{"id":"ASB-A-478124606", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-02T16:38:00.081625681Z", "aliases":["CVE-2026-58953", "A-478124606"], "details":"In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/external/libopenapv", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"304509763199965577256509434847247705885", "length":1528}, "id":"ASB-A-478124606-06f2788b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv.c", "function":"dec_tile"}}, {"deprecated":false, "digest":{"line_hashes":["306804655663609708053570445986652972827", "271769846158795932412533941088557846299", "112725039428213394537080601234569683558", "214980807704459883699026575005624121250", "338475022908473599457876451107278927354", "129856564121979987101349095868281975328", "242653130481442389304060870280167761095", "19308259885312375685746337165777377997", "150440855871668812117387500967960312950", "237877512175035462728050920614871973796", "252423143556877284495697777512069414042", "61240530469258535065456462259423966260", "143343539864825261223885910677250485423", "199532666720922573736772660516350799118", "146226301090825216612362640354154089979", "176007854568102923446011280445130182235", "85431138741438263788386946471009644546", "116135739372737370574656444719424773907", "194333161924062695752037670500011229622", "84527681032850362373221215218492932657", "330829212851336659845811060538936316757", "294944023577829576056060612975112069553", "11144669591723803568800545081821014377", "205009662030054944248770864599460471939", "251291473154044715053758012145394088525", "41654096441434770155285296418027351041", "328167015960346937091485131308517119468", "20578911872139070486687222702294768069", "239414867931028058884868431129173036311", "12789179172785958517994863701747246256", "67444290424705675629706357587212145603", "158785208660245008790867600711172988694", "311502288273218698717497428406924691144", "315367800638012135768278615368187544784", "71672643260819613228664109529507406011", "7853634349394412991935963511304339536", "165949888578219813618922492546738911716", "237744939036304065738139853108912846348", "238959474484942934390120705823094406454", "135694976395886761089745359255197330290", "103132673492479084383104907917935944861", "25418283315573414025102630921081130684", "335467826470230855006771857751035619220", "128331209363596338074436698001227040097", "36707425311434315623998470648293536111", "274838023426205517685950910692585820942", "259191217111629825277269215498463173570", "98177808795342052940002560203577178489", "145029076144936712055427468182664847659", "221287633221672739765505091662520635696", "262470943217184442513977348239904549628", "173639732677598946076231497405749832476", "244615105662105983091734978711446354278", "21018449969440410178863008171396888249", "242252854948067413057046059910645579546", "118349590793566906895442192158082968578", "294399330592000323492380550160441018418", "318192401988385998374077156004222022675", "12677579531060476387850160464306973889", "174599115623368950862509021293263403127", "336986513905335099392235919030965343742", "130992990759172349133139882588022623037", "12845305304196998185692949225243329701", "85715853989418861017597048391689759204", "83260207085371833142489186515381243468", "91208842172226989133040558546500255937", "80266642597725350487066667390151499716", "329688334822125548632723255542873377280"], "threshold":0.9}, "id":"ASB-A-478124606-13256706", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_bs.c"}}, {"deprecated":false, "digest":{"line_hashes":["147050356653216684935792238045634359841", "123496936225680246358031799757483224112", "108468987849756238203526932703015286336"], "threshold":0.9}, "id":"ASB-A-478124606-1affa3c3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_util.c"}}, {"deprecated":false, "digest":{"line_hashes":["239329642146514748903978093476090598727", "101109709445647059337800382182087333968", "176046405233506440653480221972580046968", "294174477047956553513649127000797317914", "92218081432883727278144579584979645457", "273048989266109036554905973230155631668", "131666277530245530940960776689985285081", "273184981547904851951165610296399744631", "315214060938318040172042576520503603445", "314126125481345429640827542972405497814", "281984085029316835727903236777758036856", "182893831875177041081401620446169956987", "254168080067341664539420207172469196756", "270659347195035892037179824466284256818", "1885873059059631248358670437844860646", "36557522877706766483917953179468526904", "29441619613574880947181336571169337367", "210028066345968799100768555683848586909", "51258820658087766907403574593921480201", "214122098925104425265452367613389888858", "53885938550019886034590500589470600690", "1618521