ASB-A-196970023

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-196970023.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-196970023
Aliases
Published
2021-12-01T00:00:00Z
Modified
2026-05-01T15:24:27.653932Z
Summary
[none]
Details

In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2021-12-01

Affected versions

Other
9

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/8bcd86e6626a38df525507cd25044cc9592b9b0d"
    ],
    "severity": "High",
    "spl": "2021-12-01",
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-196970023-134e6f2b",
            "digest": {
                "line_hashes": [
                    "124025345072694331739214173039099576593",
                    "162778159953647138094938789303301591407",
                    "271619544187844072394449961820309288291",
                    "55935293887020478280648402898434146389",
                    "158717058656457652709433784362727591795",
                    "249890113988591899345578852558713682626",
                    "51694359095882752951811469354253459794",
                    "191102558873463797989262390257008705482",
                    "106327189159305073122011856448853079221"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8bcd86e6626a38df525507cd25044cc9592b9b0d",
            "signature_type": "Line",
            "target": {
                "file": "location/java/android/location/GpsNavigationMessage.java"
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-196970023-f9e28f9f",
            "digest": {
                "length": 550.0,
                "function_hash": "86420969651292207696714084519346521043"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8bcd86e6626a38df525507cd25044cc9592b9b0d",
            "signature_type": "Function",
            "target": {
                "file": "location/java/android/location/GpsNavigationMessage.java",
                "function": "createFromParcel"
            }
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-196970023.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2021-12-01

Affected versions

Other
10

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/a1b4297002b927ce0fc795c0ac1d45a6a200b43b"
    ],
    "severity": "High",
    "spl": "2021-12-01",
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-196970023-7645c0e4",
            "digest": {
                "length": 550.0,
                "function_hash": "86420969651292207696714084519346521043"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/a1b4297002b927ce0fc795c0ac1d45a6a200b43b",
            "signature_type": "Function",
            "target": {
                "file": "location/java/android/location/GpsNavigationMessage.java",
                "function": "createFromParcel"
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-196970023-9e0ccb20",
            "digest": {
                "line_hashes": [
                    "124025345072694331739214173039099576593",
                    "162778159953647138094938789303301591407",
                    "271619544187844072394449961820309288291",
                    "55935293887020478280648402898434146389",
                    "158717058656457652709433784362727591795",
                    "249890113988591899345578852558713682626",
                    "51694359095882752951811469354253459794",
                    "191102558873463797989262390257008705482",
                    "106327189159305073122011856448853079221"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/a1b4297002b927ce0fc795c0ac1d45a6a200b43b",
            "signature_type": "Line",
            "target": {
                "file": "location/java/android/location/GpsNavigationMessage.java"
            }
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-196970023.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-12-01

Affected versions

Other
11

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/1903539154df194722ce5f0dbbd38e18f8c1fc12"
    ],
    "severity": "High",
    "spl": "2021-12-01",
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-196970023-9e894fc6",
            "digest": {
                "line_hashes": [
                    "124025345072694331739214173039099576593",
                    "162778159953647138094938789303301591407",
                    "271619544187844072394449961820309288291",
                    "55935293887020478280648402898434146389",
                    "158717058656457652709433784362727591795",
                    "249890113988591899345578852558713682626",
                    "51694359095882752951811469354253459794",
                    "191102558873463797989262390257008705482",
                    "106327189159305073122011856448853079221"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1903539154df194722ce5f0dbbd38e18f8c1fc12",
            "signature_type": "Line",
            "target": {
                "file": "location/java/android/location/GpsNavigationMessage.java"
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-196970023-a4b1cdc9",
            "digest": {
                "length": 550.0,
                "function_hash": "86420969651292207696714084519346521043"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1903539154df194722ce5f0dbbd38e18f8c1fc12",
            "signature_type": "Function",
            "target": {
                "file": "location/java/android/location/GpsNavigationMessage.java",
                "function": "createFromParcel"
            }
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-196970023.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2021-12-01

Affected versions

Other
12

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/dca80fea22fc71b0a1fc2c26af8daa2a3b65f2f6"
    ],
    "severity": "High",
    "spl": "2021-12-01",
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-196970023-172dd4e0",
            "digest": {
                "line_hashes": [
                    "124025345072694331739214173039099576593",
                    "162778159953647138094938789303301591407",
                    "271619544187844072394449961820309288291",
                    "55935293887020478280648402898434146389",
                    "158717058656457652709433784362727591795",
                    "249890113988591899345578852558713682626",
                    "51694359095882752951811469354253459794",
                    "191102558873463797989262390257008705482",
                    "106327189159305073122011856448853079221"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/dca80fea22fc71b0a1fc2c26af8daa2a3b65f2f6",
            "signature_type": "Line",
            "target": {
                "file": "location/java/android/location/GpsNavigationMessage.java"
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-196970023-d8399d06",
            "digest": {
                "length": 550.0,
                "function_hash": "86420969651292207696714084519346521043"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/dca80fea22fc71b0a1fc2c26af8daa2a3b65f2f6",
            "signature_type": "Function",
            "target": {
                "file": "location/java/android/location/GpsNavigationMessage.java",
                "function": "createFromParcel"
            }
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-196970023.json"