{"id":"ASB-A-199065614", "published":"2021-12-01T00:00:00Z", "modified":"2026-07-10T15:26:01.587957612Z", "aliases":["CVE-2021-0967", "A-199065614"], "details":"In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.", "affected":[{"package":{"name":"platform/external/tremolo", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-12-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98"], "severity":"Critical", "spl":"2021-12-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["283907216798165190887483150812033779415", "223758015922827605261211922374714667770", "262018871547780842885395873034666610153", "333815952413443724382805765283054342519", "216146141015898520695890522937916786417", "86583533079008663551828712955095069856", "254509260040014177799783226571601448295"], "threshold":0.9}, "id":"ASB-A-199065614-70785f35", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98", "target":{"file":"Tremolo/floor0.c"}}, {"deprecated":false, "digest":{"function_hash":"109006750531075486498998274146426777530", "length":1046}, "id":"ASB-A-199065614-fb9ce46f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98", "target":{"file":"Tremolo/floor0.c", "function":"floor0_inverse1"}}]}}, {"package":{"name":"platform/external/tremolo", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-12-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98"], "severity":"High", "spl":"2021-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"109006750531075486498998274146426777530", "length":1046}, "id":"ASB-A-199065614-35eb8375", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98", "target":{"file":"Tremolo/floor0.c", "function":"floor0_inverse1"}}, {"deprecated":false, "digest":{"line_hashes":["283907216798165190887483150812033779415", "223758015922827605261211922374714667770", "262018871547780842885395873034666610153", "333815952413443724382805765283054342519", "216146141015898520695890522937916786417", "86583533079008663551828712955095069856", "254509260040014177799783226571601448295"], "threshold":0.9}, "id":"ASB-A-199065614-f077b9be", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98", "target":{"file":"Tremolo/floor0.c"}}]}}, {"package":{"name":"platform/external/tremolo", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-12-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98"], "severity":"High", "spl":"2021-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["283907216798165190887483150812033779415", "223758015922827605261211922374714667770", "262018871547780842885395873034666610153", "333815952413443724382805765283054342519", "216146141015898520695890522937916786417", "86583533079008663551828712955095069856", "254509260040014177799783226571601448295"], "threshold":0.9}, "id":"ASB-A-199065614-401782d1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98", "target":{"file":"Tremolo/floor0.c"}}, {"deprecated":false, "digest":{"function_hash":"109006750531075486498998274146426777530", "length":1046}, "id":"ASB-A-199065614-a4857e36", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98", "target":{"file":"Tremolo/floor0.c", "function":"floor0_inverse1"}}]}}, {"package":{"name":"platform/external/tremolo", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2021-12-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98"], "severity":"High", "spl":"2021-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"109006750531075486498998274146426777530", "length":1046}, "id":"ASB-A-199065614-ac9bf025", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98", "target":{"file":"Tremolo/floor0.c", "function":"floor0_inverse1"}}, {"deprecated":false, "digest":{"line_hashes":["283907216798165190887483150812033779415", "223758015922827605261211922374714667770", "262018871547780842885395873034666610153", "333815952413443724382805765283054342519", "216146141015898520695890522937916786417", "86583533079008663551828712955095069856", "254509260040014177799783226571601448295"], "threshold":0.9}, "id":"ASB-A-199065614-f563e363", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/42aa2b936a078e2f69725e95009affcc93cb0f98", "target":{"file":"Tremolo/floor0.c"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-12-01"}]}