How many CVEs have patched getConfig?

4 published CVEs changed getConfig in android.googlesource.com/platform-frameworks-av, in 4 distinct patches totalling 20 changed lines, between 2016 and 2024.

What is the latest CVE that changed getConfig?

CVE-2024-40658, published 2024-09-11, changed lines 622 to 628 of media/libstagefright/omx/SoftVideoDecoderOMXComponent.cpp.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

android.googlesource.com/platform-frameworks-av

Function

2 files

getConfig

Name: getConfig in android.googlesource.com/platform-frameworks-av: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Defined in 2 files

Last patched September 11, 2024

4

CVEs

That changed this function

4

Distinct patches

Backports counted once

20

Lines changed

Added plus removed

2016–2024

Years

By CVE publication date

Overview

getConfig in android.googlesource.com/platform-frameworks-av was changed by 4 published CVE fixes between 2016 and 2024, in 4 distinct patches that added or removed 20 lines in total.

The name occurs in 2 files: media/libstagefright/omx/SoftVideoDecoderOMXComponent.cpp, media/libstagefright/omx/OMXNodeInstance.cpp.

android.googlesource.com/platform-frameworks-av has 122 CVEs with a located fix in total, so 3% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed getConfig, newest first, with the lines each fix touched.

CVE-2024-40658
CVE-2024-40658 · media/libstagefright/omx/SoftVideoDecoderOMXComponent.cpp · lines 622–628 · +7 −0
High · CVSS 7.8
EPSS 0.1%2024-09-11
CVE-2024-0050
CVE-2024-0050 · media/libstagefright/omx/SoftVideoDecoderOMXComponent.cpp · lines 619–622 · +4 −0
High · CVSS 7.8
EPSS 0.1%2024-03-11
CVE-2016-6720
CVE-2016-6720 · media/libstagefright/omx/OMXNodeInstance.cpp · lines 493–497 · +5 −0
Medium · CVSS 5.5
EPSS 0.7%2016-12-13
CVE-2016-2476
CVE-2016-2476 · media/libstagefright/omx/SoftVideoDecoderOMXComponent.cpp · lines 450–453 · +4 −0
High · CVSS 7.8
EPSS 0.8%2016-06-13

Get an alert when the next CVE fix lands in android.googlesource.com/platform-frameworks-av, with the patched functions.

Monitor platform-frameworks-av CVEs

Other functions in these files

Functions in the same files that CVE fixes also changed.

Other hotspots in the repository

Functions in android.googlesource.com/platform-frameworks-av changed by the most CVE fixes.

parseChunk8 CVEs · media/libstagefright/MPEG4Extractor.cpp setTimeToSampleParams5 CVEs · media/libstagefright/SampleTable.cpp setSyncSampleParams5 CVEs · media/libstagefright/SampleTable.cpp Equalizer_getParameter5 CVEs · media/libeffects/lvm/wrapper/Bundle/EffectBundle.cpp onTransact4 CVEs · media/libmedia/IOMX.cpp Reverb_command4 CVEs · media/libeffects/lvm/wrapper/Reverb/EffectReverb.cpp

All patched functions in android.googlesource.com/platform-frameworks-av

Frequently asked questions

Common questions about CVE fixes to getConfig.

How many CVEs have patched getConfig?: 4 published CVEs changed getConfig in android.googlesource.com/platform-frameworks-av, in 4 distinct patches totalling 20 changed lines, between 2016 and 2024.
What is the latest CVE that changed getConfig?: CVE-2024-40658, published 2024-09-11, changed lines 622 to 628 of media/libstagefright/omx/SoftVideoDecoderOMXComponent.cpp.
How does getConfig compare to the rest of android.googlesource.com/platform-frameworks-av?: android.googlesource.com/platform-frameworks-av has 122 CVEs with a located fix in total; 4 of them changed getConfig.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track android.googlesource.com/platform-frameworks-av CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing