ASB-A-347307756

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-347307756.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-347307756
Aliases
  • A-347307756
  • CVE-2024-40660
Published
2024-11-01T00:00:00Z
Modified
2024-11-06T16:12:12.846478Z
Summary
[none]
Details

In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/native

Package

Name
platform/frameworks/native

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2024-11-01

Affected versions

Other

15-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "339766071877933942706633553616411047142",
                    "135836400288245622829882444091480740506",
                    "42501754865995840631102109956244845942",
                    "254324101511092293892895479330423743208"
                ]
            },
            "id": "ASB-A-347307756-0427d56d",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "314174711820388902724842456681689027049",
                    "214950443037345820902979755478877765175",
                    "137197685636607496438723036489668802135",
                    "336927132585450381069849410711536071215"
                ]
            },
            "id": "ASB-A-347307756-049f6e1a",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/tests/Surface_test.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "207897085347373987403521239069413085974",
                    "128458821909154303467996159410202871199",
                    "135861201927414083129377882293883357653",
                    "107068641938639365073277419870953760624"
                ]
            },
            "id": "ASB-A-347307756-08d92d85",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/include/gui/ISurfaceComposer.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "339766071877933942706633553616411047142",
                    "135836400288245622829882444091480740506",
                    "42501754865995840631102109956244845942",
                    "254324101511092293892895479330423743208"
                ]
            },
            "id": "ASB-A-347307756-0de34312",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "279681843299845718577125899731374316329",
                    "121580660932702253294762964318680781659",
                    "231592737922727058114311312887740187097",
                    "91151976511298262914926586812709154902",
                    "240254689671963061461831120482663482207",
                    "316306802537131832330062390665706332804",
                    "103096870512912581168814668757707576661",
                    "308694621329657465229634652817625197035",
                    "182214831128567996178142915112186521492",
                    "325731368350279567449321669846876162454"
                ]
            },
            "id": "ASB-A-347307756-199c0539",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/Credentials_test.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "163270401910612469368827187257766110296",
                    "274334669056936509479890635230994731044",
                    "292795029544786595602071636659638968841",
                    "327457978624096322000488939425154588492"
                ]
            },
            "id": "ASB-A-347307756-2c89a022",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/SurfaceComposerClient.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "279681843299845718577125899731374316329",
                    "121580660932702253294762964318680781659",
                    "231592737922727058114311312887740187097",
                    "91151976511298262914926586812709154902",
                    "240254689671963061461831120482663482207",
                    "316306802537131832330062390665706332804",
                    "103096870512912581168814668757707576661",
                    "308694621329657465229634652817625197035",
                    "182214831128567996178142915112186521492",
                    "325731368350279567449321669846876162454"
                ]
            },
            "id": "ASB-A-347307756-2ddcaf2e",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/Credentials_test.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 385.0,
                "function_hash": "239403469209987094294249332793373555713"
            },
            "id": "ASB-A-347307756-3170413e",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/Credentials_test.cpp",
                "function": "TEST_F"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 3820.0,
                "function_hash": "339897130347376256308704300521027911167"
            },
            "id": "ASB-A-347307756-3f00a04b",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.cpp",
