CVE-2024-0023: Out of Bounds Write in ConvertRGBToPlanarYUV in libsfplugin_ccodec_utils
Summary
CVE-2024-0023: In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. Affects platform/frameworks/av across 6 version ranges.
>= 11:0, < 11:2024-01-01
>= 12:0, < 12:2024-01-01
>= 12L:0, < 12L:2024-01-01
>= 13:0, < 13:2024-01-01
>= 14:0, < 14:2024-01-01
>= 14-next:0, < 14-next:2024-01-01
Fixed in 14-next:2024-01-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is 'platform/frameworks/av' in the Android ecosystem. This package is responsible for handling audio and video functionality in the Android operating system. It provides APIs and utilities for encoding, decoding, and processing audio and video data. The vulnerability affects the 'ConvertRGBToPlanarYUV' function in the 'C2InterfaceHelper.cpp' file of the 'libsfplugin_ccodec_utils' module within the 'platform/frameworks/av' package.
Vulnerability Detail
The vulnerability arises due to an incorrect bounds check in the 'ConvertRGBToPlanarYUV' function of the 'C2InterfaceHelper.cpp' file. This flaw allows an attacker to perform an out-of-bounds write, potentially leading to a local escalation of privilege. The vulnerability does not require any additional execution privileges or user interaction for exploitation. If successfully exploited, an attacker could gain elevated privileges on the affected system. The vulnerability was first introduced in version 11.0 of the 'platform/frameworks/av' package and has been fixed in versions 12.0, 12L.0, 13.0, and 14.0.
How To Fix
Minimum fixed version
14-next:2024-01-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the official fix provided by the package maintainers.
Conclusion
In conclusion, the 'platform/frameworks/av' package in the Android ecosystem is vulnerable to an out-of-bounds write vulnerability in the 'ConvertRGBToPlanarYUV' function of the 'C2InterfaceHelper.cpp' file. This vulnerability can be exploited to achieve local escalation of privilege. It is recommended to update the package to a fixed version released on or after January 1, 2024. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/av →
FAQ
The vulnerability allows an attacker to perform an out-of-bounds write, potentially leading to a local escalation of privilege. If successfully exploited, an attacker could gain elevated privileges on the affected system.
No, user interaction is not needed for exploitation of this vulnerability.
The vulnerability was introduced in version 11.0 and has been fixed in versions 12.0, 12L.0, 13.0, and 14.0.
The only known mitigation is to update the 'platform/frameworks/av' package to a version that includes the fix.
You can find more information about this vulnerability in the official Android Open Source Project (AOSP) security bulletin: https://storage.googleapis.com/android-osv/ASB-A-283099444.json
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/av.
