ASB-A-192606047

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-192606047.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-192606047
Aliases
Published
2021-11-01T00:00:00Z
Modified
2025-10-23T15:57:26.264597Z
Summary
[none]
Details

In resetAccumulator of select.c, there is a possible use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/external/sqlite

Package

Name
platform/external/sqlite

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-11-01

Affected versions

Other

11

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "file": "dist/orig/sqlite3.c"
            },
            "id": "ASB-A-192606047-0e0c6533",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "199070197837573109235156897693055841300",
                    "254229894017524972120709405948172853767",
                    "117289713787236159983045952722556725477",
                    "83075987026358748734830566620063112306",
                    "7951125864893504766005905678806805383",
                    "104963192835081057512602139196411208570",
                    "171430600765845378393951066638538628914",
                    "257962578340537201723776040392316058654",
                    "131926247557348145843231241367400661900",
                    "174979528478897803753253515073224595790",
                    "209870398122955359073428200172119955405",
                    "151050557461900282148771416907916700869",
                    "192452138068915417185948228625881482141",
                    "156071605387590786447646150247604637989",
                    "186028635102580737276515053699023068249",
                    "32672734626909332816955162695109279063",
                    "336787501190228960756609026893114263296",
                    "281321620965984176234404433852957354689",
                    "121917876313134938879789596470941777206",
                    "247277293272431472357093088916183137262",
                    "155501003580640798209743296459903212720",
                    "72620454220112932562903483715801679517",
                    "55110336105843603319763953298770415242",
                    "48459986241853125501561029874123365719",
                    "330013460199952738388137397509706555698",
                    "227916312026899335266338704526692135876",
                    "273125721437435892088513926859510148025",
                    "67190533239793431795105156594994158624",
                    "274394521767918648042752744476929774494",
                    "139821460379877225986311840565084910524",
                    "206435657768126014631598430801510681322",
                    "333322203081154416177587936163218910128",
                    "177647646310442064110094650501263765181",
                    "4035537528797314661689936524946104175"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "function": "sqlite3Select",
                "file": "dist/orig/sqlite3.c"
            },
            "id": "ASB-A-192606047-146d30a6",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "function_hash": "9583414208414743158198687778122929959",
                "length": 20343.0
            },
            "signature_type": "Function"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "file": "dist/sqlite3.c"
            },
            "id": "ASB-A-192606047-50466683",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "199070197837573109235156897693055841300",
                    "254229894017524972120709405948172853767",
                    "117289713787236159983045952722556725477",
                    "83075987026358748734830566620063112306",
                    "7951125864893504766005905678806805383",
                    "104963192835081057512602139196411208570",
                    "171430600765845378393951066638538628914",
                    "257962578340537201723776040392316058654",
                    "131926247557348145843231241367400661900",
                    "174979528478897803753253515073224595790",
                    "209870398122955359073428200172119955405",
                    "151050557461900282148771416907916700869",
                    "192452138068915417185948228625881482141",
                    "156071605387590786447646150247604637989",
                    "186028635102580737276515053699023068249",
                    "32672734626909332816955162695109279063",
                    "336787501190228960756609026893114263296",
                    "281321620965984176234404433852957354689",
                    "121917876313134938879789596470941777206",
                    "247277293272431472357093088916183137262",
                    "155501003580640798209743296459903212720",
                    "72620454220112932562903483715801679517",
                    "55110336105843603319763953298770415242",
                    "48459986241853125501561029874123365719",
                    "330013460199952738388137397509706555698",
                    "227916312026899335266338704526692135876",
                    "273125721437435892088513926859510148025",
                    "67190533239793431795105156594994158624",
                    "274394521767918648042752744476929774494",
                    "139821460379877225986311840565084910524",
                    "206435657768126014631598430801510681322",
                    "333322203081154416177587936163218910128",
                    "177647646310442064110094650501263765181",
                    "4035537528797314661689936524946104175"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "function": "fts5SourceIdFunc",
                "file": "dist/orig/sqlite3.c"
            },
            "id": "ASB-A-192606047-50bf6543",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "function_hash": "276913520737806181320022957505775357805",
                "length": 271.0
            },
            "signature_type": "Function"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "function": "sqlite3ColumnsFromExprList",
                "file": "dist/sqlite3.c"
            },
            "id": "ASB-A-192606047-65f265df",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "function_hash": "331916474429917678620842977669099184144",
                "length": 1950.0
            },
            "signature_type": "Function"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "function": "sqlite3Select",
                "file": "dist/sqlite3.c"
            },
            "id": "ASB-A-192606047-7cf2cc66",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "function_hash": "9583414208414743158198687778122929959",
                "length": 20343.0
            },
            "signature_type": "Function"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "function": "fts5SourceIdFunc",
                "file": "dist/sqlite3.c"
            },
            "id": "ASB-A-192606047-953b8ee2",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "function_hash": "276913520737806181320022957505775357805",
                "length": 271.0
            },
            "signature_type": "Function"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "function": "multiSelect",
                "file": "dist/orig/sqlite3.c"
            },
            "id": "ASB-A-192606047-a7c748a5",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "function_hash": "316533365345574809383620359631629669570",
                "length": 7286.0
            },
            "signature_type": "Function"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "function": "flattenSubquery",
                "file": "dist/sqlite3.c"
            },
            "id": "ASB-A-192606047-c9588e25",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "function_hash": "68185368294323549256030120146732788245",
                "length": 5510.0
            },
            "signature_type": "Function"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "function": "sqlite3ColumnsFromExprList",
                "file": "dist/orig/sqlite3.c"
            },
            "id": "ASB-A-192606047-db351322",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "function_hash": "331916474429917678620842977669099184144",
                "length": 1950.0
            },
            "signature_type": "Function"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "function": "multiSelect",
                "file": "dist/sqlite3.c"
            },
            "id": "ASB-A-192606047-de8a85bb",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "function_hash": "316533365345574809383620359631629669570",
                "length": 7286.0
            },
            "signature_type": "Function"
        },
        {
            "source": "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4",
            "target": {
                "function": "flattenSubquery",
                "file": "dist/orig/sqlite3.c"
            },
            "id": "ASB-A-192606047-ec365df1",
            "deprecated": false,
            "signature_version": "v1",
            "digest": {
                "function_hash": "68185368294323549256030120146732788245",
                "length": 5510.0
            },
            "signature_type": "Function"
        }
    ],
    "spl": "2021-11-01",
    "severity": "High",
    "types": [
        "ID"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/external/sqlite/+/201685e7989c5a890c806c408d2ffc6a003cd8d4"
    ]
}