platform/frameworks/av vulnerabilities (Android)
94 vulnerabilities.
-
platform/frameworks/avAndroid In multiple locations, there is a possible out-of-bounds write due to a missing bounds check.... No score -
platform/frameworks/avAndroid In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due... No score -
platform/frameworks/avAndroid In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input... No score -
platform/frameworks/avAndroid In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in... No score -
platform/frameworks/avAndroid In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap... No score -
platform/frameworks/avAndroid In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This... No score -
platform/frameworks/avAndroid In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of... 3.3 Low -
platform/frameworks/avAndroid In multiple locations, there is a possible memory corruption due to type confusion. This could... 7.8 High -
platform/frameworks/avAndroid In multiple locations, there is a possible out of bounds write due to an incorrect bounds check.... 7.8 High -
platform/frameworks/avAndroid In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a... 4.3 Medium -
platform/frameworks/avAndroid In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting... 8.8 High -
platform/frameworks/avAndroid In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing... 8.4 High -
platform/frameworks/avAndroid In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer... 7.5 High -
platform/frameworks/avAndroid In multiple locations, there is a possible way to record audio via a background app due to a... 7.8 High -
platform/frameworks/avAndroid In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio... 7.3 High -
platform/frameworks/avAndroid In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap... 7.8 High -
platform/frameworks/avAndroid In multiple functions of CameraService.cpp, there is a possible way to use the camera from the... 7.8 High -
platform/frameworks/avAndroid In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to... 7.8 High -
platform/frameworks/avAndroid In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B... 7.8 High -
platform/frameworks/avAndroid In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due... 7.0 High -
platform/frameworks/avAndroid In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer... 7.8 High -
platform/frameworks/avAndroid In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to... 7.8 High -
platform/frameworks/avAndroid In multiple locations, there is a possible out of bounds write due to a heap buffer overflow.... 7.8 High -
platform/frameworks/avAndroid In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer... 7.5 High -
platform/frameworks/avAndroid In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to... 7.8 High -
platform/frameworks/avAndroid In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due... 7.8 High -
platform/frameworks/avAndroid In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record... 7.8 High -
platform/frameworks/avAndroid In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition.... 8.1 High -
platform/frameworks/avAndroid In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use... 7.8 High -
platform/frameworks/avAndroid In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap... 7.8 High -
platform/frameworks/avAndroid In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data.... 7.8 High -
platform/frameworks/avAndroid In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after... 7.8 High -
platform/frameworks/avAndroid In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized... 5.5 Medium -
platform/frameworks/avAndroid In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying... 3.1 Low -
platform/frameworks/avAndroid In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying... 5.5 Medium -
platform/frameworks/avAndroid In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could... 7.5 High -
platform/frameworks/avAndroid In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing... 5.5 Medium -
platform/frameworks/avAndroid In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to... 8.8 High -
platform/frameworks/avAndroid In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to... 7.8 High -
platform/frameworks/avAndroid In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing... 4.4 Medium -
platform/frameworks/avAndroid In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds... 7.8 High -
platform/frameworks/avAndroid In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to... 9.8 Critical -
platform/frameworks/avAndroid In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a... 7.5 High -
platform/frameworks/avAndroid In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the... 7.8 High -
platform/frameworks/avAndroid In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use... 7.8 High -
platform/frameworks/avAndroid In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy... 6.7 Medium -
platform/frameworks/avAndroid In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds... 3.3 Low -
platform/frameworks/avAndroid In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing... 5.5 Medium -
platform/frameworks/avAndroid In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution... 5.5 Medium -
platform/frameworks/avAndroid In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing... 7.5 High - Show olderLoading…