IssueTracker

This vulnerability is in libcodec2_soft_vorbisdec.so.When phone try to decode a malformed vorbis audio,it will lead libcodec2_soft_vorbisdec.so to crash.

Steps To Reproduce:
I’ve provided a PoC which will trigger the vulnerability. Follow these steps:
open the poc.gg,will trigger this vulnerability.

Android version:
[ro.system.build.version.release]: [11]

Security Patch Level (SPL):
[ro.build.version.security_patch]: [[2021-10-01]

Device:
Piexl4xl
[ro.product.device]: [coral]]

Impact
This vulnerability can be triggered remotely, causing the libcodec2_soft_vorbisdec.so to crash