842142053193070458453047225","295736305746204396114197169908737195803","93871653515690149694395343548110070128","199397271668470670358634454868592661255","146729232025414793704214775599029398800","22901352951280097055438074499786079197","300498843291646514472694013008341245771","101477119255938033330232701287294757819","192742265263238391388546272328215697386","168561447191033538372252447592300351765","37477320204451634619002727673702708264","9035475226428839892137460094787793947","124088389033324053389333526190712546519","36386380494205004636193439412861049838","250353755738093301581054263957556455713","228099480152790068895883853517329640167","59107187795056781296333637527654447190","130806101748916765789821907318178191939","90613091123340144205575205044715288731","51141299669298409802223948235647789640","171181786958034312804215959867603077119","229914389482565099990640290597402886623","17088332540924695131607181558903436337","37140832682917657222634490197400116055","94974281826502338049089358415750443578","216676809737650295086482112875615391422","7358342534158399663086004234311308762","283937845236780742085033184666888599024"]}},{"id":"ASB-A-478124606-7672e490","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv.c","function":"dec_frm_finish"},"deprecated":false,"digest":{"length":168,"function_hash":"209881597997428982643119472358018285228"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"function":"bsr_skip_code","file":"src/oapv_bs.c"},"deprecated":false,"digest":{"length":244,"function_hash":"16980636363961906479745580504469655787"},"id":"ASB-A-478124606-7afac9c7"},{"deprecated":false,"digest":{"length":525,"function_hash":"16466931485842259072619927108384739158"},"id":"ASB-A-478124606-7e79ea9a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_vlc.c","function":"dec_vlc_read_kparam0"}},{"deprecated":false,"digest":{"function_hash":"218866355101441239577545530846259733104","length":2892},"id":"ASB-A-478124606-83620ca1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv.c","function":"oapvd_decode"}},{"source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_bs.c"},"deprecated":false,"digest":{"line_hashes":["306804655663609708053570445986652972827","271769846158795932412533941088557846299","112725039428213394537080601234569683558","214980807704459883699026575005624121250","338475022908473599457876451107278927354","129856564121979987101349095868281975328","242653130481442389304060870280167761095","19308259885312375685746337165777377997","150440855871668812117387500967960312950","237877512175035462728050920614871973796","252423143556877284495697777512069414042","61240530469258535065456462259423966260","143343539864825261223885910677250485423","199532666720922573736772660516350799118","146226301090825216612362640354154089979","176007854568102923446011280445130182235","85431138741438263788386946471009644546","116135739372737370574656444719424773907","194333161924062695752037670500011229622","84527681032850362373221215218492932657","330829212851336659845811060538936316757","294944023577829576056060612975112069553","11144669591723803568800545081821014377","205009662030054944248770864599460471939","251291473154044715053758012145394088525","41654096441434770155285296418027351041","328167015960346937091485131308517119468","20578911872139070486687222702294768069","239414867931028058884868431129173036311","12789179172785958517994863701747246256","67444290424705675629706357587212145603","158785208660245008790867600711172988694","311502288273218698717497428406924691144","315367800638012135768278615368187544784","71672643260819613228664109529507406011","7853634349394412991935963511304339536","165949888578219813618922492546738911716","237744939036304065738139853108912846348","238959474484942934390120705823094406454","135694976395886761089745359255197330290","103132673492479084383104907917935944861","25418283315573414025102630921081130684","335467826470230855006771857751035619220","128331209363596338074436698001227040097","36707425311434315623998470648293536111","274838023426205517685950910692585820942","259191217111629825277269215498463173570","98177808795342052940002560203577178489","145029076144936712055427468182664847659","221287633221672739765505091662520635696","262470943217184442513977348239904549628","173639732677598946076231497405749832476","244615105662105983091734978711446354278","21018449969440410178863008171396888249","242252854948067413057046059910645579546","118349590793566906895442192158082968578","294399330592000323492380550160441018418","318192401988385998374077156004222022675","12677579531060476387850160464306973889","174599115623368950862509021293263403127","336986513905335099392235919030965343742","130992990759172349133139882588022623037","12845305304196998185692949225243329701","85715853989418861017597048391689759204","83260207085371833142489186515381243468","91208842172226989133040558546500255937","80266642597725350487066667390151499716","210580323162054253763715699525664376731"],"threshold":0.9},"id":"ASB-A-478124606-8d205f09","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":1761,"function_hash":"53014484021076817078859907083358306847"},"id":"ASB-A-478124606-a51c6639","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv.c","function":"dec_thread_tile"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_bs.c","function":"oapv_bsr_peek"},"deprecated":false,"digest":{"length":526,"function_hash":"175092859714511684876533468835861832948"},"id":"ASB-A-478124606-b17dd50a","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_vlc.c","function":"oapvd_vlc_ac_coef"},"deprecated":false,"digest":{"function_hash":"323727509444774205589738595846239853095","length":1165},"id":"ASB-A-478124606-b26a7e35","signature_type":"Function"},{"digest":{"function_hash":"198250105740684287578220815530859541630","length":775},"id":"ASB-A-478124606-b9e0525f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_vlc.c","function":"dec_vlc_read"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_bs.c","function":"oapv_bsr_clz"},"deprecated":false,"digest":{"function_hash":"228502162527749515677552261237725722741","length":154},"id":"ASB-A-478124606-d296696c","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_vlc.h"},"deprecated":false,"digest":{"line_hashes":["335754887932454428605391085836974774803","23073939777133765238185730170854103037","222272779358279063980047276172481085286","159201349010399792549150310507773593624"],"threshold":0.9},"id":"ASB-A-478124606-d73ea00c","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["24299824089452477255494986298712744140","124428885708269670929362292312237158953","291349350841167724974127040080329753374","212588353507798469078058025939531368401"]},"id":"ASB-A-478124606-dccf698d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv_def.h"}},{"source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"file":"src/oapv.c","function":"dec_tile"},"deprecated":false,"digest":{"function_hash":"304509763199965577256509434847247705885","length":1528},"id":"ASB-A-478124606-ecfa36e3","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"134462073338955407775284094452072033714","length":993},"id":"ASB-A-478124606-efa36c1a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3","target":{"function":"oapvd_vlc_tile_header","file":"src/oapv_vlc.c"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-478124606.json"}},{"package":{"name":"platform/external/libopenapv","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/external/libopenapv/+/8541da2c50be2190616ed9abaeea2c34f2aecedc"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-478124606.json"}}],"schema_version":"1.9.2"}