ASB-A-176168330

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-176168330.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-176168330
Aliases
Published
2021-04-01T00:00:00Z
Modified
2026-04-17T15:55:28.020024Z
Summary
[none]
Details

In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2021-04-01

Affected versions

8.*
8.1

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "277647654049701842040020005981209239669",
                    "337347291428038009262703958042350551546",
                    "196332965495035693018918631873566770255",
                    "189936730275673973623392274714615070163"
                ]
            },
            "id": "ASB-A-176168330-1bdba625",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/a9249b2326cc16daf70beba36599e4c7e0e7c78b",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "length": 231.0,
                "function_hash": "124138467999583343896901194253437870339"
            },
            "id": "ASB-A-176168330-9fa53781",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/a9249b2326cc16daf70beba36599e4c7e0e7c78b",
            "target": {
                "function": "DrmPlugin::setPlayPolicy",
                "file": "drm/mediadrm/plugins/clearkey/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "170244612005113653958448783710832646932",
                    "36514416101165267035447270469753156359",
                    "235410787370684821809467340523965782734"
                ]
            },
            "id": "ASB-A-176168330-b9d5ae52",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/a9249b2326cc16daf70beba36599e4c7e0e7c78b",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/DrmPlugin.h"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/av/+/a9249b2326cc16daf70beba36599e4c7e0e7c78b"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2021-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-176168330.json"

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2021-04-01

Affected versions

Other
9

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "169648599502661296743590468667359412197",
                    "33339084550268418099872279509095153154",
                    "67897421153668916790469023000869426232",
                    "281979207586001694269462710533996401906"
                ]
            },
            "id": "ASB-A-176168330-41a70587",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/537144f77baad847d2c30be6436f94c917019e68",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/hidl/include/DrmPlugin.h"
            }
        },
        {
            "digest": {
                "length": 335.0,
                "function_hash": "274556351059384776444078742130507726642"
            },
            "id": "ASB-A-176168330-682e72af",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/537144f77baad847d2c30be6436f94c917019e68",
            "target": {
                "function": "DrmPlugin::setPlayPolicy",
                "file": "drm/mediadrm/plugins/clearkey/hidl/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "277647654049701842040020005981209239669",
                    "337347291428038009262703958042350551546",
                    "196332965495035693018918631873566770255",
                    "189936730275673973623392274714615070163"
                ]
            },
            "id": "ASB-A-176168330-9380f2d7",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/537144f77baad847d2c30be6436f94c917019e68",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/default/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "length": 231.0,
                "function_hash": "124138467999583343896901194253437870339"
            },
            "id": "ASB-A-176168330-ca305bf1",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/537144f77baad847d2c30be6436f94c917019e68",
            "target": {
                "function": "DrmPlugin::setPlayPolicy",
                "file": "drm/mediadrm/plugins/clearkey/default/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "40082905586839198296219594114499650548",
                    "260664228714579787593196633106299609915",
                    "25979424795661982874646665990172843558"
                ]
            },
            "id": "ASB-A-176168330-d7f94d3b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/537144f77baad847d2c30be6436f94c917019e68",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/default/include/DrmPlugin.h"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "62576416525505753232022194455009544291",
                    "330390870087450857971640968923587556379",
                    "80007568828424234879321150184775543567",
                    "207337967305905475310422429600507984517"
                ]
            },
            "id": "ASB-A-176168330-eaf65a1e",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/537144f77baad847d2c30be6436f94c917019e68",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/hidl/DrmPlugin.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/av/+/537144f77baad847d2c30be6436f94c917019e68"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2021-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-176168330.json"

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2021-04-01

Affected versions

Other
10

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "277647654049701842040020005981209239669",
                    "337347291428038009262703958042350551546",
                    "196332965495035693018918631873566770255",
                    "189936730275673973623392274714615070163"
                ]
            },
            "id": "ASB-A-176168330-07edb153",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/default/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "40082905586839198296219594114499650548",
                    "260664228714579787593196633106299609915",
                    "25979424795661982874646665990172843558"
                ]
            },
            "id": "ASB-A-176168330-424bb338",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/default/include/DrmPlugin.h"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "62576416525505753232022194455009544291",
                    "330390870087450857971640968923587556379",
                    "80007568828424234879321150184775543567",
                    "207337967305905475310422429600507984517"
                ]
            },
            "id": "ASB-A-176168330-4ddbab61",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/hidl/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "length": 335.0,
                "function_hash": "274556351059384776444078742130507726642"
            },
            "id": "ASB-A-176168330-7ff2beae",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "function": "DrmPlugin::setPlayPolicy",
                "file": "drm/mediadrm/plugins/clearkey/hidl/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "169648599502661296743590468667359412197",
                    "49413613621428604505109545668770011988",
                    "192136308895045508117751610558866491637",
                    "260394573606572283555677481056013696668"
                ]
            },
            "id": "ASB-A-176168330-90b00c80",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/hidl/include/DrmPlugin.h"
            }
        },
        {
            "digest": {
                "length": 231.0,
                "function_hash": "124138467999583343896901194253437870339"
            },
            "id": "ASB-A-176168330-e18d3f0c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "function": "DrmPlugin::setPlayPolicy",
                "file": "drm/mediadrm/plugins/clearkey/default/DrmPlugin.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2021-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-176168330.json"

Android / platform/frameworks/av

Package

Name
platform/frameworks/av

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-04-01

Affected versions

Other
11

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 335.0,
                "function_hash": "274556351059384776444078742130507726642"
            },
            "id": "ASB-A-176168330-164c66ef",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "function": "DrmPlugin::setPlayPolicy",
                "file": "drm/mediadrm/plugins/clearkey/hidl/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "40082905586839198296219594114499650548",
                    "260664228714579787593196633106299609915",
                    "25979424795661982874646665990172843558"
                ]
            },
            "id": "ASB-A-176168330-28781619",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/default/include/DrmPlugin.h"
            }
        },
        {
            "digest": {
                "length": 231.0,
                "function_hash": "124138467999583343896901194253437870339"
            },
            "id": "ASB-A-176168330-2896e25f",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "function": "DrmPlugin::setPlayPolicy",
                "file": "drm/mediadrm/plugins/clearkey/default/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "62576416525505753232022194455009544291",
                    "330390870087450857971640968923587556379",
                    "80007568828424234879321150184775543567",
                    "207337967305905475310422429600507984517"
                ]
            },
            "id": "ASB-A-176168330-6a949dd8",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/hidl/DrmPlugin.cpp"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "169648599502661296743590468667359412197",
                    "49413613621428604505109545668770011988",
                    "192136308895045508117751610558866491637",
                    "260394573606572283555677481056013696668"
                ]
            },
            "id": "ASB-A-176168330-9b94a4e4",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/hidl/include/DrmPlugin.h"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "277647654049701842040020005981209239669",
                    "337347291428038009262703958042350551546",
                    "196332965495035693018918631873566770255",
                    "189936730275673973623392274714615070163"
                ]
            },
            "id": "ASB-A-176168330-f2e5e754",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3",
            "target": {
                "file": "drm/mediadrm/plugins/clearkey/default/DrmPlugin.cpp"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/av/+/4b86f1dbae158737cd05aa4d5b5634985534cfc3"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2021-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-176168330.json"