{"id":"ASB-A-503553199","details":"In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-503553199","CVE-2026-58857"],"modified":"2026-11-02T17:11:23.711820580Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"types":["RCE"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9","target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp","function":"CryptoHalHidl::decrypt"},"deprecated":false,"digest":{"function_hash":"92434238328359427533805480715019279874","length":2353},"id":"ASB-A-503553199-14f92940","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"},"deprecated":false,"digest":{"line_hashes":["116398976274676807861815055289584391941","144317834197804583949997704591105021970","147067926655243079586098172697376885330","285942723831502126131651310527565932076","113135469251638982525309867776300725927","129093138904405014195526321142954592500","40895737787732672842662480881686154399","148783010962463127287152237223160048083","168955615500345530522198269264285280441","313379577613574381757961755922643803424","83643775489853916012032244592934079138","222521284778517660635009885536991421320","224966072402027058726543161868259709962","98276915140238329207042575926922369718","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","134364018144186566264125387777498138511","149868529080580380637069160283616294179","218253371168153009013225208173018335318","94954489847986270897814025138479459219","45452348122889708970495160176549014179","62196554265242122542547959091529437358","65845628554467497228578527325017616198","126192705618309597571155756133316523772","121466845780643183219795647460322583345","262145893499572881063429645494824764706","266482545227411205518500696047058882807","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","65013863520470319012736106432974236627","207196781909596399081362088776521240324","224783454770738306129470391464221900167","137412916443155729926891781434010460193","43998913130146404373175798102228618596","140324134320773802349254854693533219961","143510049864936205968745167793803641314","217630865572033851871391177092231929703","207597191516229269494749986377042254386","76224918123594561487589507487694908951","3315583183640191004808358994239975169","285942723831502126131651310527565932076","69377276031023104359280074458199200","31451994447820162396160053222244904029","103292613294194618301090808048417885156","240383456580837307609549218965605765866","304038706053863636628608171608407446510","19241433767607171292137599708155935456","40895737787732672842662480881686154399","148783010962463127287152237223160048083","6019751444033728271651278321775587380","298561757863771037628801531619808354220","87862376165794177556139523739713054007","86558970956858919306395349958263772137","283078373913132637920361235025203878981","207276655054412565720638547593102862345","7114904997161513856332652620509900859","327116597062309669203493986337525652112","226333665939632082820152346548804491537","15881474750550441046290989403409160152","181339437694405268335675565121145925012","250648878431517122544931706910189892077","299034132317418941813999046670409991286","262131140628425635339924652572131932065","245217853799649921407548552994557282721","1665265598784236769067475452822540325","56576164625086392116991568975763343249","279005522122040059704478803535762457368","84420590869722032276215518787457953036","282975713035789680523692938293529047918","20114173836857800832094337338252293498","120149911597141318724565993443871246697","213974903398465951796525481660494066625","57949316274029036641531162643638830274","281426264921375968003178789156568089006","57044648719669651296930628389230216866","122032936837011585324362025997363063415","214373073903971531096058767188982768501","263467896103836171117833028625040785815","110484051799541595975308021471984614192","72860955570186862848693659413217974433","1797775694978919423589994485615793459"],"threshold":0.9},"id":"ASB-A-503553199-5dc986ea","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"200880785744942607413972324021338563214","length":1811},"id":"ASB-A-503553199-74b17b53","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9","target":{"function":"CryptoHalAidl::decrypt","file":"drm/libmediadrm/CryptoHalAidl.cpp"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp","function":"CryptoHalAidl::getKeyHandle"},"deprecated":false,"digest":{"function_hash":"237773480675931473865997001437160967337","length":1688},"id":"ASB-A-503553199-78cbfbca"},{"source":"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9","target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"},"deprecated":false,"digest":{"line_hashes":["136008561558159789284414860699517000464","48635667608573517773652543280526156176","327092663611281307060453440134973237387","285942723831502126131651310527565932076","333546094596967691317017634368707064669","37092323462678109533672285988556644479","220206364210764897706975496541329102040","118978195093481164640349737686971345037","233265661325395061770860100951380337574","196756497943387505117716285871187629403","191274056