{"id":"ASB-A-514742326","details":"In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-514742326","CVE-2026-59007"],"modified":"2026-11-02T17:11:18.517241253Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/external/tremolo","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["45318754271443057343943407153384163978","239111757268572975061013203374924915441","42781308874658528488261558576152563352","117661771552018516039628416726088430641","256359462783803452103432786340413599571","295174463214016385185206805881210205461","141779184894958483831093257684776325473","177546944375658555101314857342736091042","24501705285254126956623151758883478902","169905001120274148386038866990632095855","287220085769450145435636540042052020183","310414535695212554891768593564908799005","212061589184013496000955713186428926716"],"threshold":0.9},"id":"ASB-A-514742326-34ab46c7","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/tremolo/+/7293b0a896ee258313883f5524808e4f7e805ec7","target":{"file":"Tremolo/codebook.c"}},{"deprecated":false,"digest":{"function_hash":"23479044413098028882852927506384667309","length":1707},"id":"ASB-A-514742326-b991a0af","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/tremolo/+/7293b0a896ee258313883f5524808e4f7e805ec7","target":{"file":"Tremolo/codebook.c","function":"decode_packed_entry_number"}}],"fixes":["https://android.googlesource.com/platform/external/tremolo/+/7293b0a896ee258313883f5524808e4f7e805ec7"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"}},{"package":{"name":"platform/external/tremolo","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/external/tremolo/+/f3acaf250bfaeebcac9ffc5b4a5c5f7888fedc61","target":{"file":"Tremolo/codebook.c","function":"decode_packed_entry_number"},"deprecated":false,"digest":{"length":1707,"function_hash":"23479044413098028882852927506384667309"},"id":"ASB-A-514742326-df605e27","signature_type":"Function","signature_version":"v1"},{"target":{"file":"Tremolo/codebook.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["45318754271443057343943407153384163978","239111757268572975061013203374924915441","42781308874658528488261558576152563352","117661771552018516039628416726088430641","256359462783803452103432786340413599571","295174463214016385185206805881210205461","141779184894958483831093257684776325473","177546944375658555101314857342736091042","24501705285254126956623151758883478902","169905001120274148386038866990632095855","287220085769450145435636540042052020183","310414535695212554891768593564908799005","212061589184013496000955713186428926716"]},"id":"ASB-A-514742326-e9e63343","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/tremolo/+/f3acaf250bfaeebcac9ffc5b4a5c5f7888fedc61"}],"fixes":["https://android.googlesource.com/platform/external/tremolo/+/f3acaf250bfaeebcac9ffc5b4a5c5f7888fedc61"],"severity":"High","spl":"2026-11-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"}},{"package":{"name":"platform/external/tremolo","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/external/tremolo/+/ac51ebd999b5ee84b82218e1c7952ebacc762c57","target":{"file":"Tremolo/codebook.c"},"deprecated":false,"digest":{"line_hashes":["45318754271443057343943407153384163978","239111757268572975061013203374924915441","42781308874658528488261558576152563352","117661771552018516039628416726088430641","256359462783803452103432786340413599571","295174463214016385185206805881210205461","141779184894958483831093257684776325473","177546944375658555101314857342736091042","24501705285254126956623151758883478902","169905001120274148386038866990632095855","287220085769450145435636540042052020183","310414535695212554891768593564908799005","212061589184013496000955713186428926716"],"threshold":0.9},"id":"ASB-A-514742326-b5599758","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"23479044413098028882852927506384667309","length":1707},"id":"ASB-A-514742326-ebc0ffc8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/tremolo/+/ac51ebd999b5ee84b82218e1c7952ebacc762c57","target":{"file":"Tremolo/codebook.c","function":"decode_packed_entry_number"}}],"fixes":["https://android.googlesource.com/platform/external/tremolo/+/ac51ebd999b5ee84b82218e1c7952ebacc762c57"