                "function": "SurfaceFlinger::setTransactionState"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "137041774386500012888066557394616876399",
                    "196814350114445093323720344724061230100",
                    "12890721188722496148512744070076428565",
                    "304213114867068682998196507333349026383"
                ]
            },
            "id": "ASB-A-347307756-4b1fa283",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/unittests/TestableSurfaceFlinger.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 600.0,
                "function_hash": "106169962825787828724847080842741155019"
            },
            "id": "ASB-A-347307756-5dfe5366",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/SurfaceComposerClient.cpp",
                "function": "SurfaceComposerClient::doUncacheBufferTransaction"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 385.0,
                "function_hash": "239403469209987094294249332793373555713"
            },
            "id": "ASB-A-347307756-85dcf275",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/Credentials_test.cpp",
                "function": "TEST_F"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "207897085347373987403521239069413085974",
                    "128458821909154303467996159410202871199",
                    "135861201927414083129377882293883357653",
                    "107068641938639365073277419870953760624"
                ]
            },
            "id": "ASB-A-347307756-88f79c95",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/include/gui/ISurfaceComposer.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 600.0,
                "function_hash": "106169962825787828724847080842741155019"
            },
            "id": "ASB-A-347307756-8a33a372",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/SurfaceComposerClient.cpp",
                "function": "SurfaceComposerClient::doUncacheBufferTransaction"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "163270401910612469368827187257766110296",
                    "274334669056936509479890635230994731044",
                    "292795029544786595602071636659638968841",
                    "327457978624096322000488939425154588492"
                ]
            },
            "id": "ASB-A-347307756-8d64f7e6",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/SurfaceComposerClient.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "189922113115832902780332954032210697542",
                    "123493647134780316265636780755251557619",
                    "44281718565683734619603372863671677602",
                    "37670902699933898960243787027011221174"
                ]
            },
            "id": "ASB-A-347307756-95d2befa",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/ISurfaceComposer.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "314174711820388902724842456681689027049",
                    "214950443037345820902979755478877765175",
                    "137197685636607496438723036489668802135",
                    "336927132585450381069849410711536071215"
                ]
            },
            "id": "ASB-A-347307756-96da82e6",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/tests/Surface_test.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "217506105536464884061626426619661857598",
                    "41285444703400181113662303816158781835",
                    "319062217936801554522793147992468133956",
                    "330156560404981418837430272254514683667",
                    "143788384427779464659718375605242279015",
                    "140983164389544239200379618876235732199",
                    "225160037746743827864524452467283877714",
                    "306340325397708489392682989514803605110"
                ]
            },
            "id": "ASB-A-347307756-9b43ef1a",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.cpp"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "52264096990825571998794357375890569353",
                    "23835940602121468170699432432707750256",
                    "279010991382088750256184968407813224813",
                    "144222759078276014713684293032633598207",
                    "255937035865124515920044395742423932362",
                    "226267143730454967275317029921557940618",
                    "56576748230955152323100488215082424339",
                    "124119881709996763007493523083627299844",
                    "22976755580686046209905830482242892855",
                    "247562761420858816393250070421174189611",
                    "44105525745448399484627303687307799792",
                    "26868226326351219223339741875046009306",
