{"id":"ASB-A-514726373", "published":"2026-10-01T00:00:00Z", "modified":"2026-10-07T15:11:47.469270938Z", "aliases":["CVE-2026-58815", "A-514726373"], "details":"In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-10-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891"], "severity":"High", "spl":"2026-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"275150273072351215133578721630898545008", "length":1002}, "id":"ASB-A-514726373-2a6c3e1a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::combineZoomAndCropLocked"}}, {"deprecated":false, "digest":{"line_hashes":["179758240752519011393216494687436240203", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860", "75563956489123310105824543081396315280", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860"], "threshold":0.9}, "id":"ASB-A-514726373-2d7bcdbd", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"25411288601131841478158790363941039164", "length":1690}, "id":"ASB-A-514726373-3ffb8ac5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureRequest"}}, {"deprecated":false, "digest":{"function_hash":"177134945130609403526027331892132346226", "length":1296}, "id":"ASB-A-514726373-9de92768", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureResult"}}, {"deprecated":false, "digest":{"function_hash":"291967336686081296019815118771421633954", "length":959}, "id":"ASB-A-514726373-b4fe01e4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureRequest"}}, {"deprecated":false, "digest":{"line_hashes":["214233183269884780697834414422340922556", "178051445211934578539417423094018238083", "53668853485344262158026800101593436667", "190492755055456371448222885857780737713", "63048936980803247891752213114368544235", "224599691522526178675736832332076337276", "224619774011325978759073836401543319193", "190492755055456371448222885857780737713"], "threshold":0.9}, "id":"ASB-A-514726373-bb702274", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["315847301760250309934671351759096471318", "270345038857063431117627370608846180218", "336030648698709875256478862603203013004", "195959486274956561089876305998896541669", "32027843578070269219290192743029728842", "229840293568576258897175234844520494355", "121635816874031211927716652827650376561", "195959486274956561089876305998896541669"], "threshold":0.9}, "id":"ASB-A-514726373-dfee5c43", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"292953314012415161134905039138842414611", "length":1162}, "id":"ASB-A-514726373-f6bbc522", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::separateZoomFromCropLocked"}}, {"deprecated":false, "digest":{"function_hash":"234234116791490063955826466228807376022", "length":2139}, "id":"ASB-A-514726373-f80e132f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/cc78e7aa1be9e586e9f2c54b6c638a6f13954891", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureResult"}}]}}, {"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-10-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610"], "severity":"High", "spl":"2026-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"291967336686081296019815118771421633954", "length":959}, "id":"ASB-A-514726373-0ae2a478", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureRequest"}}, {"deprecated":false, "digest":{"line_hashes":["315847301760250309934671351759096471318", "270345038857063431117627370608846180218", "336030648698709875256478862603203013004", "195959486274956561089876305998896541669", "32027843578070269219290192743029728842", "229840293568576258897175234844520494355", "121635816874031211927716652827650376561", "195959486274956561089876305998896541669"], "threshold":0.9}, "id":"ASB-A-514726373-1a709e59", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"177134945130609403526027331892132346226", "length":1296}, "id":"ASB-A-514726373-71389839", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureResult"}}, {"deprecated":false, "digest":{"function_hash":"234234116791490063955826466228807376022", "length":2139}, "id":"ASB-A-514726373-7dc2849e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureResult"}}, {"deprecated":false, "digest":{"function_hash":"292953314012415161134905039138842414611", "length":1162}, "id":"ASB-A-514726373-aec5e19a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::separateZoomFromCropLocked"}}, {"deprecated":false, "digest":{"line_hashes":["179758240752519011393216494687436240203", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860", "75563956489123310105824543081396315280", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860"], "threshold":0.9}, "id":"ASB-A-514726373-bb8dfdc0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"25411288601131841478158790363941039164", "length":1690}, "id":"ASB-A-514726373-c399b439", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureRequest"}}, {"deprecated":false, "digest":{"function_hash":"275150273072351215133578721630898545008", "length":1002}, "id":"ASB-A-514726373-eab5f3da", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::combineZoomAndCropLocked"}}, {"deprecated":false, "digest":{"line_hashes":["214233183269884780697834414422340922556", "178051445211934578539417423094018238083", "53668853485344262158026800101593436667", "190492755055456371448222885857780737713", "63048936980803247891752213114368544235", "224599691522526178675736832332076337276", "224619774011325978759073836401543319193", "190492755055456371448222885857780737713"], "threshold":0.9}, "id":"ASB-A-514726373-f5cdaaf0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/6f43f88f2d9a3c2bb9bf2f78b8c0cccbe072d610", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp"}}]}}, {"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-10-