032492496807218854557493005033","245346087701279825504642507143938474522","221656391331580916660637165273768986696","197509512699706598034966443902633891852","91807024994307410411347546242987825299","272109828673099621766261200380740956770","207278089970017946743408300575451191763","258666164178266283933372222089453439398","118332572697807363083292559092338100192","273038495151766704808870951527749028681","274634139571376668004029799847625548468","25883699426543808867326309373871996582","60740564716100833256380720417113043055","39458620374552610452147445337805116010","261074441871728517804849358376896350558","256043012620736512752740614296039015182","325491407528119250033729238168324735350","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","275056379839181534498614673314199877156","29239130922964393257781451674865544953","12578003895640142125219427048509205696","136144622019402990528837963678912623703","165429788176609819731150160320016343720","97289575300937336424996323910462288049","62196554265242122542547959091529437358","65845628554467497228578527325017616198","87214930949180766090976868650283061878","120907023513460396919560620619550025002","91629993407600847374262374916569297505","282540319885443976458835008791693562154","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","194681484590750655057844816950106742643","18991182563141039352516291201079683499","331270146420827840503178519813839606939","116788108612278656850534679359039800622","43054030431655639192701776020475262316","87434548352434590928216364180120070439","109046738105289833418291027950127217119","270542522638883787688999035069556902205","281471280782935070035228086677293807404","36256514487544869762194684680382629802","132239540320029282884077024506692346235","282464679918916064853664307207267990597"],"threshold":0.9},"id":"ASB-A-503553199-90a86452","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503553199.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["116398976274676807861815055289584391941","144317834197804583949997704591105021970","147067926655243079586098172697376885330","285942723831502126131651310527565932076","113135469251638982525309867776300725927","75015547659590843503738443812212805285","254594088162181329254417714744487875650","155550046294398328893379336929957131126","111100672753509616641667418178021369443","89092135095173198862533738118120719175","250892092583501519193408132002799559603","57460130377377281888938520764923655239","88383886198204233019760992139271429034","276747662368406441524385544832867075017","57138066119033913426898533764205060256","262017377830166637243703104086683105607","134328847476308565405679037776609912206","210950281116017447448969185203946104468","169357150729953615763616905120740670960","50742627826775266345577540302875832381","274634139571376668004029799847625548468","83376367523670122139517861304614521770","313379577613574381757961755922643803424","83643775489853916012032244592934079138","222521284778517660635009885536991421320","224966072402027058726543161868259709962","98276915140238329207042575926922369718","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","134364018144186566264125387777498138511","149868529080580380637069160283616294179","218253371168153009013225208173018335318","94954489847986270897814025138479459219","45452348122889708970495160176549014179","62196554265242122542547959091529437358","65845628554467497228578527325017616198","126192705618309597571155756133316523772","121466845780643183219795647460322583345","262145893499572881063429645494824764706","266482545227411205518500696047058882807","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","65013863520470319012736106432974236627","207196781909596399081362088776521240324","224783454770738306129470391464221900167","137412916443155729926891781434010460193","43998913130146404373175798102228618596","140324134320773802349254854693533219961","143510049864936205968745167793803641314","217630865572033851871391177092231929703","190661198040804045582720927270526044982","140543795695882449030112144213893832564","198399827718627901327817990770396249386"],"threshold":0.9},"id":"ASB-A-503553199-b507c3c3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp","function":"CryptoHalAidl::decrypt"},"deprecated":false,"digest":{"length":2093,"function_hash":"287854885063672603448585964689917529946"},"id":"ASB-A-503553199-c4ebbb96","signature_type":"Function"},{"target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["136008561558159789284414860699517000464","48635667608573517773652543280526156176","327092663611281307060453440134973237387","285942723831502126131651310527565932076","333546094596967691317017634368707064669","37092323462678109533672285988556644479","220206364210764897706975496541329102040","118978195093481164640349737686971345037","233265661325395061770860100951380337574","196756497943387505117716285871187629403","191274056032492496807218854557493005033","245346087701279825504642507143938474522","221656391331580916660637165273768986696","197509512699706598034966443902633891852","91807024994307