                    "308738120992570581916271081682609539993",
                    "262509499450102725632596230927538232823",
                    "324021085080125906711587352095413750530",
                    "29151113432170605728289757067407548835",
                    "92983813021251650530741267869764686476",
                    "199795428838877390642292785348369938206",
                    "3719902745550430752294494251022232348",
                    "28467317516275257665598878009675858853",
                    "334678696982388959798633130616652957713",
                    "176496823334981165245080165935336295982",
                    "80355120639120293515703566034042572353",
                    "188288482905458340983719274796927485361",
                    "244161963834964717387426582378966191430",
                    "218366865306164184491524486556108371564",
                    "81871213906707731147982995260233542572",
                    "174418154223385101692643035051670769220",
                    "71140829752191760288098802085548591400",
                    "3719902745550430752294494251022232348",
                    "28467317516275257665598878009675858853",
                    "334678696982388959798633130616652957713",
                    "176496823334981165245080165935336295982",
                    "80355120639120293515703566034042572353",
                    "244882678318617124503662226647472747519",
                    "77866009019837615733483387593112958136",
                    "227292341037646219710976519028335157384",
                    "242164154379221365573043648137080434201",
                    "174418154223385101692643035051670769220",
                    "71140829752191760288098802085548591400",
                    "303817453789297918033482387283013033161",
                    "15778759264377902626442169890093844649",
                    "20682778566822587620767485037240070824",
                    "90896915864855967024940059741606826661",
                    "188288482905458340983719274796927485361",
                    "333093013440414685638140271215325220680",
                    "258316172068420245275556773460561777245",
                    "9430213747168038030934617648232540446"
                ]
            },
            "id": "ASB-A-347307756-a49611ad",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b3daf1a1398fca55eb936e1920f190c51b86fdf5",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/Credentials_test.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "217506105536464884061626426619661857598",
                    "41285444703400181113662303816158781835",
                    "319062217936801554522793147992468133956",
                    "330156560404981418837430272254514683667",
                    "143788384427779464659718375605242279015",
                    "140983164389544239200379618876235732199",
                    "225160037746743827864524452467283877714",
                    "306340325397708489392682989514803605110"
                ]
            },
            "id": "ASB-A-347307756-a4d75b96",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "137041774386500012888066557394616876399",
                    "196814350114445093323720344724061230100",
                    "12890721188722496148512744070076428565",
                    "304213114867068682998196507333349026383"
                ]
            },
            "id": "ASB-A-347307756-c06ffd2e",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/unittests/TestableSurfaceFlinger.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 3820.0,
                "function_hash": "339897130347376256308704300521027911167"
            },
            "id": "ASB-A-347307756-d1d0f03a",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.cpp",
                "function": "SurfaceFlinger::setTransactionState"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "189922113115832902780332954032210697542",
                    "123493647134780316265636780755251557619",
                    "44281718565683734619603372863671677602",
                    "37670902699933898960243787027011221174"
                ]
            },
            "id": "ASB-A-347307756-fc6b8db8",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/ISurfaceComposer.cpp"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/native/+/b6ddf525be3c2abbde59ae1533494b18a7961087",
        "https://android.googlesource.com/platform/frameworks/native/+/b3daf1a1398fca55eb936e1920f190c51b86fdf5",
        "https://android.googlesource.com/platform/frameworks/native/+/f65da8a9d7b6869dc2ad5cdd3b48763b8e18ac46"
    ],
    "spl": "2024-11-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/frameworks/native

