In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "fixes": [ "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" ], "vanir_signatures": [ { "signature_type": "Function", "id": "ASB-A-158063095-11339f55", "deprecated": false, "digest": { "length": 2133.0, "function_hash": "258593186599205374699246691488898125943" }, "target": { "function": "BasicMBRData::ReadLogicalParts", "file": "basicmbr.cc" }, "signature_version": "v1", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" }, { "signature_type": "Line", "id": "ASB-A-158063095-8a285ff6", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "205706127123916698108562926314364217798", "287717961984034329341468240971041014386", "77849535185068701593291272537290259547", "304657516902678543681832869878364972184" ] }, "target": { "file": "basicmbr.cc" }, "signature_version": "v1", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" } ], "types": [ "EoP" ], "severity": "High", "spl": "2021-01-01" }
{ "fixes": [ "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" ], "vanir_signatures": [ { "signature_type": "Line", "id": "ASB-A-158063095-6a78b920", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "205706127123916698108562926314364217798", "287717961984034329341468240971041014386", "77849535185068701593291272537290259547", "304657516902678543681832869878364972184" ] }, "target": { "file": "basicmbr.cc" }, "signature_version": "v1", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" }, { "signature_type": "Function", "id": "ASB-A-158063095-d6174cd8", "deprecated": false, "digest": { "length": 2133.0, "function_hash": "258593186599205374699246691488898125943" }, "target": { "function": "BasicMBRData::ReadLogicalParts", "file": "basicmbr.cc" }, "signature_version": "v1", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" } ], "types": [ "EoP" ], "severity": "High", "spl": "2021-01-01" }
{ "fixes": [ "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" ], "vanir_signatures": [ { "signature_type": "Line", "id": "ASB-A-158063095-379014a0", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "205706127123916698108562926314364217798", "287717961984034329341468240971041014386", "77849535185068701593291272537290259547", "304657516902678543681832869878364972184" ] }, "target": { "file": "basicmbr.cc" }, "signature_version": "v1", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" }, { "signature_type": "Function", "id": "ASB-A-158063095-7cee4170", "deprecated": false, "digest": { "length": 2133.0, "function_hash": "258593186599205374699246691488898125943" }, "target": { "function": "BasicMBRData::ReadLogicalParts", "file": "basicmbr.cc" }, "signature_version": "v1", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" } ], "types": [ "EoP" ], "severity": "High", "spl": "2021-01-01" }
{ "fixes": [ "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" ], "vanir_signatures": [ { "signature_type": "Line", "id": "ASB-A-158063095-26cfa8e9", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "205706127123916698108562926314364217798", "287717961984034329341468240971041014386", "77849535185068701593291272537290259547", "304657516902678543681832869878364972184" ] }, "target": { "file": "basicmbr.cc" }, "signature_version": "v1", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" }, { "signature_type": "Function", "id": "ASB-A-158063095-3f466518", "deprecated": false, "digest": { "length": 2133.0, "function_hash": "258593186599205374699246691488898125943" }, "target": { "function": "BasicMBRData::ReadLogicalParts", "file": "basicmbr.cc" }, "signature_version": "v1", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" } ], "types": [ "EoP" ], "severity": "High", "spl": "2021-01-01" }
{ "fixes": [ "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" ], "vanir_signatures": [ { "signature_type": "Line", "id": "ASB-A-158063095-2f90ec23", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "205706127123916698108562926314364217798", "287717961984034329341468240971041014386", "77849535185068701593291272537290259547", "304657516902678543681832869878364972184" ] }, "target": { "file": "basicmbr.cc" }, "signature_version": "v1", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" }, { "signature_type": "Function", "id": "ASB-A-158063095-4aaf3c0a", "deprecated": false, "digest": { "length": 2133.0, "function_hash": "258593186599205374699246691488898125943" }, "target": { "function": "BasicMBRData::ReadLogicalParts", "file": "basicmbr.cc" }, "signature_version": "v1", "source": "https://android.googlesource.com/platform/external/gptfdisk/+/6d369451868ce71618144c4f4bd645ae48f0d1c5" } ], "types": [ "EoP" ], "severity": "High", "spl": "2021-01-01" }