In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"288508001039333069095848688273573531797",
"119851012097575545574449533524428691588",
"91690786432259530172833243249254683079",
"196148582152129290754150781018897335228",
"117385763178379715783697240385224354282",
"133660162135826535019520307634805969353",
"83642766951557862843112062353733482238",
"285900262454053172078146923260102989391",
"70130527465617955341242483235546251692",
"35090800821588695100548174024815050316",
"188247135441538865091472115786154298093",
"207860304642737827790593779345712681566",
"277864375828173986312926860465223456810",
"164439631528111666422574620968366918734",
"178858012821372576660814355102254142221",
"96937810834973924626786171601908546046",
"14594971207492405593484842617450939425",
"327845481311144321233431521323583426093",
"278700213770189598839311216460650541832",
"184700282589846506376289741823473344352",
"48274737620753965742853755971081621258",
"84263607015463576121744956121371845351",
"211782208487908126612865375965667170893"
]
},
"id": "ASB-A-272382770-181e397f",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/9c0c15f80cffb98b36284dd169a2e62e059dbbe3",
"target": {
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"175101083521474262969585747595096688097",
"177325453451212205003267507749188228088",
"210759678224050503828066907629831213842",
"144918195253254391169421628398297121388",
"217931119106372575049674853995296013363",
"231101638386576884617936173699719364359",
"262772268653452037871936653269320894869",
"50301795927138483764376666351031952474",
"64591340792462984237610343208853468334",
"46760820441747493728563123423398048732",
"334923012185537920638313452033992947385",
"160464814534566015689892087670364402674"
]
},
"id": "ASB-A-272382770-6fdd0356",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/9c0c15f80cffb98b36284dd169a2e62e059dbbe3",
"target": {
"file": "server/MDnsSdListener.h"
}
},
{
"digest": {
"length": 1806.0,
"function_hash": "60549781693429576282479641499585071981"
},
"id": "ASB-A-272382770-bafffaed",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/9c0c15f80cffb98b36284dd169a2e62e059dbbe3",
"target": {
"function": "MDnsSdListener::Monitor::run",
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"length": 390.0,
"function_hash": "49111509324040052961829791559015593766"
},
"id": "ASB-A-272382770-c5af2dd8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/9c0c15f80cffb98b36284dd169a2e62e059dbbe3",
"target": {
"function": "MDnsSdListener::Monitor::Monitor",
"file": "server/MDnsSdListener.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/netd/+/9c0c15f80cffb98b36284dd169a2e62e059dbbe3"
],
"types": [
"EoP"
],
"spl": "2023-12-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"288508001039333069095848688273573531797",
"119851012097575545574449533524428691588",
"91690786432259530172833243249254683079",
"191013523405452783030069400769807765426",
"117385763178379715783697240385224354282",
"133660162135826535019520307634805969353",
"83642766951557862843112062353733482238",
"285900262454053172078146923260102989391",
"70130527465617955341242483235546251692",
"35090800821588695100548174024815050316",
"188247135441538865091472115786154298093",
"207860304642737827790593779345712681566",
"277864375828173986312926860465223456810",
"164439631528111666422574620968366918734",
"178858012821372576660814355102254142221",
"96937810834973924626786171601908546046",
"14594971207492405593484842617450939425",
"327845481311144321233431521323583426093",
"278700213770189598839311216460650541832",
"184700282589846506376289741823473344352",
"48274737620753965742853755971081621258",
"84263607015463576121744956121371845351",
"211782208487908126612865375965667170893"
]
},
"id": "ASB-A-272382770-04f723b7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"175101083521474262969585747595096688097",
"177325453451212205003267507749188228088",
"293326194872920841583463889641486284974",
"216741225980163612557763190513915026150",
"217931119106372575049674853995296013363",
"231101638386576884617936173699719364359",
"262772268653452037871936653269320894869",
"50301795927138483764376666351031952474",
"64591340792462984237610343208853468334",
"46760820441747493728563123423398048732",
"186886144997341325486840786359246052104",
"87935966302827637771757054879881645043"
]
},
"id": "ASB-A-272382770-66a701ae",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"file": "server/MDnsSdListener.h"
}
},
{
"digest": {
"length": 1756.0,
"function_hash": "89771476549488489316653760079788142592"
},
"id": "ASB-A-272382770-9a51b9d3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"function": "MDnsSdListener::Monitor::run",
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"length": 390.0,
"function_hash": "49111509324040052961829791559015593766"
},
"id": "ASB-A-272382770-e6770e71",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"function": "MDnsSdListener::Monitor::Monitor",