410411347546242987825299","272109828673099621766261200380740956770","207278089970017946743408300575451191763","258666164178266283933372222089453439398","118332572697807363083292559092338100192","273038495151766704808870951527749028681","274634139571376668004029799847625548468","25883699426543808867326309373871996582","60740564716100833256380720417113043055","39458620374552610452147445337805116010","261074441871728517804849358376896350558","256043012620736512752740614296039015182","325491407528119250033729238168324735350","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","275056379839181534498614673314199877156","29239130922964393257781451674865544953","12578003895640142125219427048509205696","136144622019402990528837963678912623703","165429788176609819731150160320016343720","97289575300937336424996323910462288049","62196554265242122542547959091529437358","65845628554467497228578527325017616198","87214930949180766090976868650283061878","120907023513460396919560620619550025002","91629993407600847374262374916569297505","282540319885443976458835008791693562154","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","194681484590750655057844816950106742643","18991182563141039352516291201079683499","331270146420827840503178519813839606939","116788108612278656850534679359039800622","43054030431655639192701776020475262316","87434548352434590928216364180120070439","109046738105289833418291027950127217119","270542522638883787688999035069556902205","281471280782935070035228086677293807404","36256514487544869762194684680382629802","132239540320029282884077024506692346235","282464679918916064853664307207267990597"]},"id":"ASB-A-503553199-c720bb77","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084","target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp","function":"CryptoHalHidl::decrypt"},"deprecated":false,"digest":{"function_hash":"92434238328359427533805480715019279874","length":2353},"id":"ASB-A-503553199-d865b3ff"}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084"],"severity":"High","spl":"2026-11-01","types":["RCE"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503553199.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"line_hashes":["116398976274676807861815055289584391941","144317834197804583949997704591105021970","147067926655243079586098172697376885330","285942723831502126131651310527565932076","113135469251638982525309867776300725927","75015547659590843503738443812212805285","254594088162181329254417714744487875650","155550046294398328893379336929957131126","111100672753509616641667418178021369443","89092135095173198862533738118120719175","250892092583501519193408132002799559603","57460130377377281888938520764923655239","88383886198204233019760992139271429034","276747662368406441524385544832867075017","57138066119033913426898533764205060256","262017377830166637243703104086683105607","134328847476308565405679037776609912206","210950281116017447448969185203946104468","169357150729953615763616905120740670960","50742627826775266345577540302875832381","274634139571376668004029799847625548468","83376367523670122139517861304614521770","313379577613574381757961755922643803424","83643775489853916012032244592934079138","222521284778517660635009885536991421320","224966072402027058726543161868259709962","98276915140238329207042575926922369718","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","134364018144186566264125387777498138511","149868529080580380637069160283616294179","218253371168153009013225208173018335318","94954489847986270897814025138479459219","45452348122889708970495160176549014179","62196554265242122542547959091529437358","65845628554467497228578527325017616198","126192705618309597571155756133316523772","121466845780643183219795647460322583345","262145893499572881063429645494824764706","266482545227411205518500696047058882807","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","65013863520470319012736106432974236627","207196781909596399081362088776521240324","224783454770738306129470391464221900167","137412916443155729926891781434010460193","43998913130146404373175798102228618596","140324134320773802349254854693533219961","143510049864936205968745167793803641314","217630865572033851871391177092231929703","190661198040804045582720927270526044982","140543795695882449030112144213893832564","198399827718627901327817990770396249386"],"threshold":0.9},"id":"ASB-A-503553199-18feb29b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7","target":{"function":"CryptoHalAidl::decrypt","file":"drm/libmediadrm/CryptoHalAidl.cpp"},"deprecated":false,"digest":{"length":2093,"function_hash":"287854885063672603448585964689917529946"},"id":"ASB-A-503553199-ca3b4bf5","signature_type":"Function","signature_version":"v1"},{"target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp","function":"CryptoHalHidl::decrypt"},"deprecated":false,"digest":{"length":2353,"function_hash":"92434238328359427533805480715019279874"},"id":"ASB-A-503553199-ec4ea0c2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7","target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["136008561