ASB-A-169256435

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-169256435.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-169256435

Aliases

A-169256435
CVE-2021-0332

Published

2021-02-01T00:00:00Z

Modified

2026-04-17T15:55:28.020024Z

Summary

[none]

Details

In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/native

Package

Name: platform/frameworks/native

Affected ranges

Type: ECOSYSTEM
Events: Introduced

10:0

Fixed

10:2021-02-01

Affected versions

Other

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 1302.0,
                "function_hash": "305175000037777847869739778323322932277"
            },
            "id": "ASB-A-169256435-352b2671",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/dc057e52f571ca88f037a4501bf666c9eeffde23",
            "target": {
                "function": "SurfaceFlinger::bootFinished",
                "file": "services/surfaceflinger/SurfaceFlinger.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "24011389149821078943807545718156320274",
                    "190808661938357363388931308589393641377",
                    "210256545940930974570281423710061550655",
                    "254610781248810612464680698439676847149",
                    "231555624903078311826769743132363545515",
                    "87053123104418556050834026955086727586",
                    "307481470207585688097923592933622416189",
                    "51719515296865098835946755732248173795",
                    "338654967491784204105109142268210389493",
                    "134883258304942563273637654266962424919",
                    "274459387907060637860502247779091748837",
                    "109789547837832638820080092017773906803",
                    "44156311696236830302345846054624875006",
                    "333449159257953718318381174990636303960"
                ]
            },
            "id": "ASB-A-169256435-f3eb8706",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/dc057e52f571ca88f037a4501bf666c9eeffde23",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/native/+/dc057e52f571ca88f037a4501bf666c9eeffde23"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2021-02-01",
    "severity": "High"
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-169256435.json"