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"}},{"package":{"name":"platform/external/tremolo","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-514742326-a78ba635","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/tremolo/+/581dcb064d61921c1826afee12088c5553bfc344","target":{"file":"Tremolo/codebook.c"},"deprecated":false,"digest":{"line_hashes":["45318754271443057343943407153384163978","239111757268572975061013203374924915441","42781308874658528488261558576152563352","117661771552018516039628416726088430641","256359462783803452103432786340413599571","295174463214016385185206805881210205461","141779184894958483831093257684776325473","177546944375658555101314857342736091042","24501705285254126956623151758883478902","169905001120274148386038866990632095855","287220085769450145435636540042052020183","310414535695212554891768593564908799005","212061589184013496000955713186428926716"],"threshold":0.9}},{"id":"ASB-A-514742326-e311f0a4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/tremolo/+/581dcb064d61921c1826afee12088c5553bfc344","target":{"file":"Tremolo/codebook.c","function":"decode_packed_entry_number"},"deprecated":false,"digest":{"function_hash":"23479044413098028882852927506384667309","length":1707}}],"fixes":["https://android.googlesource.com/platform/external/tremolo/+/581dcb064d61921c1826afee12088c5553bfc344"],"severity":"High","spl":"2026-11-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"}},{"package":{"name":"platform/external/tremolo","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"target":{"file":"Tremolo/codebook.c"},"deprecated":false,"digest":{"line_hashes":["45318754271443057343943407153384163978","239111757268572975061013203374924915441","42781308874658528488261558576152563352","117661771552018516039628416726088430641","256359462783803452103432786340413599571","295174463214016385185206805881210205461","141779184894958483831093257684776325473","177546944375658555101314857342736091042","24501705285254126956623151758883478902","169905001120274148386038866990632095855","287220085769450145435636540042052020183","310414535695212554891768593564908799005","212061589184013496000955713186428926716"],"threshold":0.9},"id":"ASB-A-514742326-44284347","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/tremolo/+/42acdf0d25ce8017d274193210c3181d106e46e0"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/tremolo/+/42acdf0d25ce8017d274193210c3181d106e46e0","target":{"file":"Tremolo/codebook.c","function":"decode_packed_entry_number"},"deprecated":false,"digest":{"function_hash":"23479044413098028882852927506384667309","length":1707},"id":"ASB-A-514742326-abe414cc"}],"fixes":["https://android.googlesource.com/platform/external/tremolo/+/42acdf0d25ce8017d274193210c3181d106e46e0"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"}},{"package":{"name":"platform/external/tremolo","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/tremolo/+/4b126f5f3f6e44cf2910dbe9dc0a5bba638e39ed","target":{"file":"Tremolo/codebook.c","function":"decode_packed_entry_number"},"deprecated":false,"digest":{"function_hash":"23479044413098028882852927506384667309","length":1707},"id":"ASB-A-514742326-29424def","signature_type":"Function"},{"target":{"file":"Tremolo/codebook.c"},"deprecated":false,"digest":{"line_hashes":["45318754271443057343943407153384163978","239111757268572975061013203374924915441","42781308874658528488261558576152563352","117661771552018516039628416726088430641","256359462783803452103432786340413599571","295174463214016385185206805881210205461","141779184894958483831093257684776325473","177546944375658555101314857342736091042","24501705285254126956623151758883478902","169905001120274148386038866990632095855","287220085769450145435636540042052020183","310414535695212554891768593564908799005","212061589184013496000955713186428926716"],"threshold":0.9},"id":"ASB-A-514742326-2a750fcc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/tremolo/+/4b126f5f3f6e44cf2910dbe9dc0a5bba638e39ed"}],"fixes":["https://android.googlesource.com/platform/external/tremolo/+/4b126f5f3f6e44cf2910dbe9dc0a5bba638e39ed"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-514742326.json"}}],"schema_version":"1.9.2"}