CVE-2022-20346: Out of Bounds Read in updateAudioTrackInfoFromESDS_MPEG4Audio Function in libmp4extractor
Summary
CVE-2022-20346: In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. Affects platform/frameworks/av across 4 version ranges.
>= 10:0, < 10:2022-08-01
>= 11:0, < 11:2022-08-01
>= 12:0, < 12:2022-08-01
>= 12L:0, < 12L:2022-08-01
Fixed in 10:2022-08-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/frameworks/av in the Android ecosystem. This package is responsible for handling audio and video functionality in the Android operating system. It includes various components such as media codecs, extractors, and media players. The libmp4extractor module within this package is specifically responsible for parsing MPEG-4 audio and video files. It provides functions for extracting metadata and track information from these files.
Vulnerability Detail
The vulnerability, identified as CVE-2022-20346, exists in the updateAudioTrackInfoFromESDS_MPEG4Audio function of the MPEG4Extractor.cpp file in libmp4extractor. The function performs a bounds check incorrectly, leading to a possible out of bounds read. This vulnerability can be exploited remotely without requiring additional execution privileges. However, user interaction is necessary for successful exploitation. An attacker could potentially disclose sensitive information from the device by leveraging this vulnerability.
How To Fix
Minimum fixed version
10:2022-08-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
In conclusion, the platform/frameworks/av package in the Android ecosystem is vulnerable to an out of bounds read vulnerability in the updateAudioTrackInfoFromESDS_MPEG4Audio function of libmp4extractor. This vulnerability could allow remote information disclosure without requiring additional execution privileges. It is crucial to update the affected package to the fixed versions mentioned in the provided links to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/av →
FAQ
This vulnerability could lead to remote information disclosure, allowing an attacker to access sensitive data from the device.
Yes, user interaction is necessary for successful exploitation of this vulnerability.
The vulnerability affects Android versions 10, 11, 12, and 12L.
The recommended mitigation is to update the affected package to the fixed versions mentioned in the provided links.
No evidence of active exploitation has been reported at the time of this vulnerability disclosure.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/av.
