ASB-A-156997193

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-156997193.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-156997193
Aliases
Published
2020-11-01T00:00:00Z
Modified
2026-04-24T15:37:38.793646Z
Summary
[none]
Details

In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/system/core

Package

Name
platform/system/core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11-next:0
Fixed
11-next:2020-11-01

Affected versions

Other
11-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "91327058474968093524218913428440684431",
                    "283635400407027686436634616897858012320",
                    "295926172014320351044002759299570640346",
                    "170004386622017188571956807408405133614"
                ]
            },
            "id": "ASB-A-156997193-8092ba1b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/system/core/+/bff51b88aaf96279c58edb812be0bda2fcaf4967",
            "target": {
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "length": 2006.0,
                "function_hash": "303740755719554007347935742324030440442"
            },
            "id": "ASB-A-156997193-c88c4f9e",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/system/core/+/bff51b88aaf96279c58edb812be0bda2fcaf4967",
            "target": {
                "function": "FileMap::create",
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "275358842454213562963598485301373303773",
                    "236575377719150355451088222840875456584",
                    "34999987004009085816746985289991487896",
                    "181128264519813211803606298817932475029",
                    "296529281982132029984316337080038405735",
                    "47536793616554775753487568224015563717",
                    "213767229193664386554322731371826328562",
                    "258849291900984273852023809079006558820",
                    "323425551243113496830608628755141189612",
                    "6874040466930922682761985680036394102",
                    "121460898419937120682075403121597197109",
                    "289728551360487268008585474856748105106",
                    "121182242367033105589337314129271103997",
                    "221775964729662280451941403317801755150",
                    "197704582121186397161464248283211658209",
                    "247300739514161794399061483391242605618",
                    "89879066079523204445966260830958587248",
                    "233815001187899535722972412020095193448",
                    "165749523362130073929307081957063587767",
                    "252156529686827500034475126586805254792",
                    "208412259794513319075530967832044426533",
                    "281020868416559072448865777846478546849"
                ]
            },
            "id": "ASB-A-156997193-d29d831b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf",
            "target": {
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "length": 2151.0,
                "function_hash": "261611924611209571230329236832720970558"
            },
            "id": "ASB-A-156997193-deb0052c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf",
            "target": {
                "function": "FileMap::create",
                "file": "libutils/FileMap.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/system/core/+/bff51b88aaf96279c58edb812be0bda2fcaf4967",
        "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2020-11-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-156997193.json"

Android / platform/system/core

Package

Name
platform/system/core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.0:0
Fixed
8.0:2020-11-01

Affected versions

8.*
8.0

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 2000.0,
                "function_hash": "182082587529492012534805707834854601999"
            },
            "id": "ASB-A-156997193-29ee82ab",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/system/core/+/4d14303653247da3922242796ab6d63123fbd004",
            "target": {
                "function": "FileMap::create",
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "6874040466930922682761985680036394102",
                    "309769698395510642244591578088847990994",
                    "168336261518310196964879749823756115293",
                    "233840836003916188431905245736651982800"
                ]
            },
            "id": "ASB-A-156997193-329a012c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/system/core/+/4d14303653247da3922242796ab6d63123fbd004",
            "target": {
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "length": 2151.0,
                "function_hash": "261611924611209571230329236832720970558"
            },
            "id": "ASB-A-156997193-d2c10be6",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf",
            "target": {
                "function": "FileMap::create",
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "275358842454213562963598485301373303773",
                    "236575377719150355451088222840875456584",
                    "34999987004009085816746985289991487896",
                    "181128264519813211803606298817932475029",
                    "296529281982132029984316337080038405735",
                    "47536793616554775753487568224015563717",
                    "213767229193664386554322731371826328562",
                    "258849291900984273852023809079006558820",
                    "323425551243113496830608628755141189612",
                    "6874040466930922682761985680036394102",
                    "121460898419937120682075403121597197109",
                    "289728551360487268008585474856748105106",
                    "121182242367033105589337314129271103997",
                    "221775964729662280451941403317801755150",
                    "197704582121186397161464248283211658209",
                    "247300739514161794399061483391242605618",
                    "89879066079523204445966260830958587248",
                    "233815001187899535722972412020095193448",
                    "165749523362130073929307081957063587767",
                    "252156529686827500034475126586805254792",
                    "208412259794513319075530967832044426533",
                    "281020868416559072448865777846478546849"
                ]
            },
            "id": "ASB-A-156997193-ffeb1b48",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf",
            "target": {
                "file": "libutils/FileMap.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/system/core/+/4d14303653247da3922242796ab6d63123fbd004",
        "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2020-11-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-156997193.json"

Android / platform/system/core

Package

Name
platform/system/core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2020-11-01

