{"id":"ASB-A-503553199", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-58857", "A-503553199"], "details":"In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9"], "severity":"High", "spl":"2026-11-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"92434238328359427533805480715019279874", "length":2353}, "id":"ASB-A-503553199-14f92940", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp", "function":"CryptoHalHidl::decrypt"}}, {"deprecated":false, "digest":{"line_hashes":["116398976274676807861815055289584391941", "144317834197804583949997704591105021970", "147067926655243079586098172697376885330", "285942723831502126131651310527565932076", "113135469251638982525309867776300725927", "129093138904405014195526321142954592500", "40895737787732672842662480881686154399", "148783010962463127287152237223160048083", "168955615500345530522198269264285280441", "313379577613574381757961755922643803424", "83643775489853916012032244592934079138", "222521284778517660635009885536991421320", "224966072402027058726543161868259709962", "98276915140238329207042575926922369718", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "134364018144186566264125387777498138511", "149868529080580380637069160283616294179", "218253371168153009013225208173018335318", "94954489847986270897814025138479459219", "45452348122889708970495160176549014179", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "126192705618309597571155756133316523772", "121466845780643183219795647460322583345", "262145893499572881063429645494824764706", "266482545227411205518500696047058882807", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "65013863520470319012736106432974236627", "207196781909596399081362088776521240324", "224783454770738306129470391464221900167", "137412916443155729926891781434010460193", "43998913130146404373175798102228618596", "140324134320773802349254854693533219961", "143510049864936205968745167793803641314", "217630865572033851871391177092231929703", "207597191516229269494749986377042254386", "76224918123594561487589507487694908951", "3315583183640191004808358994239975169", "285942723831502126131651310527565932076", "69377276031023104359280074458199200", "31451994447820162396160053222244904029", "103292613294194618301090808048417885156", "240383456580837307609549218965605765866", "304038706053863636628608171608407446510", "19241433767607171292137599708155935456", "40895737787732672842662480881686154399", "148783010962463127287152237223160048083", "6019751444033728271651278321775587380", "298561757863771037628801531619808354220", "87862376165794177556139523739713054007", "86558970956858919306395349958263772137", "283078373913132637920361235025203878981", "207276655054412565720638547593102862345", "7114904997161513856332652620509900859", "327116597062309669203493986337525652112", "226333665939632082820152346548804491537", "15881474750550441046290989403409160152", "181339437694405268335675565121145925012", "250648878431517122544931706910189892077", "299034132317418941813999046670409991286", "262131140628425635339924652572131932065", "245217853799649921407548552994557282721", "1665265598784236769067475452822540325", "56576164625086392116991568975763343249", "279005522122040059704478803535762457368", "84420590869722032276215518787457953036", "282975713035789680523692938293529047918", "20114173836857800832094337338252293498", "120149911597141318724565993443871246697", "213974903398465951796525481660494066625", "57949316274029036641531162643638830274", "281426264921375968003178789156568089006", "57044648719669651296930628389230216866", "122032936837011585324362025997363063415", "214373073903971531096058767188982768501", "263467896103836171117833028625040785815", "110484051799541595975308021471984614192", "72860955570186862848693659413217974433", "1797775694978919423589994485615793459"], "threshold":0.9}, "id":"ASB-A-503553199-5dc986ea", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"}}, {"deprecated":false, "digest":{"function_hash":"200880785744942607413972324021338563214", "length":1811}, "id":"ASB-A-503553199-74b17b53", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp", "function":"CryptoHalAidl::decrypt"}}, {"deprecated":false, "digest":{"function_hash":"237773480675931473865997001437160967337", "length":1688}, "id":"ASB-A-503553199-78cbfbca", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp", "function":"CryptoHalAidl::getKeyHandle"}}, {"deprecated":false, "digest":{"line_hashes":["136008561558159789284414860699517000464", "48635667608573517773652543280526156176", "327092663611281307060453440134973237387", "285942723831502126131651310527565932076", "333546094596967691317017634368707064669", "37092323462678109533672285988556644479", "220206364210764897706975496541329102040", "118978195093481164640349737686971345037", "233265661325395061770860100951380337574", "196756497943387505117716285871187629403", "191274056032492496807218854557493005033", "245346087701279825504642507143938474522", "221656391331580916660637165273768986696", "197509512699706598034966443902633891852", "91807024994307410411347546242