Package

Name
platform/frameworks/native

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2024-11-01

Affected versions

Other

14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 3427.0,
                "function_hash": "206077890959091149885131875008288392016"
            },
            "id": "ASB-A-347307756-0a593dcd",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.cpp",
                "function": "SurfaceFlinger::setTransactionState"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "137041774386500012888066557394616876399",
                    "196814350114445093323720344724061230100",
                    "12890721188722496148512744070076428565",
                    "304213114867068682998196507333349026383"
                ]
            },
            "id": "ASB-A-347307756-23a10423",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/unittests/TestableSurfaceFlinger.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "339766071877933942706633553616411047142",
                    "135836400288245622829882444091480740506",
                    "42501754865995840631102109956244845942",
                    "254324101511092293892895479330423743208"
                ]
            },
            "id": "ASB-A-347307756-307afdef",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.h"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "52264096990825571998794357375890569353",
                    "23835940602121468170699432432707750256",
                    "279010991382088750256184968407813224813",
                    "144222759078276014713684293032633598207",
                    "22976755580686046209905830482242892855",
                    "247562761420858816393250070421174189611",
                    "44105525745448399484627303687307799792",
                    "26868226326351219223339741875046009306",
                    "308738120992570581916271081682609539993",
                    "262509499450102725632596230927538232823",
                    "324021085080125906711587352095413750530",
                    "29151113432170605728289757067407548835",
                    "92983813021251650530741267869764686476",
                    "199795428838877390642292785348369938206",
                    "3719902745550430752294494251022232348",
                    "28467317516275257665598878009675858853",
                    "334678696982388959798633130616652957713",
                    "176496823334981165245080165935336295982",
                    "80355120639120293515703566034042572353",
                    "188288482905458340983719274796927485361",
                    "244161963834964717387426582378966191430",
                    "218366865306164184491524486556108371564",
                    "81871213906707731147982995260233542572",
                    "174418154223385101692643035051670769220",
                    "71140829752191760288098802085548591400",
                    "3719902745550430752294494251022232348",
                    "28467317516275257665598878009675858853",
                    "334678696982388959798633130616652957713",
                    "176496823334981165245080165935336295982",
                    "80355120639120293515703566034042572353",
                    "244882678318617124503662226647472747519",
                    "77866009019837615733483387593112958136",
                    "227292341037646219710976519028335157384",
                    "242164154379221365573043648137080434201",
                    "174418154223385101692643035051670769220",
                    "71140829752191760288098802085548591400",
                    "303817453789297918033482387283013033161",
                    "15778759264377902626442169890093844649",
                    "20682778566822587620767485037240070824",
                    "90896915864855967024940059741606826661",
                    "188288482905458340983719274796927485361",
                    "333093013440414685638140271215325220680",
                    "258316172068420245275556773460561777245",
                    "9430213747168038030934617648232540446"
                ]
            },
            "id": "ASB-A-347307756-36d15ce4",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/37b340fe19fa66c730ea8733f4db65457a4f9f68",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/Credentials_test.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "339766071877933942706633553616411047142",
                    "135836400288245622829882444091480740506",
                    "42501754865995840631102109956244845942",
                    "254324101511092293892895479330423743208"
                ]
            },
            "id": "ASB-A-347307756-4d74862e",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "length": 600.0,
                "function_hash": "106169962825787828724847080842741155019"
            },
            "id": "ASB-A-347307756-50e3ce87",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/SurfaceComposerClient.cpp",
                "function": "SurfaceComposerClient::doUncacheBufferTransaction"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "163270401910612469368827187257766110296",
                    "274334669056936509479890635230994731044",
                    "292795029544786595602071636659638968841",
                    "327457978624096322000488939425154588492"
                ]
            },
            "id": "ASB-A-347307756-51cb8c1f",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/SurfaceComposerClient.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "207897085347373987403521239069413085974",
                    "128458821909154303467996159410202871199",
                    "135861201927414083129377882293883357653",
                    "107068641938639365073277419870953760624"
                ]
            },
            "id": "ASB-A-347307756-59593485",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/include/gui/ISurfaceComposer.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "217506105536464884061626426619661857598",
                    "41285444703400181113662303816158781835",
                    "319062217936801554522793147992468133956",
                    "330156560404981418837430272254514683667",
                    "143788384427779464659718375605242279015",
                    "140983164389544239200379618876235732199",
                    "225160037746743827864524452467283877714",
                    "306340325397708489392682989514803605110"
                ]
            },
            "id": "ASB-A-347307756-6c577f22",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "314174711820388902724842456681689027049",
                    "214950443037345820902979755478877765175",
                    "137197685636607496438723036489668802135",
                    "336927132585450381069849410711536071215"
                ]
            },
            "id": "ASB-A-347307756-78035189",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/tests/Surface_test.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "279681843299845718577125899731374316329",