Affected versions

8.*
8.1

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "6874040466930922682761985680036394102",
                    "309769698395510642244591578088847990994",
                    "168336261518310196964879749823756115293",
                    "233840836003916188431905245736651982800"
                ]
            },
            "id": "ASB-A-156997193-007857a6",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/system/core/+/4d14303653247da3922242796ab6d63123fbd004",
            "target": {
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "length": 2000.0,
                "function_hash": "182082587529492012534805707834854601999"
            },
            "id": "ASB-A-156997193-6507bebf",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/system/core/+/4d14303653247da3922242796ab6d63123fbd004",
            "target": {
                "function": "FileMap::create",
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "275358842454213562963598485301373303773",
                    "236575377719150355451088222840875456584",
                    "34999987004009085816746985289991487896",
                    "181128264519813211803606298817932475029",
                    "296529281982132029984316337080038405735",
                    "47536793616554775753487568224015563717",
                    "213767229193664386554322731371826328562",
                    "258849291900984273852023809079006558820",
                    "323425551243113496830608628755141189612",
                    "6874040466930922682761985680036394102",
                    "121460898419937120682075403121597197109",
                    "289728551360487268008585474856748105106",
                    "121182242367033105589337314129271103997",
                    "221775964729662280451941403317801755150",
                    "197704582121186397161464248283211658209",
                    "247300739514161794399061483391242605618",
                    "89879066079523204445966260830958587248",
                    "233815001187899535722972412020095193448",
                    "165749523362130073929307081957063587767",
                    "252156529686827500034475126586805254792",
                    "208412259794513319075530967832044426533",
                    "281020868416559072448865777846478546849"
                ]
            },
            "id": "ASB-A-156997193-82443891",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf",
            "target": {
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "length": 2151.0,
                "function_hash": "261611924611209571230329236832720970558"
            },
            "id": "ASB-A-156997193-8e2f5aa8",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf",
            "target": {
                "function": "FileMap::create",
                "file": "libutils/FileMap.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/system/core/+/4d14303653247da3922242796ab6d63123fbd004",
        "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2020-11-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-156997193.json"

Android / platform/system/core

Package

Name
platform/system/core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2020-11-01

Affected versions

Other
9

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 2000.0,
                "function_hash": "182082587529492012534805707834854601999"
            },
            "id": "ASB-A-156997193-3323421c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/system/core/+/4d14303653247da3922242796ab6d63123fbd004",
            "target": {
                "function": "FileMap::create",
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "length": 2151.0,
                "function_hash": "261611924611209571230329236832720970558"
            },
            "id": "ASB-A-156997193-c0f94f24",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf",
            "target": {
                "function": "FileMap::create",
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "275358842454213562963598485301373303773",
                    "236575377719150355451088222840875456584",
                    "34999987004009085816746985289991487896",
                    "181128264519813211803606298817932475029",
                    "296529281982132029984316337080038405735",
                    "47536793616554775753487568224015563717",
                    "213767229193664386554322731371826328562",
                    "258849291900984273852023809079006558820",
                    "323425551243113496830608628755141189612",
                    "6874040466930922682761985680036394102",
                    "121460898419937120682075403121597197109",
                    "289728551360487268008585474856748105106",
                    "121182242367033105589337314129271103997",
                    "221775964729662280451941403317801755150",
                    "197704582121186397161464248283211658209",
                    "247300739514161794399061483391242605618",
                    "89879066079523204445966260830958587248",
                    "233815001187899535722972412020095193448",
                    "165749523362130073929307081957063587767",
                    "252156529686827500034475126586805254792",
                    "208412259794513319075530967832044426533",
                    "281020868416559072448865777846478546849"
                ]
            },
            "id": "ASB-A-156997193-e208c315",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf",
            "target": {
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "6874040466930922682761985680036394102",
                    "309769698395510642244591578088847990994",
                    "168336261518310196964879749823756115293",
                    "233840836003916188431905245736651982800"
                ]
            },
            "id": "ASB-A-156997193-f3b3d6da",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/system/core/+/4d14303653247da3922242796ab6d63123fbd004",
            "target": {
                "file": "libutils/FileMap.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/system/core/+/4d14303653247da3922242796ab6d63123fbd004",
        "https://android.googlesource.com/platform/system/core/+/54794ac613d50bf4072174476f60527e2b0b4cdf"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2020-11-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-156997193.json"

Android / platform/system/core

Package

Name
platform/system/core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2020-11-01

Affected versions

Other
10

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 2004.0,
                "function_hash": "215522566870770909378502756101521643066"
            },
            "id": "ASB-A-156997193-6e0617ae",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/system/core/+/f846413e621d7245d8e78f04349a6a93d2bbbea4",
            "target": {
                "function": "FileMap::create",
                "file": "libutils/FileMap.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "91327058474968093524218913428440684431",
                    "283635400407027686436634616897858012320",
                    "295926172014320351044002759299570640346",
                    "170004386622017188571956807408405133614"
                ]
            },
            "id": "ASB-A-156997193-c714a7b1",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/system/core/+/f846413e621d7245d8e78f04349a6a93d2bbbea4",
            "target": {
                "file": "libutils/FileMap.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/system/core/+/f846413e621d7245d8e78f04349a6a93d2bbbea4"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2020-11-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-156997193.json"