558159789284414860699517000464","48635667608573517773652543280526156176","327092663611281307060453440134973237387","285942723831502126131651310527565932076","333546094596967691317017634368707064669","37092323462678109533672285988556644479","220206364210764897706975496541329102040","118978195093481164640349737686971345037","233265661325395061770860100951380337574","196756497943387505117716285871187629403","191274056032492496807218854557493005033","245346087701279825504642507143938474522","221656391331580916660637165273768986696","197509512699706598034966443902633891852","91807024994307410411347546242987825299","272109828673099621766261200380740956770","207278089970017946743408300575451191763","258666164178266283933372222089453439398","118332572697807363083292559092338100192","273038495151766704808870951527749028681","274634139571376668004029799847625548468","25883699426543808867326309373871996582","60740564716100833256380720417113043055","39458620374552610452147445337805116010","261074441871728517804849358376896350558","256043012620736512752740614296039015182","325491407528119250033729238168324735350","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","275056379839181534498614673314199877156","29239130922964393257781451674865544953","12578003895640142125219427048509205696","136144622019402990528837963678912623703","165429788176609819731150160320016343720","97289575300937336424996323910462288049","62196554265242122542547959091529437358","65845628554467497228578527325017616198","87214930949180766090976868650283061878","120907023513460396919560620619550025002","91629993407600847374262374916569297505","282540319885443976458835008791693562154","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","194681484590750655057844816950106742643","18991182563141039352516291201079683499","331270146420827840503178519813839606939","116788108612278656850534679359039800622","43054030431655639192701776020475262316","87434548352434590928216364180120070439","109046738105289833418291027950127217119","270542522638883787688999035069556902205","281471280782935070035228086677293807404","36256514487544869762194684680382629802","132239540320029282884077024506692346235","282464679918916064853664307207267990597"]},"id":"ASB-A-503553199-ef0b1f00","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7"],"severity":"High","spl":"2026-11-01","types":["RCE"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503553199.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00"],"severity":"High","spl":"2026-11-01","types":["RCE"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["116398976274676807861815055289584391941","144317834197804583949997704591105021970","147067926655243079586098172697376885330","285942723831502126131651310527565932076","113135469251638982525309867776300725927","75015547659590843503738443812212805285","254594088162181329254417714744487875650","155550046294398328893379336929957131126","111100672753509616641667418178021369443","89092135095173198862533738118120719175","250892092583501519193408132002799559603","57460130377377281888938520764923655239","88383886198204233019760992139271429034","276747662368406441524385544832867075017","57138066119033913426898533764205060256","262017377830166637243703104086683105607","134328847476308565405679037776609912206","210950281116017447448969185203946104468","169357150729953615763616905120740670960","50742627826775266345577540302875832381","274634139571376668004029799847625548468","83376367523670122139517861304614521770","313379577613574381757961755922643803424","83643775489853916012032244592934079138","222521284778517660635009885536991421320","224966072402027058726543161868259709962","98276915140238329207042575926922369718","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","134364018144186566264125387777498138511","149868529080580380637069160283616294179","218253371168153009013225208173018335318","94954489847986270897814025138479459219","45452348122889708970495160176549014179","62196554265242122542547959091529437358","65845628554467497228578527325017616198","126192705618309597571155756133316523772","121466845780643183219795647460322583345","262145893499572881063429645494824764706","266482545227411205518500696047058882807","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","65013863520470319012736106432974236627","207196781909596399081362088776521240324","224783454770738306129470391464221900167","137412916443155729926891781434010460193","43998913130146404373175798102228618596","140324134320773802349254854693533219961","143510049864936205968745167793803641314","217630865572033851871391177092231929703","190661198040804045582720927270526044982","140543795695882449030112144213893832564","198399827718627901327817990770396249386"],"threshold":0.9},"id":"ASB-A-503553199-b20c4759","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00","target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["136008561558159789284414860699517000464","48635667608573517773652543280526156176","327092663611281307060453440134973237387","285942723831502126131651310527565932076","333546094596967691317017634368707064669","37092323462678109533672285988556644479","220206364210764897706975496541329102040","118978195093481164640349737686971345037","233265661325395061770860100951380337574","196756497943387505117716285871187629403","191274056032492496807218854557493005033","245346087701279825504642507143938474522","221656391331580916660637165273768986696","197509512699706598034966443902633891852","91807024994307410411347546242987825299","272109828673099621766261200380740956770","207278089970017946743408300575451191763","258666164178266283933372222089453439398","118332572697807363083292559092338100192","273038495151766704808870951527749028681","274634139571376668004029799847625548468","25883699426543808867326309373871996582","60740564716100833256380720417113043055","39458620374552610452147445337805116010","261074441871728517804849358376896350558","256043012620736512752740614296039015182","325491407528119250033729238168324735350","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","275056379839181534498614673314199877156","29239130922964393257781451674865544953","12578003895640142125219427048509205696","136144622019402990528837963678912623703","165429788176609819731150160320016343720","97289575300937336424996323910462288049","62196554265242122542547959091529437358","65845628554467497228578527325017616198","87214930949180766090976868650283061878","120907023513460396919560620619550025002","91629993407600847374262374916569297505","282540319885443976458835008791693562154","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","194681484590750655057844816950106742643","18991182563141039352516291201079683499","331270146420827840503178519813839606939","116788108612278656850534679359039800622","43054030431655639192701776020475262316","87434548352434590928216364180120070439","109046738105289833418291027950127217119","270542522638883787688999035069556902205","281471280782935070035228086677293807404","36256514487544869762194684680382629802","132239540320029282884077024506692346235","282464679918916064853664307207267990597"]},"id":"ASB-A-503553199-c613b4ab"},{"deprecated":false,"digest":{"function_hash":"92434238328359427533805480715019279874","length":2353},"id":"ASB-A-503553199-e0d1936a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00","target":{"function":"CryptoHalHidl::decrypt","file":"drm/libmediadrm/CryptoHalHidl.cpp"}},{"id":"ASB-A-503553199-e1b97126","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp","function":"CryptoHalAidl::decrypt"},"deprecated":false,"digest":{"function_hash":"287854885063672603448585964689917529946","length":2093}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503553199.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["RCE"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967","target":{"function":"CryptoHalHidl::decrypt","file":"drm/libmediadrm/CryptoHalHidl.cpp"},"deprecated":false,"digest":{"function_hash":"92434238328359427533805480715019279874","length":2353},"id":"ASB-A-503553199-4eaf06e8","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"237773480675931473865997001437160967337","length":1688},"id":"ASB-A-503553199-63d12a82","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp","function":"CryptoHalAidl::getKeyHandle"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967","target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["136008561558159789284414860699517000464","48635667608573517773652543280526156176","327092663611281307060453440134973237387","285942723831502126131651310527565932076","333546094596967691317017634368707064669","37092323462678109533672285988556644479","220206364210764897706975496541329102040","118978195093481164640349737686971345037","233265661325395061770860100951380337574","196756497943387505117716285871187629403","191274056032492496807218854557493005033","245346087701279825504642507143938474522","221656391331580916660637165273768986696","197509512699706598034966443902633891852","91807024994307410411347546242987825299","272109828673099621766261200380740956770","207278089970017946743408300575451191763","258666164178266283933372222089453439398","118332572697807363083292559092338100192","273038495151766704808870951527749028681","274634139571376668004029799847625548468","25883699426543808867326309373871996582","60740564716100833256380720417113043055","39458620374552610452147445337805116010","261074441871728517804849358376896350558","256043012620736512752740614296039015182","325491407528119250033729238168324735350","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","275056379839181534498614673314199877156","29239130922964393257781451674865544953","12578003895640142125219427048509205696","136144622019402990528837963678912623703","165429788176609819731150160320016343720","97289575300937336424996323910462288049","62196554265242122542547959091529437358","65845628554467497228578527325017616198","87214930949180766090976868650283061878","120907023513460396919560620619550025002","91629993407600847374262374916569297505","282540319885443976458835008791693562154","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