987825299", "272109828673099621766261200380740956770", "207278089970017946743408300575451191763", "258666164178266283933372222089453439398", "118332572697807363083292559092338100192", "273038495151766704808870951527749028681", "274634139571376668004029799847625548468", "25883699426543808867326309373871996582", "60740564716100833256380720417113043055", "39458620374552610452147445337805116010", "261074441871728517804849358376896350558", "256043012620736512752740614296039015182", "325491407528119250033729238168324735350", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "275056379839181534498614673314199877156", "29239130922964393257781451674865544953", "12578003895640142125219427048509205696", "136144622019402990528837963678912623703", "165429788176609819731150160320016343720", "97289575300937336424996323910462288049", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "87214930949180766090976868650283061878", "120907023513460396919560620619550025002", "91629993407600847374262374916569297505", "282540319885443976458835008791693562154", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "194681484590750655057844816950106742643", "18991182563141039352516291201079683499", "331270146420827840503178519813839606939", "116788108612278656850534679359039800622", "43054030431655639192701776020475262316", "87434548352434590928216364180120070439", "109046738105289833418291027950127217119", "270542522638883787688999035069556902205", "281471280782935070035228086677293807404", "36256514487544869762194684680382629802", "132239540320029282884077024506692346235", "282464679918916064853664307207267990597"], "threshold":0.9}, "id":"ASB-A-503553199-90a86452", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/16ce7179517d224c5a523b33c59bc927bad703c9", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"}}]}}, {"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084"], "severity":"High", "spl":"2026-11-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["116398976274676807861815055289584391941", "144317834197804583949997704591105021970", "147067926655243079586098172697376885330", "285942723831502126131651310527565932076", "113135469251638982525309867776300725927", "75015547659590843503738443812212805285", "254594088162181329254417714744487875650", "155550046294398328893379336929957131126", "111100672753509616641667418178021369443", "89092135095173198862533738118120719175", "250892092583501519193408132002799559603", "57460130377377281888938520764923655239", "88383886198204233019760992139271429034", "276747662368406441524385544832867075017", "57138066119033913426898533764205060256", "262017377830166637243703104086683105607", "134328847476308565405679037776609912206", "210950281116017447448969185203946104468", "169357150729953615763616905120740670960", "50742627826775266345577540302875832381", "274634139571376668004029799847625548468", "83376367523670122139517861304614521770", "313379577613574381757961755922643803424", "83643775489853916012032244592934079138", "222521284778517660635009885536991421320", "224966072402027058726543161868259709962", "98276915140238329207042575926922369718", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "134364018144186566264125387777498138511", "149868529080580380637069160283616294179", "218253371168153009013225208173018335318", "94954489847986270897814025138479459219", "45452348122889708970495160176549014179", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "126192705618309597571155756133316523772", "121466845780643183219795647460322583345", "262145893499572881063429645494824764706", "266482545227411205518500696047058882807", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "65013863520470319012736106432974236627", "207196781909596399081362088776521240324", "224783454770738306129470391464221900167", "137412916443155729926891781434010460193", "43998913130146404373175798102228618596", "140324134320773802349254854693533219961", "143510049864936205968745167793803641314", "217630865572033851871391177092231929703", "190661198040804045582720927270526044982", "140543795695882449030112144213893832564", "198399827718627901327817990770396249386"], "threshold":0.9}, "id":"ASB-A-503553199-b507c3c3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"}}, {"deprecated":false, "digest":{"function_hash":"287854885063672603448585964689917529946", "length":2093}, "id":"ASB-A-503553199-c4ebbb96", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp", "function":"CryptoHalAidl::decrypt"}}, {"deprecated":false, "digest":{"line_hashes":["136008561558159789284414860699517000464", "48635667608573517773652543280526156176", "327092663611281307060453440134973237387", "285942723831502126131651310527565932076", "333546094596967691317017634368707064669", "37092323462678109533672285988556644479", "220206364210764897706975496541329102040", "118978195093481164640349737686971345037", "233265661325395061770860100951380337574", "196756497943387505117716285871187629403", "191274056032492496807218854557493005033", "245346087701279825504642507143938474522", "221656391331580916660637165273768986696", "197509512699