718667826152626377611836360724", "229593935279824006931151405555090849001", "169525748279002839779985149513926473189", "105996551948169960559938569987618915920", "234854497332659537940337756036190549925", "128920509490591609330158795742631845641", "248349050343778294827386199050030771812", "279763120690161080177032474953122780228", "162935706999297070426506574264185122686", "174605168341335202007655342266530897110", "1814490243741682279243296330529410490", "333454433662276566841560616737477149102", "339753233595786447842404646605408185197", "324864308235104476399383658457906605085", "129581166109840480952838168061559133778", "83852411108015663104263225862268165805", "136781218407767748766908859247542972884", "316939013605634255763082182884100836839", "322677907805894311630098471024059827223", "142275687027076111449207509124152496519", "184785431483777127876798953210339412013", "59106938563390495535365185168417307259", "96183739387179562417019199986959627931", "223125402843962535832248360112879936603", "182971226288859980219919698629680058638", "59250864092907034765585699566882015254", "29755457884751664375758377593626658044", "119324402956080843397358957091966819682", "78915033041301612133919486716279642796", "223211093430888477146531372307897440842", "126340139673492301332787214545411264223", "186239961034851186470776194620962884875", "295806556824921962116527987823588526460", "215986198611229174127753559492658147843", "308949372283613419884281148474461124819", "318439228090912079909564722051046189400", "193680610683980090843527592510121842958", "7828066856350110254512018871113895881", "56308778265669279605770655914495907825", "215233084059914509675558779650843201254", "3837572756956821808094453142752620364", "168820007040917980411651407480417715974", "107806087649097319545689671750915423690", "315849012866434527055330841009427073615", "31466360744841959203378280586177519321", "12913500712749295036472228529819126514", "20406241604057270937152598257574114573", "33037266663065025943695430794275420312", "131848601318329001776686680398593989832", "331705577761588409149184528469755880124", "297717367304203077131142994209034743487", "282035020923381897945115063423621215745", "43550344364306564570964734786220665774", "284399742772853075016280965455917196289", "78056266077423531884559891796370956387", "136985291040526130018158336875566632234", "293479879884500827543794473855152777829", "101093044892966115096908655085335995844", "70947536885213457410629269953178080377", "62864589195712273510709164707786880337", "226944782384258045680483643330522244291", "186255800714842142053193070458453047225", "295736305746204396114197169908737195803", "93871653515690149694395343548110070128", "199397271668470670358634454868592661255", "146729232025414793704214775599029398800", "22901352951280097055438074499786079197", "300498843291646514472694013008341245771", "101477119255938033330232701287294757819", "192742265263238391388546272328215697386", "168561447191033538372252447592300351765", "37477320204451634619002727673702708264", "9035475226428839892137460094787793947", "124088389033324053389333526190712546519", "36386380494205004636193439412861049838", "250353755738093301581054263957556455713", "228099480152790068895883853517329640167", "59107187795056781296333637527654447190", "130806101748916765789821907318178191939", "90613091123340144205575205044715288731", "51141299669298409802223948235647789640", "171181786958034312804215959867603077119", "229914389482565099990640290597402886623", "17088332540924695131607181558903436337", "37140832682917657222634490197400116055", "94974281826502338049089358415750443578", "216676809737650295086482112875615391422", "7358342534158399663086004234311308762", "283937845236780742085033184666888599024"], "threshold":0.9}, "id":"ASB-A-478124606-1cc363b3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv.c"}}, {"deprecated":false, "digest":{"function_hash":"16466931485842259072619927108384739158", "length":525}, "id":"ASB-A-478124606-1cfb5f11", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_vlc.c", "function":"dec_vlc_read_kparam0"}}, {"deprecated":false, "digest":{"function_hash":"66320045164103590324610109887674655984", "length":283}, "id":"ASB-A-478124606-1d1b976e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_bs.c", "function":"oapv_bsr_init"}}, {"deprecated":false, "digest":{"line_hashes":["24299824089452477255494986298712744140", "124428885708269670929362292312237158953", "291349350841167724974127040080329753374", "212588353507798469078058025939531368401"], "threshold":0.9}, "id":"ASB-A-478124606-42c68dcc", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_def.h"}}, {"deprecated":false, "digest":{"line_hashes":["27199045464969355336091187534681226732", "161114728030417761492814237674770660262", "110362082685764601468679850542153759077", "158767099594946616623027512775582209642"], "threshold":0.9}, "id":"ASB-A-478124606-43fbba91", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_util.h"}}, {"deprecated":false, "digest":{"function_hash":"198250105740684287578220815530859541630", "length":775}, "id":"ASB-A-478124606-49a5442b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_vlc.c", "function":"dec_vlc_read"}}, {"deprecated":false, "digest":{"line_hashes":["133169548545843719690903104216108619919", "176435776860383617290850880426760374226", "221328182751127852249546860487057488949", "36732613122352367222671873116867195773", "158106557060977467071005935978803744150", "89717524343309193563831639176681260866", "10237655853521209206023734192286015275", "260192127668897634885246901860032426904"], "threshold":0.9}, "id":"ASB-A-478124606-6343e9cc", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_bs.h"}}, {"deprecated":false, "digest":{"line_hashes":["335754887932454428605391085836974774803", "23073939777133765238185730170854103037", "222272779358279063980047276172481085286", "159201349010399792549150310507773593624"], "threshold":0.9}, "id":"ASB-A-478124606-6d54a424", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_vlc.h"}}, {"deprecated":false, "digest":{"line_hashes":["74021786905311137162275303801071098230", "26677658313310906307817955968255029035", "303858925878780297480239578054940197224", "235929103430223362826079516282464127497", "239301728585373180550476678895101557161", "8566693063610802158286835632209192044", "302088609220890105451025977012436836341", "334215800561222670216838392834907481777", "282558485312344349227609501944819129874", "126659844574465620064927835095020627273", "106677581945077371867324509187338750707", "151558839360520687717706232594343850154", "147581319475150494157951370458192018318", "302748215506842911373538919059108775804", "74860011428565250318361712076481827844", "97641507736914500207191860069416412179", "83059087936997439508928961725772058727", "3549865711972120249220306737536563183", "109666576042273775729460453338269169382", "147473072431640190936247871892466893884", "155500121178186328230434587628917262460", "277912535146321897015050596591114954099", "143913562549146751349960878669883545112", "223169346524573435355099022841021985016", "309875227547343292514110431412504324503", "72128049240308970200138367593713570397"], "threshold":0.9}, "id":"ASB-A-478124606-8677493e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_vlc.c"}}, {"deprecated":false, "digest":{"function_hash":"175092859714511684876533468835861832948", "length":526}, "id":"ASB-A-478124606-8b59a79b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_bs.c", "function":"oapv_bsr_peek"}}, {"deprecated":false, "digest":{"function_hash":"16980636363961906479745580504469655787", "length":244}, "id":"ASB-A-478124606-9cb739b4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_bs.c", "function":"bsr_skip_code"}}, {"deprecated":false, "digest":{"function_hash":"296678529983667054113800305808697830943", "length":242}, "id":"ASB-A-478124606-a42b780a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_bs.c", "function":"oapv_bsr_clz_in_code"}}, {"deprecated":false, "digest":{"function_hash":"323727509444774205589738595846239853095", "length":1165}, "id":"ASB-A-478124606-c1adcaa6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_vlc.c", "function":"oapvd_vlc_ac_coef"}}, {"deprecated":false, "digest":{"function_hash":"218866355101441239577545530846259733104", "length":2892}, "id":"ASB-A-478124606-cfc12a31", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv.c", "function":"oapvd_decode"}}, {"deprecated":false, "digest":{"function_hash":"209881597997428982643119472358018285228", "length":168}, "id":"ASB-A-478124606-d1a0c901", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv.c", "function":"dec_frm_finish"}}, {"deprecated":false, "digest":{"function_hash":"228502162527749515677552261237725722741", "length":154}, "id":"ASB-A-478124606-d8ed833b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_bs.c", "function":"oapv_bsr_clz"}}, {"deprecated":false, "digest":{"function_hash":"134462073338955407775284094452072033714", "length":993}, "id":"ASB-A-478124606-fc5b6513", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv_vlc.c", "function":"oapvd_vlc_tile_header"}}, {"deprecated":false, "digest":{"function_hash":"53014484021076817078859907083358306847", "length":1761}, "id":"ASB-A-478124606-fcb0ec7d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/af31fbc9b598ee1e83fe6e585cf7b85f60498e2e", "target":{"file":"src/oapv.c", "function":"dec_thread_tile"}}]}}, {"package":{"name":"platform/external/libopenapv", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["27199045464969355336091187534681226732", "161114728030417761492814237674770660262", "110362082685764601468679850542153759077", "158767099594946616623027512775582209642"], "threshold":0.9}, "id":"ASB-A-478124606-05f66bbf", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_util.h"}}, {"deprecated":false, "digest":{"line_hashes":["147050356653216684935792238045634359841", "123496936225680246358031799757483224112", "108468987849756238203526932703015286336"], "threshold":0.9}, "id":"ASB-A-478124606-12615ba4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_util.c"}}, {"deprecated":false, "digest":{"function_hash":"296678529983667054113800305808697830943", "length":242}, "id":"ASB-A-478124606-25234c90", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_bs.c", "function":"oapv_bsr_clz_in_code"}}, {"deprecated":false, "digest":{"function_hash":"66320045164103590324610109887674655984", "length":283}, "id":"ASB-A-478124606-38a43792", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_bs.c", "function":"oapv_bsr_init"}}, {"deprecated":false, "digest":{"line_hashes":["133169548545843719690903104216108619919", "176435776860383617290850880426760374226", "221328182751127852249546860487057488949", "36732613122352367222671873116867195773", "158106557060977467071005935978803744150", "89717524343309193563831639176681260866", "10237655853521209206023734192286015275", "260192127668897634885246901860032426904"], "threshold":0.9}, "id":"ASB-A-478124606-3f49014c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_bs.h"}}, {"deprecated":false, "digest":{"line_hashes":["74021786905311137162275303801071098230", "26677658313310906307817955968255029035", "303858925878780297480239578054940197224", "235929103430223362826079516282464127497", "239301728585373180550476678895101557161", "8566693063610802158286835632209192044", "302088609220890105451025977012436836341", "334215800561222670216838392834907481777", "282558485312344349227609501944819129874", "126659844574465620064927835095020627273", "106677581945077371867324509187338750707", "151558839360520687717706232594343850154", "147581319475150494157951370458192018318", "302748215506842911373538919059108775804", "74860011428565250318361712076481827844", "97641507736914500207191860069416412179", "83059087936997439508928961725772058727", "3549865711972120249220306737536563183", "109666576042273775729460453338269169382", "147473072431640190936247871892466893884", "155500121178186328230434587628917262460", "277912535146321897015050596591114954099", "143913562549146751349960878669883545112", "223169346524573435355099022841021985016", "309875227547343292514110431412504324503", "72128049240308970200138367593713570397"], "threshold":0.9}, "id":"ASB-A-478124606-55544b70", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_vlc.c"}}, {"deprecated":false, "digest":{"line_hashes":["239329642146514748903978093476090598727", "101109709445647059337800382182087333968", "176046405233506440653480221972580046968", "294174477047956553513649127000797317914", "92218081432883727278144579584979645457", "273048989266109036554905973230155631668", "131666277530245530940960776689985285081", "273184981547904851951165610296399744631", "315214060938318040172042576520503603445", "314126125481345429640827542972405497814", "281984085029316835727903236777758036856", "182893831875177041081401620446169956987", "254168080067341664539420207172469196756", "270659347195035892037179824466284256818", "1885873059059631248358670437844860646", "36557522877706766483917953179468526904", "29441619613574880947181336571169337367", "210028066345968799100768555683848586909", "51258820658087766907403574593921480201", "214122098925104425265452367613389888858", "53885938550019886034590500589470600690", "1618521718667826152626377611836360724", "229593935279824006931151405555090849001", "169525748279002839779985149513926473189", "105996551948169960559938569987618915920", "234854497332659537940337756036190549925", "128920509490591609330158795742631845641", "248349050343778294827386199050030771812", "279763120690161080177032474953122780228", "162935706999297070426506574264185122686", "174605168341335202007655342266530897110", "1814490243741682279243296330529410490", "333454433662276566841560616737477149102", "339753233595786447842404646605408185197", "324864308235104476399383658457906605085", "129581166109840480952838168061559133778", "83852411108015663104263225862268165805", "136781218407767748766908859247542972884", "316939013605634255763082182884100836839", "322677907805894311630098471024059827223", "142275687027076111449207509124152496519", "184785431483777127876798953210339412013", "59106938563390495535365185168417307259", "96183739387179562