In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2021-03-01",
"fixes": [
"https://android.googlesource.com/platform/system/connectivity/wificond/+/67d87a0e7e2213959f505e6a355c50079b062037"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1237.0,
"function_hash": "321445973770382076051953945369209705898"
},
"source": "https://android.googlesource.com/platform/system/connectivity/wificond/+/67d87a0e7e2213959f505e6a355c50079b062037",
"target": {
"function": "main",
"file": "main.cpp"
},
"id": "ASB-A-175124730-13a95a44"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"202563571635577544281548856947653693922",
"132245428272199039556118821467404209820",
"60985590027524743547385707469092843381",
"164270411636237886275432273476625538438",
"104360013053076477761478212377389930981",
"158304697248069928794859958848505285459",
"242596563211063002928486585404850183868",
"339969348761788042054944649164487550473",
"224040018922668897102853657779952903089",
"69853329612799504176306500526039141941"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/connectivity/wificond/+/67d87a0e7e2213959f505e6a355c50079b062037",
"target": {
"file": "main.cpp"
},
"id": "ASB-A-175124730-26bd34ce"
}
],
"severity": "High"
}{
"spl": "2021-03-01",
"fixes": [
"https://android.googlesource.com/platform/system/connectivity/wificond/+/67d87a0e7e2213959f505e6a355c50079b062037"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1237.0,
"function_hash": "321445973770382076051953945369209705898"
},
"source": "https://android.googlesource.com/platform/system/connectivity/wificond/+/67d87a0e7e2213959f505e6a355c50079b062037",
"target": {
"function": "main",
"file": "main.cpp"
},
"id": "ASB-A-175124730-4c6e5401"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"202563571635577544281548856947653693922",
"132245428272199039556118821467404209820",
"60985590027524743547385707469092843381",
"164270411636237886275432273476625538438",
"104360013053076477761478212377389930981",
"158304697248069928794859958848505285459",
"242596563211063002928486585404850183868",
"339969348761788042054944649164487550473",
"224040018922668897102853657779952903089",
"69853329612799504176306500526039141941"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/connectivity/wificond/+/67d87a0e7e2213959f505e6a355c50079b062037",
"target": {
"file": "main.cpp"
},
"id": "ASB-A-175124730-7da3f124"
}
],
"severity": "High"
}{
"spl": "2021-03-01",
"fixes": [
"https://android.googlesource.com/platform/system/connectivity/wificond/+/67d87a0e7e2213959f505e6a355c50079b062037"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"202563571635577544281548856947653693922",
"132245428272199039556118821467404209820",
"60985590027524743547385707469092843381",
"164270411636237886275432273476625538438",
"104360013053076477761478212377389930981",
"158304697248069928794859958848505285459",
"242596563211063002928486585404850183868",
"339969348761788042054944649164487550473",
"224040018922668897102853657779952903089",
"69853329612799504176306500526039141941"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/connectivity/wificond/+/67d87a0e7e2213959f505e6a355c50079b062037",
"target": {
"file": "main.cpp"
},
"id": "ASB-A-175124730-1010404b"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1237.0,
"function_hash": "321445973770382076051953945369209705898"
},
"source": "https://android.googlesource.com/platform/system/connectivity/wificond/+/67d87a0e7e2213959f505e6a355c50079b062037",
"target": {
"function": "main",
"file": "main.cpp"
},
"id": "ASB-A-175124730-f4a434b4"
}
],
"severity": "High"
}