{"id":"ASB-A-514742326", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-59007", "A-514742326"], "details":"In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/external/tremolo", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/tremolo/+/7293b0a896ee258313883f5524808e4f7e805ec7"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["45318754271443057343943407153384163978", "239111757268572975061013203374924915441", "42781308874658528488261558576152563352", "117661771552018516039628416726088430641", "256359462783803452103432786340413599571", "295174463214016385185206805881210205461", "141779184894958483831093257684776325473", "177546944375658555101314857342736091042", "24501705285254126956623151758883478902", "169905001120274148386038866990632095855", "287220085769450145435636540042052020183", "310414535695212554891768593564908799005", "212061589184013496000955713186428926716"], "threshold":0.9}, "id":"ASB-A-514742326-34ab46c7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/7293b0a896ee258313883f5524808e4f7e805ec7", "target":{"file":"Tremolo/codebook.c"}}, {"deprecated":false, "digest":{"function_hash":"23479044413098028882852927506384667309", "length":1707}, "id":"ASB-A-514742326-b991a0af", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/7293b0a896ee258313883f5524808e4f7e805ec7", "target":{"file":"Tremolo/codebook.c", "function":"decode_packed_entry_number"}}]}}, {"package":{"name":"platform/external/tremolo", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/tremolo/+/f3acaf250bfaeebcac9ffc5b4a5c5f7888fedc61"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"23479044413098028882852927506384667309", "length":1707}, "id":"ASB-A-514742326-df605e27", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/f3acaf250bfaeebcac9ffc5b4a5c5f7888fedc61", "target":{"file":"Tremolo/codebook.c", "function":"decode_packed_entry_number"}}, {"deprecated":false, "digest":{"line_hashes":["45318754271443057343943407153384163978", "239111757268572975061013203374924915441", "42781308874658528488261558576152563352", "117661771552018516039628416726088430641", "256359462783803452103432786340413599571", "295174463214016385185206805881210205461", "141779184894958483831093257684776325473", "177546944375658555101314857342736091042", "24501705285254126956623151758883478902", "169905001120274148386038866990632095855", "287220085769450145435636540042052020183", "310414535695212554891768593564908799005", "212061589184013496000955713186428926716"], "threshold":0.9}, "id":"ASB-A-514742326-e9e63343", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/f3acaf250bfaeebcac9ffc5b4a5c5f7888fedc61", "target":{"file":"Tremolo/codebook.c"}}]}}, {"package":{"name":"platform/external/tremolo", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/tremolo/+/ac51ebd999b5ee84b82218e1c7952ebacc762c57"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["45318754271443057343943407153384163978", "239111757268572975061013203374924915441", "42781308874658528488261558576152563352", "117661771552018516039628416726088430641", "256359462783803452103432786340413599571", "295174463214016385185206805881210205461", "141779184894958483831093257684776325473", "177546944375658555101314857342736091042", "24501705285254126956623151758883478902", "169905001120274148386038866990632095855", "287220085769450145435636540042052020183", "310414535695212554891768593564908799005", "212061589184013496000955713186428926716"], "threshold":0.9}, "id":"ASB-A-514742326-b5599758", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/ac51ebd999b5ee84b82218e1c7952ebacc762c57", "target":{"file":"Tremolo/codebook.c"}}, {"deprecated":false, "digest":{"function_hash":"23479044413098028882852927506384667309", "length":1707}, "id":"ASB-A-514742326-ebc0ffc8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/ac51ebd999b5ee84b82218e1c7952ebacc762c57", "target":{"file":"Tremolo/codebook.c", "function":"decode_packed_entry_number"}}]}}, {"package":{"name":"platform/external/tremolo", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/tremolo/+/581dcb064d61921c1826afee12088c5553bfc344"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["45318754271443057343943407153384163978", "239111757268572975061013203374924915441", "42781308874658528488261558576152563352", "117661771552018516039628416726088430641", "256359462783803452103432786340413599571", "295174463214016385185206805881210205461", "141779184894958483831093257684776325473", "177546944375658555101314857342736091042", "24501705285254126956623151758883478902", "169905001120274148386038866990632095855", "287220085769450145435636540042052020183", "310414535695212554891768593564908799005", "212061589184013496000955713186428926716"], "threshold":0.9}, "id":"ASB-A-514742326-a78ba635", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/581dcb064d61921c1826afee12088c5553bfc344", "target":{"file":"Tremolo/codebook.c"}}, {"deprecated":false, "digest":{"function_hash":"23479044413098028882852927506384667309", "length":1707}, "id":"ASB-A-514742326-e311f0a4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/581dcb064d61921c1826afee12088c5553bfc344", "target":{"file":"Tremolo/codebook.c", "function":"decode_packed_entry_number"}}]}}, {"package":{"name":"platform/external/tremolo", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/tremolo/+/42acdf0d25ce8017d274193210c3181d106e46e0"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["45318754271443057343943407153384163978", "239111757268572975061013203374924915441", "42781308874658528488261558576152563352", "117661771552018516039628416726088430641", "256359462783803452103432786340413599571", "295174463214016385185206805881210205461", "141779184894958483831093257684776325473", "177546944375658555101314857342736091042", "24501705285254126956623151758883478902", "169905001120274148386038866990632095855", "287220085769450145435636540042052020183", "310414535695212554891768593564908799005", "212061589184013496000955713186428926716"], "threshold":0.9}, "id":"ASB-A-514742326-44284347", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/42acdf0d25ce8017d274193210c3181d106e46e0", "target":{"file":"Tremolo/codebook.c"}}, {"deprecated":false, "digest":{"function_hash":"23479044413098028882852927506384667309", "length":1707}, "id":"ASB-A-514742326-abe414cc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/42acdf0d25ce8017d274193210c3181d106e46e0", "target":{"file":"Tremolo/codebook.c", "function":"decode_packed_entry_number"}}]}}, {"package":{"name":"platform/external/tremolo", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/tremolo/+/4b126f5f3f6e44cf2910dbe9dc0a5bba638e39ed"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"23479044413098028882852927506384667309", "length":1707}, "id":"ASB-A-514742326-29424def", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/4b126f5f3f6e44cf2910dbe9dc0a5bba638e39ed", "target":{"file":"Tremolo/codebook.c", "function":"decode_packed_entry_number"}}, {"deprecated":false, "digest":{"line_hashes":["45318754271443057343943407153384163978", "239111757268572975061013203374924915441", "42781308874658528488261558576152563352", "117661771552018516039628416726088430641", "256359462783803452103432786340413599571", "295174463214016385185206805881210205461", "141779184894958483831093257684776325473", "177546944375658555101314857342736091042", "24501705285254126956623151758883478902", "169905001120274148386038866990632095855", "287220085769450145435636540042052020183", "310414535695212554891768593564908799005", "212061589184013496000955713186428926716"], "threshold":0.9}, "id":"ASB-A-514742326-2a750fcc", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/tremolo/+/4b126f5f3f6e44cf2910dbe9dc0a5bba638e39ed", "target":{"file":"Tremolo/codebook.c"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}