706598034966443902633891852", "91807024994307410411347546242987825299", "272109828673099621766261200380740956770", "207278089970017946743408300575451191763", "258666164178266283933372222089453439398", "118332572697807363083292559092338100192", "273038495151766704808870951527749028681", "274634139571376668004029799847625548468", "25883699426543808867326309373871996582", "60740564716100833256380720417113043055", "39458620374552610452147445337805116010", "261074441871728517804849358376896350558", "256043012620736512752740614296039015182", "325491407528119250033729238168324735350", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "275056379839181534498614673314199877156", "29239130922964393257781451674865544953", "12578003895640142125219427048509205696", "136144622019402990528837963678912623703", "165429788176609819731150160320016343720", "97289575300937336424996323910462288049", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "87214930949180766090976868650283061878", "120907023513460396919560620619550025002", "91629993407600847374262374916569297505", "282540319885443976458835008791693562154", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "194681484590750655057844816950106742643", "18991182563141039352516291201079683499", "331270146420827840503178519813839606939", "116788108612278656850534679359039800622", "43054030431655639192701776020475262316", "87434548352434590928216364180120070439", "109046738105289833418291027950127217119", "270542522638883787688999035069556902205", "281471280782935070035228086677293807404", "36256514487544869762194684680382629802", "132239540320029282884077024506692346235", "282464679918916064853664307207267990597"], "threshold":0.9}, "id":"ASB-A-503553199-c720bb77", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"}}, {"deprecated":false, "digest":{"function_hash":"92434238328359427533805480715019279874", "length":2353}, "id":"ASB-A-503553199-d865b3ff", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/ea704d433d6118b5e5c1295a172ead813c582084", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp", "function":"CryptoHalHidl::decrypt"}}]}}, {"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7"], "severity":"High", "spl":"2026-11-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["116398976274676807861815055289584391941", "144317834197804583949997704591105021970", "147067926655243079586098172697376885330", "285942723831502126131651310527565932076", "113135469251638982525309867776300725927", "75015547659590843503738443812212805285", "254594088162181329254417714744487875650", "155550046294398328893379336929957131126", "111100672753509616641667418178021369443", "89092135095173198862533738118120719175", "250892092583501519193408132002799559603", "57460130377377281888938520764923655239", "88383886198204233019760992139271429034", "276747662368406441524385544832867075017", "57138066119033913426898533764205060256", "262017377830166637243703104086683105607", "134328847476308565405679037776609912206", "210950281116017447448969185203946104468", "169357150729953615763616905120740670960", "50742627826775266345577540302875832381", "274634139571376668004029799847625548468", "83376367523670122139517861304614521770", "313379577613574381757961755922643803424", "83643775489853916012032244592934079138", "222521284778517660635009885536991421320", "224966072402027058726543161868259709962", "98276915140238329207042575926922369718", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "134364018144186566264125387777498138511", "149868529080580380637069160283616294179", "218253371168153009013225208173018335318", "94954489847986270897814025138479459219", "45452348122889708970495160176549014179", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "126192705618309597571155756133316523772", "121466845780643183219795647460322583345", "262145893499572881063429645494824764706", "266482545227411205518500696047058882807", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "65013863520470319012736106432974236627", "207196781909596399081362088776521240324", "224783454770738306129470391464221900167", "137412916443155729926891781434010460193", "43998913130146404373175798102228618596", "140324134320773802349254854693533219961", "143510049864936205968745167793803641314", "217630865572033851871391177092231929703", "190661198040804045582720927270526044982", "140543795695882449030112144213893832564", "198399827718627901327817990770396249386"], "threshold":0.9}, "id":"ASB-A-503553199-18feb29b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"}}, {"deprecated":false, "digest":{"function_hash":"287854885063672603448585964689917529946", "length":2093}, "id":"ASB-A-503553199-ca3b4bf5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp", "function":"CryptoHalAidl::decrypt"}}, {"deprecated":false, "digest":{"function_hash":"92434238328359427533805480715019279874", "length":2353}, "id":"ASB-A-503553199-ec4ea0c2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp", "function":"CryptoHalHidl::decrypt"}}, {"deprecated":false, "digest":{"line_hashes":["136008561558159789284414860699517000464", "48635