diff --git a/RELEASENOTES.md b/RELEASENOTES.md
index 7da3c0a867..56c7404649 100644
--- a/RELEASENOTES.md
+++ b/RELEASENOTES.md
@@ -43,6 +43,8 @@
   directly made with the `AnalyticsListener` interface.
 * IMA: Fix behavior when creating/releasing the player then releasing
   `ImaAdsLoader` ([#3879](https://github.com/google/ExoPlayer/issues/3879)).
+* Fix issue playing DRM protected streams on Asus Zenfone 2
+  ([#4403](https://github.com/google/ExoPlayer/issues/4413)).
 
 ### 2.8.2 ###
 
diff --git a/library/core/src/main/java/com/google/android/exoplayer2/drm/FrameworkMediaDrm.java b/library/core/src/main/java/com/google/android/exoplayer2/drm/FrameworkMediaDrm.java
index a10c4c612e..c87e82f972 100644
--- a/library/core/src/main/java/com/google/android/exoplayer2/drm/FrameworkMediaDrm.java
+++ b/library/core/src/main/java/com/google/android/exoplayer2/drm/FrameworkMediaDrm.java
@@ -71,6 +71,9 @@ public final class FrameworkMediaDrm implements ExoMediaDrm<FrameworkMediaCrypto
     uuid = Util.SDK_INT < 27 && C.CLEARKEY_UUID.equals(uuid) ? C.COMMON_PSSH_UUID : uuid;
     this.uuid = uuid;
     this.mediaDrm = new MediaDrm(uuid);
+    if (C.WIDEVINE_UUID.equals(uuid) && needsForceL3Workaround()) {
+      mediaDrm.setPropertyString("securityLevel", "L3");
+    }
   }
 
   @Override
@@ -222,4 +225,12 @@ public final class FrameworkMediaDrm implements ExoMediaDrm<FrameworkMediaCrypto
         forceAllowInsecureDecoderComponents);
   }
 
+  /**
+   * Returns whether the device codec is known to fail if security level L1 is used.
+   *
+   * <p>See <a href="https://github.com/google/ExoPlayer/issues/4413">GitHub issue #4413</a>.
+   */
+  private static boolean needsForceL3Workaround() {
+    return "ASUS_Z00AD".equals(Util.MODEL);
+  }
 }