417019199986959627931", "223125402843962535832248360112879936603", "182971226288859980219919698629680058638", "59250864092907034765585699566882015254", "29755457884751664375758377593626658044", "119324402956080843397358957091966819682", "78915033041301612133919486716279642796", "223211093430888477146531372307897440842", "126340139673492301332787214545411264223", "186239961034851186470776194620962884875", "295806556824921962116527987823588526460", "215986198611229174127753559492658147843", "308949372283613419884281148474461124819", "318439228090912079909564722051046189400", "193680610683980090843527592510121842958", "7828066856350110254512018871113895881", "56308778265669279605770655914495907825", "215233084059914509675558779650843201254", "3837572756956821808094453142752620364", "168820007040917980411651407480417715974", "107806087649097319545689671750915423690", "315849012866434527055330841009427073615", "31466360744841959203378280586177519321", "12913500712749295036472228529819126514", "20406241604057270937152598257574114573", "33037266663065025943695430794275420312", "131848601318329001776686680398593989832", "331705577761588409149184528469755880124", "297717367304203077131142994209034743487", "282035020923381897945115063423621215745", "43550344364306564570964734786220665774", "284399742772853075016280965455917196289", "78056266077423531884559891796370956387", "136985291040526130018158336875566632234", "293479879884500827543794473855152777829", "101093044892966115096908655085335995844", "70947536885213457410629269953178080377", "62864589195712273510709164707786880337", "226944782384258045680483643330522244291", "186255800714842142053193070458453047225", "295736305746204396114197169908737195803", "93871653515690149694395343548110070128", "199397271668470670358634454868592661255", "146729232025414793704214775599029398800", "22901352951280097055438074499786079197", "300498843291646514472694013008341245771", "101477119255938033330232701287294757819", "192742265263238391388546272328215697386", "168561447191033538372252447592300351765", "37477320204451634619002727673702708264", "9035475226428839892137460094787793947", "124088389033324053389333526190712546519", "36386380494205004636193439412861049838", "250353755738093301581054263957556455713", "228099480152790068895883853517329640167", "59107187795056781296333637527654447190", "130806101748916765789821907318178191939", "90613091123340144205575205044715288731", "51141299669298409802223948235647789640", "171181786958034312804215959867603077119", "229914389482565099990640290597402886623", "17088332540924695131607181558903436337", "37140832682917657222634490197400116055", "94974281826502338049089358415750443578", "216676809737650295086482112875615391422", "7358342534158399663086004234311308762", "283937845236780742085033184666888599024"], "threshold":0.9}, "id":"ASB-A-478124606-5917d11c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv.c"}}, {"deprecated":false, "digest":{"function_hash":"209881597997428982643119472358018285228", "length":168}, "id":"ASB-A-478124606-7672e490", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv.c", "function":"dec_frm_finish"}}, {"deprecated":false, "digest":{"function_hash":"16980636363961906479745580504469655787", "length":244}, "id":"ASB-A-478124606-7afac9c7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_bs.c", "function":"bsr_skip_code"}}, {"deprecated":false, "digest":{"function_hash":"16466931485842259072619927108384739158", "length":525}, "id":"ASB-A-478124606-7e79ea9a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_vlc.c", "function":"dec_vlc_read_kparam0"}}, {"deprecated":false, "digest":{"function_hash":"218866355101441239577545530846259733104", "length":2892}, "id":"ASB-A-478124606-83620ca1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv.c", "function":"oapvd_decode"}}, {"deprecated":false, "digest":{"line_hashes":["306804655663609708053570445986652972827", "271769846158795932412533941088557846299", "112725039428213394537080601234569683558", "214980807704459883699026575005624121250", "338475022908473599457876451107278927354", "129856564121979987101349095868281975328", "242653130481442389304060870280167761095", "19308259885312375685746337165777377997", "150440855871668812117387500967960312950", "237877512175035462728050920614871973796", "252423143556877284495697777512069414042", "61240530469258535065456462259423966260", "143343539864825261223885910677250485423", "199532666720922573736772660516350799118", "146226301090825216612362640354154089979", "176007854568102923446011280445130182235", "85431138741438263788386946471009644546", "116135739372737370574656444719424773907", "194333161924062695752037670500011229622", "84527681032850362373221215218492932657", "330829