ASB-A-282919145

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-282919145.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-282919145
Aliases
Published
2023-10-01T00:00:00Z
Modified
2026-04-17T15:55:28.020024Z
Summary
[none]
Details

In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/native

Package

Name
platform/frameworks/native

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14-next:0
Fixed
14-next:2023-10-01

Affected versions

Other
14-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/native/+/3c00cbc0f119c3f59325aa6d5061529feb58462b"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2023-10-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-282919145.json"
platform/frameworks/native

Package

Name
platform/frameworks/native

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2023-10-01

Affected versions

Other
12

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/native/+/24a7874bb4093a1a6721a2002569512c43af5bdc"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2023-10-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-282919145.json"
platform/frameworks/native

Package

Name
platform/frameworks/native

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2023-10-01

Affected versions

Other
12L

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/native/+/24a7874bb4093a1a6721a2002569512c43af5bdc"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2023-10-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-282919145.json"
platform/frameworks/native

Package

Name
platform/frameworks/native

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2023-10-01

Affected versions

Other
13

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/native/+/7fb707802ee4c667d1ee6065ae2845d835b47aeb"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2023-10-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-282919145.json"