667608573517773652543280526156176", "327092663611281307060453440134973237387", "285942723831502126131651310527565932076", "333546094596967691317017634368707064669", "37092323462678109533672285988556644479", "220206364210764897706975496541329102040", "118978195093481164640349737686971345037", "233265661325395061770860100951380337574", "196756497943387505117716285871187629403", "191274056032492496807218854557493005033", "245346087701279825504642507143938474522", "221656391331580916660637165273768986696", "197509512699706598034966443902633891852", "91807024994307410411347546242987825299", "272109828673099621766261200380740956770", "207278089970017946743408300575451191763", "258666164178266283933372222089453439398", "118332572697807363083292559092338100192", "273038495151766704808870951527749028681", "274634139571376668004029799847625548468", "25883699426543808867326309373871996582", "60740564716100833256380720417113043055", "39458620374552610452147445337805116010", "261074441871728517804849358376896350558", "256043012620736512752740614296039015182", "325491407528119250033729238168324735350", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "275056379839181534498614673314199877156", "29239130922964393257781451674865544953", "12578003895640142125219427048509205696", "136144622019402990528837963678912623703", "165429788176609819731150160320016343720", "97289575300937336424996323910462288049", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "87214930949180766090976868650283061878", "120907023513460396919560620619550025002", "91629993407600847374262374916569297505", "282540319885443976458835008791693562154", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "194681484590750655057844816950106742643", "18991182563141039352516291201079683499", "331270146420827840503178519813839606939", "116788108612278656850534679359039800622", "43054030431655639192701776020475262316", "87434548352434590928216364180120070439", "109046738105289833418291027950127217119", "270542522638883787688999035069556902205", "281471280782935070035228086677293807404", "36256514487544869762194684680382629802", "132239540320029282884077024506692346235", "282464679918916064853664307207267990597"], "threshold":0.9}, "id":"ASB-A-503553199-ef0b1f00", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7a044d5cdb130d7b38e9b5b791613de0b3ef8ad7", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"}}]}}, {"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00"], "severity":"High", "spl":"2026-11-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["116398976274676807861815055289584391941", "144317834197804583949997704591105021970", "147067926655243079586098172697376885330", "285942723831502126131651310527565932076", "113135469251638982525309867776300725927", "75015547659590843503738443812212805285", "254594088162181329254417714744487875650", "155550046294398328893379336929957131126", "111100672753509616641667418178021369443", "89092135095173198862533738118120719175", "250892092583501519193408132002799559603", "57460130377377281888938520764923655239", "88383886198204233019760992139271429034", "276747662368406441524385544832867075017", "57138066119033913426898533764205060256", "262017377830166637243703104086683105607", "134328847476308565405679037776609912206", "210950281116017447448969185203946104468", "169357150729953615763616905120740670960", "50742627826775266345577540302875832381", "274634139571376668004029799847625548468", "83376367523670122139517861304614521770", "313379577613574381757961755922643803424", "83643775489853916012032244592934079138", "222521284778517660635009885536991421320", "224966072402027058726543161868259709962", "98276915140238329207042575926922369718", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "134364018144186566264125387777498138511", "149868529080580380637069160283616294179", "218253371168153009013225208173018335318", "94954489847986270897814025138479459219", "45452348122889708970495160176549014179", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "126192705618309597571155756133316523772", "121466845780643183219795647460322583345", "262145893499572881063429645494824764706", "266482545227411205518500696047058882807", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "65013863520470319012736106432974236627", "207196781909596399081362088776521240324", "224783454770738306129470391464221900167", "137412916443155729926891781434010460193", "43998913130146404373175798102228618596", "140324134320773802349254854693533219961", "143510049864936205968745167793803641314", "217630865572033851871391177092231929703", "190661198040804045582720927270526044982", "140543795695882449030112144213893832564", "198399827718627901327817990770396249386"], "threshold":0.9}, "id":"ASB-A-503553199-b20c4759", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["136008561558159789284414860699517000464", "48635667608573517773652543280526156176", "327092663611281307060453440134973237387", "285942723831502126131651310527565932076", "333546094596967691317017634368707064669", "37092323462678109533672285988556644479", "220206364210764897