In GetTable of dm.cpp, there is a possible way to leak the raw FDE key in bug reports due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"66071317781752963516926638938244070180",
"221698904397698559435883749761791442100",
"334722030814171978146408266846367485174",
"62708272299338636022665327483800029315",
"263494544919952387351647817158078911464",
"289259756623168733243553524807383202449",
"43039980192724340038185978070021869862"
]
},
"id": "ASB-A-368069390-6e21205f",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/core/+/bc067ef9f0408f3b7c4f5dcae3b6aec51f386e4d",
"target": {
"file": "fs_mgr/libdm/dm.cpp"
}
},
{
"digest": {
"length": 1113.0,
"function_hash": "108302958928813557393787361343075606179"
},
"id": "ASB-A-368069390-8b68096d",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/core/+/bc067ef9f0408f3b7c4f5dcae3b6aec51f386e4d",
"target": {
"function": "DeviceMapper::GetTable",
"file": "fs_mgr/libdm/dm.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/core/+/bc067ef9f0408f3b7c4f5dcae3b6aec51f386e4d"
],
"types": [
"ID"
],
"spl": "2025-02-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"66071317781752963516926638938244070180",
"221698904397698559435883749761791442100",
"334722030814171978146408266846367485174",
"62708272299338636022665327483800029315",
"263494544919952387351647817158078911464",
"289259756623168733243553524807383202449",
"43039980192724340038185978070021869862"
]
},
"id": "ASB-A-368069390-42de0367",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/core/+/c434d801d65372dd12d9bc8bd7717ef08f3fa984",
"target": {
"file": "fs_mgr/libdm/dm.cpp"
}
},
{
"digest": {
"length": 1113.0,
"function_hash": "108302958928813557393787361343075606179"
},
"id": "ASB-A-368069390-654cbf17",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/core/+/c434d801d65372dd12d9bc8bd7717ef08f3fa984",
"target": {
"function": "DeviceMapper::GetTable",
"file": "fs_mgr/libdm/dm.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/core/+/c434d801d65372dd12d9bc8bd7717ef08f3fa984"
],
"types": [
"ID"
],
"spl": "2025-02-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"66071317781752963516926638938244070180",
"221698904397698559435883749761791442100",
"334722030814171978146408266846367485174",
"62708272299338636022665327483800029315",
"263494544919952387351647817158078911464",
"289259756623168733243553524807383202449",
"43039980192724340038185978070021869862"
]
},
"id": "ASB-A-368069390-026ea792",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/core/+/e68f6cd6c0a925fea1bbe7537f6029ef9b0e142c",
"target": {
"file": "fs_mgr/libdm/dm.cpp"
}
},
{
"digest": {
"length": 1113.0,
"function_hash": "108302958928813557393787361343075606179"
},
"id": "ASB-A-368069390-b302d23d",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/core/+/e68f6cd6c0a925fea1bbe7537f6029ef9b0e142c",
"target": {
"function": "DeviceMapper::GetTable",
"file": "fs_mgr/libdm/dm.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/core/+/e68f6cd6c0a925fea1bbe7537f6029ef9b0e142c"
],
"types": [
"ID"
],
"spl": "2025-02-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 1113.0,
"function_hash": "108302958928813557393787361343075606179"
},
"id": "ASB-A-368069390-7f333830",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/core/+/95ca31cecf7591d48664260712c0199ac9bfedeb",
"target": {
"function": "DeviceMapper::GetTable",
"file": "fs_mgr/libdm/dm.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"66071317781752963516926638938244070180",
"221698904397698559435883749761791442100",
"334722030814171978146408266846367485174",
"62708272299338636022665327483800029315",
"263494544919952387351647817158078911464",
"289259756623168733243553524807383202449",
"43039980192724340038185978070021869862"
]
},
"id": "ASB-A-368069390-dbc677d9",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/core/+/95ca31cecf7591d48664260712c0199ac9bfedeb",
"target": {
"file": "fs_mgr/libdm/dm.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/core/+/95ca31cecf7591d48664260712c0199ac9bfedeb"
],
"types": [
"ID"
],
"spl": "2025-02-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 1113.0,
"function_hash": "108302958928813557393787361343075606179"
},
"id": "ASB-A-368069390-44d783c1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/core/+/d94e6c537fd8283a33d899d627ff154cc2af2d10",
"target": {
"function": "DeviceMapper::GetTable",
"file": "fs_mgr/libdm/dm.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"66071317781752963516926638938244070180",
"221698904397698559435883749761791442100",
"334722030814171978146408266846367485174",
"62708272299338636022665327483800029315",
"263494544919952387351647817158078911464",
"289259756623168733243553524807383202449",
"43039980192724340038185978070021869862"
]
},
"id": "ASB-A-368069390-860c6d6a",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/core/+/d94e6c537fd8283a33d899d627ff154cc2af2d10",
"target": {
"file": "fs_mgr/libdm/dm.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/core/+/d94e6c537fd8283a33d899d627ff154cc2af2d10"
],
"types": [
"ID"
],
"spl": "2025-02-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 1113.0,
"function_hash": "108302958928813557393787361343075606179"
},
"id": "ASB-A-368069390-44ebaa6b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/core/+/9b9233f4c1c31819fcd0fbc761f3b7ba6bd94344",
"target": {
"function": "DeviceMapper::GetTable",
"file": "fs_mgr/libdm/dm.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"66071317781752963516926638938244070180",
"221698904397698559435883749761791442100",
"334722030814171978146408266846367485174",
"62708272299338636022665327483800029315",
"263494544919952387351647817158078911464",
"289259756623168733243553524807383202449",
"43039980192724340038185978070021869862"
]
},
"id": "ASB-A-368069390-c0beff55",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/core/+/9b9233f4c1c31819fcd0fbc761f3b7ba6bd94344",
"target": {
"file": "fs_mgr/libdm/dm.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/core/+/9b9233f4c1c31819fcd0fbc761f3b7ba6bd94344"
],
"types": [
"ID"
],
"spl": "2025-02-01",
"severity": "High"
}