In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "length": 2133.0, "function_hash": "258593186599205374699246691488898125943" }, "id": "ASB-A-158063095-11339f55", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5", "deprecated": false, "signature_version": "v1", "target": { "file": "basicmbr.cc", "function": "BasicMBRData::ReadLogicalParts" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "205706127123916698108562926314364217798", "287717961984034329341468240971041014386", "77849535185068701593291272537290259547", "304657516902678543681832869878364972184" ] }, "id": "ASB-A-158063095-8a285ff6", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5", "deprecated": false, "signature_version": "v1", "target": { "file": "basicmbr.cc" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" ], "spl": "2021-01-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "205706127123916698108562926314364217798", "287717961984034329341468240971041014386", "77849535185068701593291272537290259547", "304657516902678543681832869878364972184" ] }, "id": "ASB-A-158063095-6a78b920", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5", "deprecated": false, "signature_version": "v1", "target": { "file": "basicmbr.cc" }, "signature_type": "Line" }, { "digest": { "length": 2133.0, "function_hash": "258593186599205374699246691488898125943" }, "id": "ASB-A-158063095-d6174cd8", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5", "deprecated": false, "signature_version": "v1", "target": { "file": "basicmbr.cc", "function": "BasicMBRData::ReadLogicalParts" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" ], "spl": "2021-01-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "205706127123916698108562926314364217798", "287717961984034329341468240971041014386", "77849535185068701593291272537290259547", "304657516902678543681832869878364972184" ] }, "id": "ASB-A-158063095-379014a0", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5", "deprecated": false, "signature_version": "v1", "target": { "file": "basicmbr.cc" }, "signature_type": "Line" }, { "digest": { "length": 2133.0, "function_hash": "258593186599205374699246691488898125943" }, "id": "ASB-A-158063095-7cee4170", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5", "deprecated": false, "signature_version": "v1", "target": { "file": "basicmbr.cc", "function": "BasicMBRData::ReadLogicalParts" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" ], "spl": "2021-01-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "205706127123916698108562926314364217798", "287717961984034329341468240971041014386", "77849535185068701593291272537290259547", "304657516902678543681832869878364972184" ] }, "id": "ASB-A-158063095-26cfa8e9", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5", "deprecated": false, "signature_version": "v1", "target": { "file": "basicmbr.cc" }, "signature_type": "Line" }, { "digest": { "length": 2133.0, "function_hash": "258593186599205374699246691488898125943" }, "id": "ASB-A-158063095-3f466518", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5", "deprecated": false, "signature_version": "v1", "target": { "file": "basicmbr.cc", "function": "BasicMBRData::ReadLogicalParts" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" ], "spl": "2021-01-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "205706127123916698108562926314364217798", "287717961984034329341468240971041014386", "77849535185068701593291272537290259547", "304657516902678543681832869878364972184" ] }, "id": "ASB-A-158063095-2f90ec23", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5", "deprecated": false, "signature_version": "v1", "target": { "file": "basicmbr.cc" }, "signature_type": "Line" }, { "digest": { "length": 2133.0, "function_hash": "258593186599205374699246691488898125943" }, "id": "ASB-A-158063095-4aaf3c0a", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5", "deprecated": false, "signature_version": "v1", "target": { "file": "basicmbr.cc", "function": "BasicMBRData::ReadLogicalParts" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" ], "spl": "2021-01-01", "severity": "High", "types": [ "EoP" ] }