ASB-A-173552790

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-173552790.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-173552790
Aliases
  • A-173552790
  • CVE-2021-0432
Published
2021-04-01T00:00:00Z
Modified
2026-09-22T15:22:15Z
Summary
[none]
Details

In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-04-01

Affected versions

Other
11

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/c7f94ac6347aaa77f890d1b382177968d2581894"
    ],
    "severity":  "High",
    "spl":  "2021-04-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "276421558175509511554573386608974515553",
                    "89344226562673292616585529776115421582",
                    "335376642036065395401989861899840725083",
                    "22243518718314057884693290828616978389",
                    "307824126936387981057255436007154658163",
                    "337111659555491520642886002911102643275",
                    "145432192477951541460162843433924264187",
                    "245617917729764275220540778554821687797"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-173552790-0a935553",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/c7f94ac6347aaa77f890d1b382177968d2581894",
            "target":  {
                "file":  "cmds/statsd/src/external/StatsPullerManager.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "80816721327590360138923004711054520411",
                "length":  223
            },
            "id":  "ASB-A-173552790-5dbfce0f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/c7f94ac6347aaa77f890d1b382177968d2581894",
            "target":  {
                "file":  "cmds/statsd/src/external/StatsPullerManager.cpp",
                "function":  "StatsPullerManager::ClearPullerCacheIfNecessary"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "272798042972821718683930904450590500692",
                "length":  193
            },
            "id":  "ASB-A-173552790-b6e24d8e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/c7f94ac6347aaa77f890d1b382177968d2581894",
            "target":  {
                "file":  "cmds/statsd/src/external/StatsPullerManager.cpp",
                "function":  "StatsPullerManager::ForceClearPullerCache"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-173552790.json"