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe"], "severity":"High", "spl":"2026-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["179758240752519011393216494687436240203", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860", "75563956489123310105824543081396315280", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860"], "threshold":0.9}, "id":"ASB-A-514726373-2c4053e0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"25411288601131841478158790363941039164", "length":1690}, "id":"ASB-A-514726373-5c9a710b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureRequest"}}, {"deprecated":false, "digest":{"function_hash":"177134945130609403526027331892132346226", "length":1296}, "id":"ASB-A-514726373-7ce5ed3e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureResult"}}, {"deprecated":false, "digest":{"function_hash":"234234116791490063955826466228807376022", "length":2139}, "id":"ASB-A-514726373-92bddfa8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureResult"}}, {"deprecated":false, "digest":{"function_hash":"275150273072351215133578721630898545008", "length":1002}, "id":"ASB-A-514726373-998156e7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::combineZoomAndCropLocked"}}, {"deprecated":false, "digest":{"line_hashes":["315847301760250309934671351759096471318", "270345038857063431117627370608846180218", "336030648698709875256478862603203013004", "195959486274956561089876305998896541669", "32027843578070269219290192743029728842", "229840293568576258897175234844520494355", "121635816874031211927716652827650376561", "195959486274956561089876305998896541669"], "threshold":0.9}, "id":"ASB-A-514726373-b8746f96", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"291967336686081296019815118771421633954", "length":959}, "id":"ASB-A-514726373-bdd98909", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureRequest"}}, {"deprecated":false, "digest":{"line_hashes":["214233183269884780697834414422340922556", "178051445211934578539417423094018238083", "53668853485344262158026800101593436667", "190492755055456371448222885857780737713", "63048936980803247891752213114368544235", "224599691522526178675736832332076337276", "224619774011325978759073836401543319193", "190492755055456371448222885857780737713"], "threshold":0.9}, "id":"ASB-A-514726373-debc4e61", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"292953314012415161134905039138842414611", "length":1162}, "id":"ASB-A-514726373-e5c97bb8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/42cdf8e4aa7b3c8d6dd454f219308f78fecd52fe", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::separateZoomFromCropLocked"}}]}}, {"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-10-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b"], "severity":"High", "spl":"2026-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"292953314012415161134905039138842414611", "length":1162}, "id":"ASB-A-514726373-167122d2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::separateZoomFromCropLocked"}}, {"deprecated":false, "digest":{"function_hash":"177134945130609403526027331892132346226", "length":1296}, "id":"ASB-A-514726373-2c94ffe2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureResult"}}, {"deprecated":false, "digest":{"line_hashes":["315847301760250309934671351759096471318", "270345038857063431117627370608846180218", "336030648698709875256478862603203013004", "195959486274956561089876305998896541669", "32027843578070269219290192743029728842", "229840293568576258897175234844520494355", "121635816874031211927716652827650376561", "195959486274956561089876305998896541669"], "threshold":0.9}, "id":"ASB-A-514726373-6a41498e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"234234116791490063955826466228807376022", "length":2139}, "id":"ASB-A-514726373-8f4453f6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureResult"}}, {"deprecated":false, "digest":{"function_hash":"25411288601131841478158790363941039164", "length":1690}, "id":"ASB-A-514726373-93a42db1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureRequest"}}, {"deprecated":false, "digest":{"line_hashes":["179758240752519011393216494687436240203", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860", "75563956489123310105824543081396315280", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860"], "threshold":0.9}, "id":"ASB-A-514726373-acfc861c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["214233183269884780697834414422340922556", "178051445211934578539417423094018238083", "53668853485344262158026800101593436667", "190492755055456371448222885857780737713", "63048936980803247891752213114368544235", "224599691522526178675736832332076337276", "224619774011325978759073836401543319193", "190492755055456371448222885857780737713"], "threshold":0.9}, "id":"ASB-A-514726373-d4044abc", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"275150273072351215133578721630898545008", "length":1002}, "id":"ASB-A-514726373-df703c31", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::combineZoomAndCropLocked"}}, {"deprecated":false, "digest":{"function_hash":"291967336686081296019815118771421633954", "length":959}, "id":"ASB-A-514726373-ee0b094f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/9bbbbb6ef2abf8c4829c1118f217f9ed502b717b", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureRequest"}}]}}, {"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-10-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a"], "severity":"High", "spl":"2026-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"177134945130609403526027331892132346226", "length":1296}, "id":"ASB-A-514726373-3a3d5cc8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureResult"}}, {"deprecated":false, "digest":{"function_hash":"291967336686081296019815118771421633954", "length":959}, "id":"ASB-A-514726373-4caebbf5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureRequest"}}, {"deprecated":false, "digest":{"function_hash":"292953314012415161134905039138842414611", "length":1162}, "id":"ASB-A-514726373-56c368a5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::separateZoomFromCropLocked"}}, {"deprecated":false, "digest":{"line_hashes":["315847301760250309934671351759096471318", "270345038857063431117627370608846180218", "336030648698709875256478862603203013004", "195959486274956561089876305998896541669", "32027843578070269219290192743029728842", "229840293568576258897175234844520494355", "121635816874031211927716652827650376561", "195959486274956561089876305998896541669"], "threshold":0.9}, "id":"ASB-A-514726373-6f2334f5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"25411288601131841478158790363941039164", "length":1690}, "id":"ASB-A-514726373-79d84efc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureRequest"}}, {"deprecated":false, "digest":{"line_hashes":["214233183269884780697834414422340922556", "178051445211934578539417423094018238083", "53668853485344262158026800101593436667", "190492755055456371448222885857780737713", "63048936980803247891752213114368544235", "224599691522526178675736832332076337276", "224619774011325978759073836401543319193", "190492755055456371448222885857780737713"], "threshold":0.9}, "id":"ASB-A-514726373-80c06cdb", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"275150273072351215133578721630898545008", "length":1002}, "id":"ASB-A-514726373-82ceb302", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::combineZoomAndCropLocked"}}, {"deprecated":false, "digest":{"function_hash":"234234116791490063955826466228807376022", "length":2139}, "id":"ASB-A-514726373-9f8fff56", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureResult"}}, {"deprecated":false, "digest":{"line_hashes":["179758240752519011393216494687436240203", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860", "75563956489123310105824543081396315280", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860"], "threshold":0.9}, "id":"ASB-A-514726373-e6f22c6b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/b7a783e8955afec2e8cfffa878334ba471dae93a", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"}}]}}, {"package":{"name":"platform/frameworks/av", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-10-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae"], "severity":"High", "spl":"2026-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"275150273072351215133578721630898545008", "length":1002}, "id":"ASB-A-514726373-014bd552", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::combineZoomAndCropLocked"}}, {"deprecated":false, "digest":{"function_hash":"234234116791490063955826466228807376022", "length":2139}, "id":"ASB-A-514726373-3bf786ed", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureResult"}}, {"deprecated":false, "digest":{"line_hashes":["214233183269884780697834414422340922556", "178051445211934578539417423094018238083", "53668853485344262158026800101593436667", "190492755055456371448222885857780737713", "63048936980803247891752213114368544235", "224599691522526178675736832332076337276", "224619774011325978759073836401543319193", "190492755055456371448222885857780737713"], "threshold":0.9}, "id":"ASB-A-514726373-4238f369", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp"}}, {"deprecated":false, "digest":{"line_hashes":["315847301760250309934671351759096471318", "270345038857063431117627370608846180218", "336030648698709875256478862603203013004", "195959486274956561089876305998896541669", "32027843578070269219290192743029728842", "229840293568576258897175234844520494355", "121635816874031211927716652827650376561", "195959486274956561089876305998896541669"], "threshold":0.9}, "id":"ASB-A-514726373-55d39b2d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"177134945130609403526027331892132346226", "length":1296}, "id":"ASB-A-514726373-ad09d220", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureResult"}}, {"deprecated":false, "digest":{"line_hashes":["179758240752519011393216494687436240203", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860", "75563956489123310105824543081396315280", "26137776904044601012398876760704663405", "298309828796884160570095485289012676668", "148004985610565716641359983312592148860"], "threshold":0.9}, "id":"ASB-A-514726373-c87ed3ef", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp"}}, {"deprecated":false, "digest":{"function_hash":"25411288601131841478158790363941039164", "length":1690}, "id":"ASB-A-514726373-d2141d69", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae", "target":{"file":"services/camera/libcameraservice/device3/RotateAndCropMapper.cpp", "function":"RotateAndCropMapper::updateCaptureRequest"}}, {"deprecated":false, "digest":{"function_hash":"291967336686081296019815118771421633954", "length":959}, "id":"ASB-A-514726373-d9071d0c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae", "target":{"file":"services/camera/libcameraservice/device3/DistortionMapper.cpp", "function":"DistortionMapper::correctCaptureRequest"}}, {"deprecated":false, "digest":{"function_hash":"292953314012415161134905039138842414611", "length":1162}, "id":"ASB-A-514726373-e39992c4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/av/+/7afb8a08d568b7401edb25ea60448aeb7620fbae", "target":{"file":"services/camera/libcameraservice/device3/ZoomRatioMapper.cpp", "function":"ZoomRatioMapper::separateZoomFromCropLocked"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-10-01"}]}