706975496541329102040", "118978195093481164640349737686971345037", "233265661325395061770860100951380337574", "196756497943387505117716285871187629403", "191274056032492496807218854557493005033", "245346087701279825504642507143938474522", "221656391331580916660637165273768986696", "197509512699706598034966443902633891852", "91807024994307410411347546242987825299", "272109828673099621766261200380740956770", "207278089970017946743408300575451191763", "258666164178266283933372222089453439398", "118332572697807363083292559092338100192", "273038495151766704808870951527749028681", "274634139571376668004029799847625548468", "25883699426543808867326309373871996582", "60740564716100833256380720417113043055", "39458620374552610452147445337805116010", "261074441871728517804849358376896350558", "256043012620736512752740614296039015182", "325491407528119250033729238168324735350", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "275056379839181534498614673314199877156", "29239130922964393257781451674865544953", "12578003895640142125219427048509205696", "136144622019402990528837963678912623703", "165429788176609819731150160320016343720", "97289575300937336424996323910462288049", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "87214930949180766090976868650283061878", "120907023513460396919560620619550025002", "91629993407600847374262374916569297505", "282540319885443976458835008791693562154", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "194681484590750655057844816950106742643", "18991182563141039352516291201079683499", "331270146420827840503178519813839606939", "116788108612278656850534679359039800622", "43054030431655639192701776020475262316", "87434548352434590928216364180120070439", "109046738105289833418291027950127217119", "270542522638883787688999035069556902205", "281471280782935070035228086677293807404", "36256514487544869762194684680382629802", "132239540320029282884077024506692346235", "282464679918916064853664307207267990597"], "threshold":0.9}, "id":"ASB-A-503553199-c613b4ab", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"}}, {"deprecated":false, "digest":{"function_hash":"92434238328359427533805480715019279874", "length":2353}, "id":"ASB-A-503553199-e0d1936a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp", "function":"CryptoHalHidl::decrypt"}}, {"deprecated":false, "digest":{"function_hash":"287854885063672603448585964689917529946", "length":2093}, "id":"ASB-A-503553199-e1b97126", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/653266f0de3ec060ec173c6423aaa438fe74db00", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp", "function":"CryptoHalAidl::decrypt"}}]}}, {"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967"], "severity":"High", "spl":"2026-11-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"92434238328359427533805480715019279874", "length":2353}, "id":"ASB-A-503553199-4eaf06e8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp", "function":"CryptoHalHidl::decrypt"}}, {"deprecated":false, "digest":{"function_hash":"237773480675931473865997001437160967337", "length":1688}, "id":"ASB-A-503553199-63d12a82", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp", "function":"CryptoHalAidl::getKeyHandle"}}, {"deprecated":false, "digest":{"line_hashes":["136008561558159789284414860699517000464", "48635667608573517773652543280526156176", "327092663611281307060453440134973237387", "285942723831502126131651310527565932076", "333546094596967691317017634368707064669", "37092323462678109533672285988556644479", "220206364210764897706975496541329102040", "118978195093481164640349737686971345037", "233265661325395061770860100951380337574", "196756497943387505117716285871187629403", "191274056032492496807218854557493005033", "245346087701279825504642507143938474522", "221656391331580916660637165273768986696", "197509512699706598034966443902633891852", "91807024994307410411347546242987825299", "272109828673099621766261200380740956770", "207278089970017946743408300575451191763", "258666164178266283933372222089453439398", "118332572697807363083292559092338100192", "273038495151766704808870951527749028681", "274634139571376668004029799847625548468", "25883699426543808867326309373871996582", "60740564716100833256380720417113043055", "39458620374552610452147445337805116010", "261074441871728517804849358376896350558", "256043012620736512752740614296039015182", "325491407528119250033729238168324735350", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "275056379839181534498614673314199877156", "29239130922964393257781451674865544953", "12578003895640142125219427048509205696", "136144622019402990528837963678912623703", "165429788176609819731150160320016343720", "97289575300937336424996323910462288049", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "87214930949180766090976868650283061878", "120907023513460396919560620619550025002", "91629993407600847374262374916569297505", "282540319885443976458835008791693562154", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "194681484590750655057844816950106742643", "18991182563141039352516291201079683499", "331270146