212851336659845811060538936316757", "294944023577829576056060612975112069553", "11144669591723803568800545081821014377", "205009662030054944248770864599460471939", "251291473154044715053758012145394088525", "41654096441434770155285296418027351041", "328167015960346937091485131308517119468", "20578911872139070486687222702294768069", "239414867931028058884868431129173036311", "12789179172785958517994863701747246256", "67444290424705675629706357587212145603", "158785208660245008790867600711172988694", "311502288273218698717497428406924691144", "315367800638012135768278615368187544784", "71672643260819613228664109529507406011", "7853634349394412991935963511304339536", "165949888578219813618922492546738911716", "237744939036304065738139853108912846348", "238959474484942934390120705823094406454", "135694976395886761089745359255197330290", "103132673492479084383104907917935944861", "25418283315573414025102630921081130684", "335467826470230855006771857751035619220", "128331209363596338074436698001227040097", "36707425311434315623998470648293536111", "274838023426205517685950910692585820942", "259191217111629825277269215498463173570", "98177808795342052940002560203577178489", "145029076144936712055427468182664847659", "221287633221672739765505091662520635696", "262470943217184442513977348239904549628", "173639732677598946076231497405749832476", "244615105662105983091734978711446354278", "21018449969440410178863008171396888249", "242252854948067413057046059910645579546", "118349590793566906895442192158082968578", "294399330592000323492380550160441018418", "318192401988385998374077156004222022675", "12677579531060476387850160464306973889", "174599115623368950862509021293263403127", "336986513905335099392235919030965343742", "130992990759172349133139882588022623037", "12845305304196998185692949225243329701", "85715853989418861017597048391689759204", "83260207085371833142489186515381243468", "91208842172226989133040558546500255937", "80266642597725350487066667390151499716", "210580323162054253763715699525664376731"], "threshold":0.9}, "id":"ASB-A-478124606-8d205f09", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_bs.c"}}, {"deprecated":false, "digest":{"function_hash":"53014484021076817078859907083358306847", "length":1761}, "id":"ASB-A-478124606-a51c6639", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv.c", "function":"dec_thread_tile"}}, {"deprecated":false, "digest":{"function_hash":"175092859714511684876533468835861832948", "length":526}, "id":"ASB-A-478124606-b17dd50a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_bs.c", "function":"oapv_bsr_peek"}}, {"deprecated":false, "digest":{"function_hash":"323727509444774205589738595846239853095", "length":1165}, "id":"ASB-A-478124606-b26a7e35", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_vlc.c", "function":"oapvd_vlc_ac_coef"}}, {"deprecated":false, "digest":{"function_hash":"198250105740684287578220815530859541630", "length":775}, "id":"ASB-A-478124606-b9e0525f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_vlc.c", "function":"dec_vlc_read"}}, {"deprecated":false, "digest":{"function_hash":"228502162527749515677552261237725722741", "length":154}, "id":"ASB-A-478124606-d296696c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_bs.c", "function":"oapv_bsr_clz"}}, {"deprecated":false, "digest":{"line_hashes":["335754887932454428605391085836974774803", "23073939777133765238185730170854103037", "222272779358279063980047276172481085286", "159201349010399792549150310507773593624"], "threshold":0.9}, "id":"ASB-A-478124606-d73ea00c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_vlc.h"}}, {"deprecated":false, "digest":{"line_hashes":["24299824089452477255494986298712744140", "124428885708269670929362292312237158953", "291349350841167724974127040080329753374", "212588353507798469078058025939531368401"], "threshold":0.9}, "id":"ASB-A-478124606-dccf698d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_def.h"}}, {"deprecated":false, "digest":{"function_hash":"304509763199965577256509434847247705885", "length":1528}, "id":"ASB-A-478124606-ecfa36e3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv.c", "function":"dec_tile"}}, {"deprecated":false, "digest":{"function_hash":"134462073338955407775284094452072033714", "length":993}, "id":"ASB-A-478124606-efa36c1a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/libopenapv/+/345b514d9d302eaef06ec74f5f4d2465f54ec9f3", "target":{"file":"src/oapv_vlc.c", "function":"oapvd_vlc_tile_header"}}]}}, {"package":{"name":"platform/external/libopenapv", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libopenapv/+/8541da2c50be2190616ed9abaeea2c34f2aecedc"], "severity":"High", "spl":"2026-11-01", "types":["ID"]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}