In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5",
"signature_version": "v1",
"deprecated": false,
"id": "ASB-A-158063095-11339f55",
"target": {
"function": "BasicMBRData::ReadLogicalParts",
"file": "basicmbr.cc"
},
"digest": {
"length": 2133.0,
"function_hash": "258593186599205374699246691488898125943"
},
"signature_type": "Function"
},
{
"source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5",
"signature_version": "v1",
"deprecated": false,
"id": "ASB-A-158063095-8a285ff6",
"target": {
"file": "basicmbr.cc"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"205706127123916698108562926314364217798",
"287717961984034329341468240971041014386",
"77849535185068701593291272537290259547",
"304657516902678543681832869878364972184"
]
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5"
],
"types": [
"EoP"
],
"severity": "High",
"spl": "2021-01-01"
}{
"vanir_signatures": [
{
"source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5",
"signature_version": "v1",
"deprecated": false,
"id": "ASB-A-158063095-6a78b920",
"target": {
"file": "basicmbr.cc"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"205706127123916698108562926314364217798",
"287717961984034329341468240971041014386",
"77849535185068701593291272537290259547",
"304657516902678543681832869878364972184"
]
},
"signature_type": "Line"
},
{
"source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5",
"signature_version": "v1",
"deprecated": false,
"id": "ASB-A-158063095-d6174cd8",
"target": {
"function": "BasicMBRData::ReadLogicalParts",
"file": "basicmbr.cc"
},
"digest": {
"length": 2133.0,
"function_hash": "258593186599205374699246691488898125943"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5"
],
"types": [
"EoP"
],
"severity": "High",
"spl": "2021-01-01"
}{
"vanir_signatures": [
{
"source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5",
"signature_version": "v1",
"deprecated": false,
"id": "ASB-A-158063095-379014a0",
"target": {
"file": "basicmbr.cc"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"205706127123916698108562926314364217798",
"287717961984034329341468240971041014386",
"77849535185068701593291272537290259547",
"304657516902678543681832869878364972184"
]
},
"signature_type": "Line"
},
{
"source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5",
"signature_version": "v1",
"deprecated": false,
"id": "ASB-A-158063095-7cee4170",
"target": {
"function": "BasicMBRData::ReadLogicalParts",
"file": "basicmbr.cc"
},
"digest": {
"length": 2133.0,
"function_hash": "258593186599205374699246691488898125943"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5"
],
"types": [
"EoP"
],
"severity": "High",
"spl": "2021-01-01"
}{
"vanir_signatures": [
{
"source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5",
"signature_version": "v1",
"deprecated": false,
"id": "ASB-A-158063095-26cfa8e9",
"target": {
"file": "basicmbr.cc"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"205706127123916698108562926314364217798",
"287717961984034329341468240971041014386",
"77849535185068701593291272537290259547",
"304657516902678543681832869878364972184"
]
},
"signature_type": "Line"
},
{
"source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5",
"signature_version": "v1",
"deprecated": false,
"id": "ASB-A-158063095-3f466518",
"target": {
"function": "BasicMBRData::ReadLogicalParts",
"file": "basicmbr.cc"
},
"digest": {
"length": 2133.0,
"function_hash": "258593186599205374699246691488898125943"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5"
],
"types": [
"EoP"
],
"severity": "High",
"spl": "2021-01-01"
}{
"vanir_signatures": [
{
"source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5",
"signature_version": "v1",
"deprecated": false,
"id": "ASB-A-158063095-2f90ec23",
"target": {
"file": "basicmbr.cc"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"205706127123916698108562926314364217798",
"287717961984034329341468240971041014386",
"77849535185068701593291272537290259547",
"304657516902678543681832869878364972184"
]
},
"signature_type": "Line"
},
{
"source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5",
"signature_version": "v1",
"deprecated": false,
"id": "ASB-A-158063095-4aaf3c0a",
"target": {
"function": "BasicMBRData::ReadLogicalParts",
"file": "basicmbr.cc"
},
"digest": {
"length": 2133.0,
"function_hash": "258593186599205374699246691488898125943"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5"
],
"types": [
"EoP"
],
"severity": "High",
"spl": "2021-01-01"
}