update to 12.7.0 (6740)
details
- Finding IDs
- F-TGAND-GIFVIDEO-OOB-001 / F-TGAND-GIFVIDEO-001
- Status
- fixed publicly (mapped by code area)
- Reported via
- Telegram security contact
- Note
- public Android 12.7.0 commit 63f86ef on 2026-05-21 updates the native gifvideo.cpp history. the fix is mapped with high confidence to the GIF/video OOB class because the path is hardened around SwsContextHolder, bitmapStride handling, and sws recreation on size/format changes.
F-TGAND-GIFVIDEO-OOB-001: Memory safety. Stride and conversion-context handling can access outside native video buffers. Reviewed 24 Sep 2026. Mechanism assessed by 1seal.
Mechanism source for F-TGAND-GIFVIDEO-OOB-001
F-TGAND-GIFVIDEO-001: Memory safety. Stride and conversion-context handling can access outside native video buffers; the related ID remains separately recorded. Reviewed 24 Sep 2026. Mechanism assessed by 1seal.
Mechanism source for F-TGAND-GIFVIDEO-001
Security area (1seal assessment): Memory safety. Stride and conversion-context handling can access outside native video buffers. Stride and conversion-context handling can access outside native video buffers; the related ID remains separately recorded. Reviewed 24 Sep 2026.