                    "121580660932702253294762964318680781659",
                    "231592737922727058114311312887740187097",
                    "91151976511298262914926586812709154902",
                    "182214831128567996178142915112186521492",
                    "325731368350279567449321669846876162454"
                ]
            },
            "id": "ASB-A-347307756-788098dd",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/Credentials_test.cpp"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 3427.0,
                "function_hash": "206077890959091149885131875008288392016"
            },
            "id": "ASB-A-347307756-7d39e3f9",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.cpp",
                "function": "SurfaceFlinger::setTransactionState"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "189922113115832902780332954032210697542",
                    "123493647134780316265636780755251557619",
                    "44281718565683734619603372863671677602",
                    "37670902699933898960243787027011221174"
                ]
            },
            "id": "ASB-A-347307756-7f1121b0",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/ISurfaceComposer.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "length": 600.0,
                "function_hash": "106169962825787828724847080842741155019"
            },
            "id": "ASB-A-347307756-85645d30",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/SurfaceComposerClient.cpp",
                "function": "SurfaceComposerClient::doUncacheBufferTransaction"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 390.0,
                "function_hash": "66729471694852041391252860238778267107"
            },
            "id": "ASB-A-347307756-85de2a70",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/fuzzer/surfaceflinger_fuzzers_utils.h",
                "function": "setTransactionState"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "137041774386500012888066557394616876399",
                    "196814350114445093323720344724061230100",
                    "12890721188722496148512744070076428565",
                    "304213114867068682998196507333349026383"
                ]
            },
            "id": "ASB-A-347307756-8be08aaf",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/unittests/TestableSurfaceFlinger.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "189922113115832902780332954032210697542",
                    "123493647134780316265636780755251557619",
                    "44281718565683734619603372863671677602",
                    "37670902699933898960243787027011221174"
                ]
            },
            "id": "ASB-A-347307756-a37e2b52",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/ISurfaceComposer.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "314174711820388902724842456681689027049",
                    "214950443037345820902979755478877765175",
                    "137197685636607496438723036489668802135",
                    "336927132585450381069849410711536071215"
                ]
            },
            "id": "ASB-A-347307756-b1533811",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/tests/Surface_test.cpp"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 390.0,
                "function_hash": "66729471694852041391252860238778267107"
            },
            "id": "ASB-A-347307756-cbb92e84",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/fuzzer/surfaceflinger_fuzzers_utils.h",
                "function": "setTransactionState"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "163270401910612469368827187257766110296",
                    "274334669056936509479890635230994731044",
                    "292795029544786595602071636659638968841",
                    "327457978624096322000488939425154588492"
                ]
            },
            "id": "ASB-A-347307756-cff3fd32",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/SurfaceComposerClient.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "217506105536464884061626426619661857598",
                    "41285444703400181113662303816158781835",
                    "319062217936801554522793147992468133956",
                    "330156560404981418837430272254514683667",
                    "143788384427779464659718375605242279015",
                    "140983164389544239200379618876235732199",
                    "225160037746743827864524452467283877714",
                    "306340325397708489392682989514803605110"
                ]
            },
            "id": "ASB-A-347307756-d729e3a8",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/SurfaceFlinger.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "207897085347373987403521239069413085974",
                    "128458821909154303467996159410202871199",
                    "135861201927414083129377882293883357653",
                    "107068641938639365073277419870953760624"
                ]
            },
            "id": "ASB-A-347307756-df63d023",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "libs/gui/include/gui/ISurfaceComposer.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "279681843299845718577125899731374316329",
                    "121580660932702253294762964318680781659",
                    "231592737922727058114311312887740187097",
                    "91151976511298262914926586812709154902",
                    "182214831128567996178142915112186521492",
                    "325731368350279567449321669846876162454"
                ]
            },
            "id": "ASB-A-347307756-e6d1ae7a",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/tests/Credentials_test.cpp"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "137041774386500012888066557394616876399",
                    "196814350114445093323720344724061230100",
                    "12890721188722496148512744070076428565",
                    "304213114867068682998196507333349026383"
                ]
            },
            "id": "ASB-A-347307756-ec0e8751",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/fuzzer/surfaceflinger_fuzzers_utils.h"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "137041774386500012888066557394616876399",
                    "196814350114445093323720344724061230100",
                    "12890721188722496148512744070076428565",
                    "304213114867068682998196507333349026383"
                ]
            },
            "id": "ASB-A-347307756-efd3109e",
            "source": "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/surfaceflinger/fuzzer/surfaceflinger_fuzzers_utils.h"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/native/+/4e8200dec484fd6e5873f2a89c0b314467034eef",
        "https://android.googlesource.com/platform/frameworks/native/+/37b340fe19fa66c730ea8733f4db65457a4f9f68",
        "https://android.googlesource.com/platform/frameworks/native/+/8e2ca264784848a327901ac6080c6e2c34cc691b"
    ],
    "spl": "2024-11-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}