"file": "server/MDnsSdListener.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd"
],
"types": [
"EoP"
],
"spl": "2023-12-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"288508001039333069095848688273573531797",
"119851012097575545574449533524428691588",
"91690786432259530172833243249254683079",
"191013523405452783030069400769807765426",
"117385763178379715783697240385224354282",
"133660162135826535019520307634805969353",
"83642766951557862843112062353733482238",
"285900262454053172078146923260102989391",
"70130527465617955341242483235546251692",
"35090800821588695100548174024815050316",
"188247135441538865091472115786154298093",
"207860304642737827790593779345712681566",
"277864375828173986312926860465223456810",
"164439631528111666422574620968366918734",
"178858012821372576660814355102254142221",
"96937810834973924626786171601908546046",
"14594971207492405593484842617450939425",
"327845481311144321233431521323583426093",
"278700213770189598839311216460650541832",
"184700282589846506376289741823473344352",
"48274737620753965742853755971081621258",
"84263607015463576121744956121371845351",
"211782208487908126612865375965667170893"
]
},
"id": "ASB-A-272382770-a88802a2",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"175101083521474262969585747595096688097",
"177325453451212205003267507749188228088",
"293326194872920841583463889641486284974",
"216741225980163612557763190513915026150",
"217931119106372575049674853995296013363",
"231101638386576884617936173699719364359",
"262772268653452037871936653269320894869",
"50301795927138483764376666351031952474",
"64591340792462984237610343208853468334",
"46760820441747493728563123423398048732",
"186886144997341325486840786359246052104",
"87935966302827637771757054879881645043"
]
},
"id": "ASB-A-272382770-bde0da34",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"file": "server/MDnsSdListener.h"
}
},
{
"digest": {
"length": 390.0,
"function_hash": "49111509324040052961829791559015593766"
},
"id": "ASB-A-272382770-be265695",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"function": "MDnsSdListener::Monitor::Monitor",
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"length": 1756.0,
"function_hash": "89771476549488489316653760079788142592"
},
"id": "ASB-A-272382770-e47129f9",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"function": "MDnsSdListener::Monitor::run",
"file": "server/MDnsSdListener.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd"
],
"types": [
"EoP"
],
"spl": "2023-12-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"288508001039333069095848688273573531797",
"119851012097575545574449533524428691588",
"91690786432259530172833243249254683079",
"191013523405452783030069400769807765426",
"117385763178379715783697240385224354282",
"133660162135826535019520307634805969353",
"83642766951557862843112062353733482238",
"285900262454053172078146923260102989391",
"70130527465617955341242483235546251692",
"35090800821588695100548174024815050316",
"188247135441538865091472115786154298093",
"207860304642737827790593779345712681566",
"277864375828173986312926860465223456810",
"164439631528111666422574620968366918734",
"178858012821372576660814355102254142221",
"96937810834973924626786171601908546046",
"14594971207492405593484842617450939425",
"327845481311144321233431521323583426093",
"278700213770189598839311216460650541832",
"184700282589846506376289741823473344352",
"48274737620753965742853755971081621258",
"84263607015463576121744956121371845351",
"211782208487908126612865375965667170893"
]
},
"id": "ASB-A-272382770-31755625",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"175101083521474262969585747595096688097",
"177325453451212205003267507749188228088",
"293326194872920841583463889641486284974",
"216741225980163612557763190513915026150",
"217931119106372575049674853995296013363",
"231101638386576884617936173699719364359",
"262772268653452037871936653269320894869",
"50301795927138483764376666351031952474",
"64591340792462984237610343208853468334",
"46760820441747493728563123423398048732",
"186886144997341325486840786359246052104",
"87935966302827637771757054879881645043"
]
},
"id": "ASB-A-272382770-5b898acd",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"file": "server/MDnsSdListener.h"
}
},
{
"digest": {
"length": 390.0,
"function_hash": "49111509324040052961829791559015593766"
},
"id": "ASB-A-272382770-8b4d58d8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"function": "MDnsSdListener::Monitor::Monitor",
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"length": 1756.0,
"function_hash": "89771476549488489316653760079788142592"
},
"id": "ASB-A-272382770-ca4cad26",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"function": "MDnsSdListener::Monitor::run",
"file": "server/MDnsSdListener.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd"
],
"types": [
"EoP"
],