","194681484590750655057844816950106742643","18991182563141039352516291201079683499","331270146420827840503178519813839606939","116788108612278656850534679359039800622","43054030431655639192701776020475262316","87434548352434590928216364180120070439","109046738105289833418291027950127217119","270542522638883787688999035069556902205","281471280782935070035228086677293807404","36256514487544869762194684680382629802","132239540320029282884077024506692346235","282464679918916064853664307207267990597"]},"id":"ASB-A-503553199-b4495efa","signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["116398976274676807861815055289584391941","144317834197804583949997704591105021970","147067926655243079586098172697376885330","285942723831502126131651310527565932076","113135469251638982525309867776300725927","129093138904405014195526321142954592500","40895737787732672842662480881686154399","148783010962463127287152237223160048083","168955615500345530522198269264285280441","313379577613574381757961755922643803424","83643775489853916012032244592934079138","222521284778517660635009885536991421320","224966072402027058726543161868259709962","98276915140238329207042575926922369718","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","134364018144186566264125387777498138511","149868529080580380637069160283616294179","218253371168153009013225208173018335318","94954489847986270897814025138479459219","45452348122889708970495160176549014179","62196554265242122542547959091529437358","65845628554467497228578527325017616198","126192705618309597571155756133316523772","121466845780643183219795647460322583345","262145893499572881063429645494824764706","266482545227411205518500696047058882807","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","65013863520470319012736106432974236627","207196781909596399081362088776521240324","224783454770738306129470391464221900167","137412916443155729926891781434010460193","43998913130146404373175798102228618596","140324134320773802349254854693533219961","143510049864936205968745167793803641314","217630865572033851871391177092231929703","207597191516229269494749986377042254386","76224918123594561487589507487694908951","3315583183640191004808358994239975169","285942723831502126131651310527565932076","69377276031023104359280074458199200","31451994447820162396160053222244904029","103292613294194618301090808048417885156","240383456580837307609549218965605765866","304038706053863636628608171608407446510","19241433767607171292137599708155935456","40895737787732672842662480881686154399","148783010962463127287152237223160048083","6019751444033728271651278321775587380","298561757863771037628801531619808354220","87862376165794177556139523739713054007","86558970956858919306395349958263772137","283078373913132637920361235025203878981","207276655054412565720638547593102862345","7114904997161513856332652620509900859","327116597062309669203493986337525652112","226333665939632082820152346548804491537","15881474750550441046290989403409160152","181339437694405268335675565121145925012","250648878431517122544931706910189892077","299034132317418941813999046670409991286","262131140628425635339924652572131932065","245217853799649921407548552994557282721","1665265598784236769067475452822540325","56576164625086392116991568975763343249","279005522122040059704478803535762457368","84420590869722032276215518787457953036","282975713035789680523692938293529047918","20114173836857800832094337338252293498","120149911597141318724565993443871246697","213974903398465951796525481660494066625","57949316274029036641531162643638830274","281426264921375968003178789156568089006","57044648719669651296930628389230216866","122032936837011585324362025997363063415","214373073903971531096058767188982768501","263467896103836171117833028625040785815","110484051799541595975308021471984614192","72860955570186862848693659413217974433","1797775694978919423589994485615793459"],"threshold":0.9},"id":"ASB-A-503553199-d86c81bc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"}},{"source":"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp","function":"CryptoHalAidl::decrypt"},"deprecated":false,"digest":{"length":1811,"function_hash":"200880785744942607413972324021338563214"},"id":"ASB-A-503553199-f1055926","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503553199.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a"],"severity":"High","spl":"2026-11-01","types":["RCE"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a","target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp","function":"CryptoHalHidl::decrypt"},"deprecated":false,"digest":{"function_hash":"92434238328359427533805480715019279874","length":2353},"id":"ASB-A-503553199-8c144e52"},{"digest":{"function_hash":"287854885063672603448585964689917529946","length":2093},"id":"ASB-A-503553199-96a2e361","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp","function":"CryptoHalAidl::decrypt"},"deprecated":false},{"id":"ASB-A-503553199-9a2c2e5d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a","target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"},"deprecated":false,"digest":{"line_hashes":["116398976274676807861815055289584391941","144317834197804583949997704591105021970","147067926655243079586098172697376885330","285942723831502126131651310527565932076","113135469251638982525309867776300725927","75015547659590843503738443812212805285","254594088162181329254417714744487875650","155550046294398328893379336929957131126","111100672753509616641667418178021369443","89092135095173198862533738118120719175","250892092583501519193408132002799559603","57460130377377281888938520764923655239","88383886198204233019760992139271429034","276747662368406441524385544832867075017","57138066119033913426898533764205060256","262017377830166637243703104086683105607","134328847476308565405679037776609912206","210950281116017447448969185203946104468","169357150729953615763616905120740670960","50742627826775266345577540302875832381","274634139571376668004029799847625548468","83376367523670122139517861304614521770","313379577613574381757961755922643803424","83643775489853916012032244592934079138","222521284778517660635009885536991421320","224966072402027058726543161868259709962","98276915140238329207042575926922369718","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","134364018144186566264125387777498138511","149868529080580380637069160283616294179","218253371168153009013225208173018335318","94954489847986270897814025138479459219","45452348122889708970495160176549014179","62196554265242122542547959091529437358","65845628554467497228578527325017616198","126192705618309597571155756133316523772","121466845780643183219795647460322583345","262145893499572881063429645494824764706","266482545227411205518500696047058882807","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","65013863520470319012736106432974236627","207196781909596399081362088776521240324","224783454770738306129470391464221900167","137412916443155729926891781434010460193","43998913130146404373175798102228618596","140324134320773802349254854693533219961","143510049864936205968745167793803641314","217630865572033851871391177092231929703","190661198040804045582720927270526044982","140543795695882449030112144213893832564","198399827718627901327817990770396249386"],"threshold":0.9}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a","target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"},"deprecated":false,"digest":{"line_hashes":["136008561558159789284414860699517000464","48635667608573517773652543280526156176","327092663611281307060453440134973237387","285942723831502126131651310527565932076","333546094596967691317017634368707064669","37092323462678109533672285988556644479","220206364210764897706975496541329102040","118978195093481164640349737686971345037","233265661325395061770860100951380337574","196756497943387505117716285871187629403","191274056032492496807218854557493005033","245346087701279825504642507143938474522","221656391331580916660637165273768986696","197509512699706598034966443902633891852","91807024994307410411347546242987825299","272109828673099621766261200380740956770","207278089970017946743408300575451191763","258666164178266283933372222089453439398","118332572697807363083292559092338100192","273038495151766704808870951527749028681","274634139571376668004029799847625548468","25883699426543808867326309373871996582","60740564716100833256380720417113043055","39458620374552610452147445337805116010","261074441871728517804849358376896350558","256043012620736512752740614296039015182","325491407528119250033729238168324735350","105967158675506913482857986484934857338","87627611245370905733461130536352361091","319631866705782379589029214489785891044","316831759714769590309849094659016502662","275056379839181534498614673314199877156","29239130922964393257781451674865544953","12578003895640142125219427048509205696","136144622019402990528837963678912623703","165429788176609819731150160320016343720","97289575300937336424996323910462288049","62196554265242122542547959091529437358","65845628554467497228578527325017616198","87214930949180766090976868650283061878","120907023513460396919560620619550025002","91629993407600847374262374916569297505","282540319885443976458835008791693562154","161578376365977286697917926813255733255","54936742693030560663003013861217745854","337556584201638831303813697776112788202","25576530792198937991657152999747664945","246024261220907312872164542975194544338","20475559665730555343652481574716889247","4069355993382140807969228238149826210","194681484590750655057844816950106742643","18991182563141039352516291201079683499","331270146420827840503178519813839606939","116788108612278656850534679359039800622","43054030431655639192701776020475262316","87434548352434590928216364180120070439","109046738105289833418291027950127217119","270542522638883787688999035069556902205","281471280782935070035228086677293807404","36256514487544869762194684680382629802","132239540320029282884077024506692346235","282464679918916064853664307207267990597"],"threshold":0.9},"id":"ASB-A-503553199-fb28b302"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503553199.json"}}],"schema_version":"1.9.2"}