ASB-A-273935108

    Dashboard / Vulnerabilities / ASB-A-273935108

    ASB-A-273935108

    Published: 1 Mar 2024Last Modified: 8 Oct 2026

    Summary:

    Details: In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-security issue with no additional execution privileges needed. User interaction is not needed for exploitation.

    References: https://source.android.com/security/bulletin/2024-03-01, https://android.googlesource.com/platform/frameworks/av/+/8f3bc8be16480367bac36effa25706133a0dc22d

    Affected packages

    Package

    Name: platform/frameworks/av

    Purl:

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 14-next:0
    Fixed -14-next:2024-03-01

    Affected versions

    14-next

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    ASB-A-273935108 | CVE-DB