"spl": "2023-12-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"175101083521474262969585747595096688097",
"177325453451212205003267507749188228088",
"293326194872920841583463889641486284974",
"216741225980163612557763190513915026150",
"217931119106372575049674853995296013363",
"231101638386576884617936173699719364359",
"262772268653452037871936653269320894869",
"50301795927138483764376666351031952474",
"64591340792462984237610343208853468334",
"46760820441747493728563123423398048732",
"186886144997341325486840786359246052104",
"87935966302827637771757054879881645043"
]
},
"id": "ASB-A-272382770-3fb6e4ba",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"file": "server/MDnsSdListener.h"
}
},
{
"digest": {
"length": 390.0,
"function_hash": "49111509324040052961829791559015593766"
},
"id": "ASB-A-272382770-4d22e6f4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"function": "MDnsSdListener::Monitor::Monitor",
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"length": 1756.0,
"function_hash": "89771476549488489316653760079788142592"
},
"id": "ASB-A-272382770-5dde3789",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"function": "MDnsSdListener::Monitor::run",
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"288508001039333069095848688273573531797",
"119851012097575545574449533524428691588",
"91690786432259530172833243249254683079",
"191013523405452783030069400769807765426",
"117385763178379715783697240385224354282",
"133660162135826535019520307634805969353",
"83642766951557862843112062353733482238",
"285900262454053172078146923260102989391",
"70130527465617955341242483235546251692",
"35090800821588695100548174024815050316",
"188247135441538865091472115786154298093",
"207860304642737827790593779345712681566",
"277864375828173986312926860465223456810",
"164439631528111666422574620968366918734",
"178858012821372576660814355102254142221",
"96937810834973924626786171601908546046",
"14594971207492405593484842617450939425",
"327845481311144321233431521323583426093",
"278700213770189598839311216460650541832",
"184700282589846506376289741823473344352",
"48274737620753965742853755971081621258",
"84263607015463576121744956121371845351",
"211782208487908126612865375965667170893"
]
},
"id": "ASB-A-272382770-7899e47b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"file": "server/MDnsSdListener.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd"
],
"types": [
"EoP"
],
"spl": "2023-12-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"175101083521474262969585747595096688097",
"177325453451212205003267507749188228088",
"293326194872920841583463889641486284974",
"216741225980163612557763190513915026150",
"217931119106372575049674853995296013363",
"231101638386576884617936173699719364359",
"262772268653452037871936653269320894869",
"50301795927138483764376666351031952474",
"64591340792462984237610343208853468334",
"46760820441747493728563123423398048732",
"186886144997341325486840786359246052104",
"87935966302827637771757054879881645043"
]
},
"id": "ASB-A-272382770-71a651fa",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"file": "server/MDnsSdListener.h"
}
},
{
"digest": {
"length": 390.0,
"function_hash": "49111509324040052961829791559015593766"
},
"id": "ASB-A-272382770-75600f36",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"function": "MDnsSdListener::Monitor::Monitor",
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"288508001039333069095848688273573531797",
"119851012097575545574449533524428691588",
"91690786432259530172833243249254683079",
"191013523405452783030069400769807765426",
"117385763178379715783697240385224354282",
"133660162135826535019520307634805969353",
"83642766951557862843112062353733482238",
"285900262454053172078146923260102989391",
"70130527465617955341242483235546251692",
"35090800821588695100548174024815050316",
"188247135441538865091472115786154298093",
"207860304642737827790593779345712681566",
"277864375828173986312926860465223456810",
"164439631528111666422574620968366918734",
"178858012821372576660814355102254142221",
"96937810834973924626786171601908546046",
"14594971207492405593484842617450939425",
"327845481311144321233431521323583426093",
"278700213770189598839311216460650541832",
"184700282589846506376289741823473344352",
"48274737620753965742853755971081621258",
"84263607015463576121744956121371845351",
"211782208487908126612865375965667170893"
]
},
"id": "ASB-A-272382770-a8c5ab15",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"file": "server/MDnsSdListener.cpp"
}
},
{
"digest": {
"length": 1756.0,
"function_hash": "89771476549488489316653760079788142592"
},
"id": "ASB-A-272382770-e259a415",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd",
"target": {
"function": "MDnsSdListener::Monitor::run",
"file": "server/MDnsSdListener.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/netd/+/75e5e2e1faec7aa2812fc6fba30d6fe80558bacd"
],
"types": [
"EoP"
],
"spl": "2023-12-01",
"severity": "High"
}