420827840503178519813839606939", "116788108612278656850534679359039800622", "43054030431655639192701776020475262316", "87434548352434590928216364180120070439", "109046738105289833418291027950127217119", "270542522638883787688999035069556902205", "281471280782935070035228086677293807404", "36256514487544869762194684680382629802", "132239540320029282884077024506692346235", "282464679918916064853664307207267990597"], "threshold":0.9}, "id":"ASB-A-503553199-b4495efa", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["116398976274676807861815055289584391941", "144317834197804583949997704591105021970", "147067926655243079586098172697376885330", "285942723831502126131651310527565932076", "113135469251638982525309867776300725927", "129093138904405014195526321142954592500", "40895737787732672842662480881686154399", "148783010962463127287152237223160048083", "168955615500345530522198269264285280441", "313379577613574381757961755922643803424", "83643775489853916012032244592934079138", "222521284778517660635009885536991421320", "224966072402027058726543161868259709962", "98276915140238329207042575926922369718", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "134364018144186566264125387777498138511", "149868529080580380637069160283616294179", "218253371168153009013225208173018335318", "94954489847986270897814025138479459219", "45452348122889708970495160176549014179", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "126192705618309597571155756133316523772", "121466845780643183219795647460322583345", "262145893499572881063429645494824764706", "266482545227411205518500696047058882807", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "65013863520470319012736106432974236627", "207196781909596399081362088776521240324", "224783454770738306129470391464221900167", "137412916443155729926891781434010460193", "43998913130146404373175798102228618596", "140324134320773802349254854693533219961", "143510049864936205968745167793803641314", "217630865572033851871391177092231929703", "207597191516229269494749986377042254386", "76224918123594561487589507487694908951", "3315583183640191004808358994239975169", "285942723831502126131651310527565932076", "69377276031023104359280074458199200", "31451994447820162396160053222244904029", "103292613294194618301090808048417885156", "240383456580837307609549218965605765866", "304038706053863636628608171608407446510", "19241433767607171292137599708155935456", "40895737787732672842662480881686154399", "148783010962463127287152237223160048083", "6019751444033728271651278321775587380", "298561757863771037628801531619808354220", "87862376165794177556139523739713054007", "86558970956858919306395349958263772137", "283078373913132637920361235025203878981", "207276655054412565720638547593102862345", "7114904997161513856332652620509900859", "327116597062309669203493986337525652112", "226333665939632082820152346548804491537", "15881474750550441046290989403409160152", "181339437694405268335675565121145925012", "250648878431517122544931706910189892077", "299034132317418941813999046670409991286", "262131140628425635339924652572131932065", "245217853799649921407548552994557282721", "1665265598784236769067475452822540325", "56576164625086392116991568975763343249", "279005522122040059704478803535762457368", "84420590869722032276215518787457953036", "282975713035789680523692938293529047918", "20114173836857800832094337338252293498", "120149911597141318724565993443871246697", "213974903398465951796525481660494066625", "57949316274029036641531162643638830274", "281426264921375968003178789156568089006", "57044648719669651296930628389230216866", "122032936837011585324362025997363063415", "214373073903971531096058767188982768501", "263467896103836171117833028625040785815", "110484051799541595975308021471984614192", "72860955570186862848693659413217974433", "1797775694978919423589994485615793459"], "threshold":0.9}, "id":"ASB-A-503553199-d86c81bc", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"}}, {"deprecated":false, "digest":{"function_hash":"200880785744942607413972324021338563214", "length":1811}, "id":"ASB-A-503553199-f1055926", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/07833af6498d65a0f2dc520f6be6ee8ca2c80967", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp", "function":"CryptoHalAidl::decrypt"}}]}}, {"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a"], "severity":"High", "spl":"2026-11-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"92434238328359427533805480715019279874", "length":2353}, "id":"ASB-A-503553199-8c144e52", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp", "function":"CryptoHalHidl::decrypt"}}, {"deprecated":false, "digest":{"function_hash":"287854885063672603448585964689917529946", "length":2093}, "id":"ASB-A-503553199-96a2e361", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp", "function":"CryptoHalAidl::decrypt"}}, {"deprecated":false, "digest":{"line_hashes":["116398976274676807861815055289584391941", "144317834197804583949997704591105021970", "147067926655243079586098172697376885330", "285942723831502126131651310527565932076", "113135469251638982525309867776300725927", "75015547659590843503738443812212805285", "254594088162181329254417714744487875650", "155550046294398328893379336929957131126", "111100672753509616641667418178021369443", "89092135095173198862533738118120719175", "250892092583501519193408132002799559603", "57460130377377281888938520764923655239", "88383886198204233019760992139271429034", "276747662368406441524385544832867075017", "57138066119033913426898533764205060256", "262017377830166637243703104086683105607", "134328847476308565405679037776609912206", "210950281116017447448969185203946104468", "169357150729953615763616905120740670960", "50742627826775266345577540302875832381", "274634139571376668004029799847625548468", "83376367523670122139517861304614521770", "313379577613574381757961755922643803424", "83643775489853916012032244592934079138", "222521284778517660635009885536991421320", "224966072402027058726543161868259709962", "98276915140238329207042575926922369718", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "134364018144186566264125387777498138511", "149868529080580380637069160283616294179", "218253371168153009013225208173018335318", "94954489847986270897814025138479459219", "45452348122889708970495160176549014179", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "126192705618309597571155756133316523772", "121466845780643183219795647460322583345", "262145893499572881063429645494824764706", "266482545227411205518500696047058882807", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "65013863520470319012736106432974236627", "207196781909596399081362088776521240324", "224783454770738306129470391464221900167", "137412916443155729926891781434010460193", "43998913130146404373175798102228618596", "140324134320773802349254854693533219961", "143510049864936205968745167793803641314", "217630865572033851871391177092231929703", "190661198040804045582720927270526044982", "140543795695882449030112144213893832564", "198399827718627901327817990770396249386"], "threshold":0.9}, "id":"ASB-A-503553199-9a2c2e5d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a", "target":{"file":"drm/libmediadrm/CryptoHalAidl.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["136008561558159789284414860699517000464", "48635667608573517773652543280526156176", "327092663611281307060453440134973237387", "285942723831502126131651310527565932076", "333546094596967691317017634368707064669", "37092323462678109533672285988556644479", "220206364210764897706975496541329102040", "118978195093481164640349737686971345037", "233265661325395061770860100951380337574", "196756497943387505117716285871187629403", "191274056032492496807218854557493005033", "245346087701279825504642507143938474522", "221656391331580916660637165273768986696", "197509512699706598034966443902633891852", "91807024994307410411347546242987825299", "272109828673099621766261200380740956770", "207278089970017946743408300575451191763", "258666164178266283933372222089453439398", "118332572697807363083292559092338100192", "273038495151766704808870951527749028681", "274634139571376668004029799847625548468", "25883699426543808867326309373871996582", "60740564716100833256380720417113043055", "39458620374552610452147445337805116010", "261074441871728517804849358376896350558", "256043012620736512752740614296039015182", "325491407528119250033729238168324735350", "105967158675506913482857986484934857338", "87627611245370905733461130536352361091", "319631866705782379589029214489785891044", "316831759714769590309849094659016502662", "275056379839181534498614673314199877156", "29239130922964393257781451674865544953", "12578003895640142125219427048509205696", "136144622019402990528837963678912623703", "165429788176609819731150160320016343720", "97289575300937336424996323910462288049", "62196554265242122542547959091529437358", "65845628554467497228578527325017616198", "87214930949180766090976868650283061878", "120907023513460396919560620619550025002", "91629993407600847374262374916569297505", "282540319885443976458835008791693562154", "161578376365977286697917926813255733255", "54936742693030560663003013861217745854", "337556584201638831303813697776112788202", "25576530792198937991657152999747664945", "246024261220907312872164542975194544338", "20475559665730555343652481574716889247", "4069355993382140807969228238149826210", "194681484590750655057844816950106742643", "18991182563141039352516291201079683499", "331270146420827840503178519813839606939", "116788108612278656850534679359039800622", "43054030431655639192701776020475262316", "87434548352434590928216364180120070439", "109046738105289833418291027950127217119", "270542522638883787688999035069556902205", "281471280782935070035228086677293807404", "36256514487544869762194684680382629802", "132239540320029282884077024506692346235", "282464679918916064853664307207267990597"], "threshold":0.9}, "id":"ASB-A-503553199-fb28b302", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/5b46fd2a1287d2e70585ae7f2f691fb2bf72bb6a", "target":{"file":"drm/libmediadrm/CryptoHalHidl.cpp"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}