CVE-2024-40658: Out of Bounds Write in libstagefright_softomx
Summary
CVE-2024-40658: In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. Affects platform/frameworks/av across 5 version ranges.
>= 12:0, < 12:2024-09-01
>= 12L:0, < 12L:2024-09-01
>= 13:0, < 13:2024-09-01
>= 14:0, < 14:2024-09-01
>= 15-next:0, < 15-next:2024-09-01
Fixed in 15-next:2024-09-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/frameworks/av in the Android ecosystem. This package is responsible for handling audio and video functionality in the Android operating system. It includes various components, such as codecs, media players, and audio/video recording capabilities. The libstagefright_softomx component within this package is used for software-based video decoding. It provides an interface for configuring and decoding video streams.
Vulnerability Detail
The vulnerability (CVE-2024-40658) exists in the getConfig function of the SoftVideoDecoderOMXComponent.cpp file in libstagefright_softomx. It is caused by an out of bounds write, leading to a heap buffer overflow. An attacker can exploit this vulnerability to escalate their privileges locally without requiring additional execution privileges. The vulnerability does not require user interaction for exploitation.
How To Fix
Minimum fixed version
15-next:2024-09-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability (CVE-2024-40658) in the libstagefright_softomx component of the platform/frameworks/av package allows for an out of bounds write, leading to a heap buffer overflow. It can be exploited by a local attacker to escalate their privileges without requiring additional execution privileges. To mitigate this vulnerability, it is recommended to update the package to the fixed version (12:2024-09-01 or later). No specific workaround has been provided.
See every vulnerability recorded for platform/frameworks/av →
FAQ
The vulnerability allows a local attacker to escalate their privileges, potentially leading to unauthorized access or control over the affected system.
No, user interaction is not required for exploiting this vulnerability.
The vulnerability affects versions 12, 12L, 13, and 14 of the platform/frameworks/av package.
The recommended mitigation is to update the package to the fixed version.
You can find more information about this vulnerability in the official Android Open Source Project (AOSP) security bulletin: https://storage.googleapis.com/android-osv/ASB-A-329641908.json.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/av.
