Use-after-free vulnerability in libstagefright_httplive
Summary
CVE-2023-40077: In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. Affects platform/frameworks/av across 6 version ranges.
>= 11:0, < 11:2023-12-01
>= 12:0, < 12:2023-12-01
>= 12L:0, < 12L:2023-12-01
>= 13:0, < 13:2023-12-01
>= 14:0, < 14:2023-12-01
>= 14-next:0, < 14-next:2023-12-01
Fixed in 14-next:2023-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The libstagefright_httplive library is part of the Android platform's frameworks/av package. It provides support for HTTP Live Streaming (HLS) playback in media applications. HLS is a streaming protocol that allows media content to be delivered over HTTP. The libstagefright_httplive library is responsible for parsing and playing HLS streams on Android devices.
Vulnerability Detail
The vulnerability identified in the libstagefright_httplive library is a use-after-free issue. It occurs in multiple functions of the MetaDataBase.cpp file due to a race condition. This vulnerability could be exploited by an attacker to escalate their privileges remotely without requiring any additional execution privileges. The exploitation does not require user interaction. The use-after-free vulnerability can lead to arbitrary code execution or other security compromises.
How To Fix
Minimum fixed version
14-next:2023-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, developers can consider implementing general security measures such as input validation and sanitization to mitigate the risk of exploitation.
Conclusion
The use-after-free vulnerability in the libstagefright_httplive library poses a critical security risk as it allows for remote privilege escalation. Developers should promptly update their applications to use the fixed version of the frameworks/av package to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/av →
FAQ
libstagefright_httplive is a library in the Android frameworks/av package that enables HTTP Live Streaming (HLS) playback in media applications.
A use-after-free vulnerability occurs when a program continues to use a memory location after it has been freed. This can lead to crashes, arbitrary code execution, or other security compromises.
This vulnerability can be exploited remotely by an attacker to escalate their privileges without requiring additional execution privileges. Exploitation does not require user interaction.
No, only versions 11, 12, 12L, 13, and 14 of the Android platform are affected. The vulnerability has been fixed in later versions.
The fixed version of the frameworks/av package can be obtained from the official Android source code repository.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/av.
