In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/native/+/90b14eab96ef0de6f91375a2d55768798ce11059"
],
"severity": "High",
"types": [
"EoP"
],
"vanir_signatures": [
{
"digest": {
"length": 1631.0,
"function_hash": "103054758997303530909674299488431052806"
},
"signature_version": "v1",
"id": "ASB-A-382775095-820644a0",
"target": {
"file": "cmds/servicemanager/main.cpp",
"function": "main"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/native/+/90b14eab96ef0de6f91375a2d55768798ce11059",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"337286965434251483831955774888882175871",
"313999500694981596962968914895666274670",
"41442552728851546643087969104938208301",
"239001468851271657634345280584581928601"
]
},
"signature_version": "v1",
"id": "ASB-A-382775095-e7c70f69",
"target": {
"file": "cmds/servicemanager/main.cpp"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/native/+/90b14eab96ef0de6f91375a2d55768798ce11059",
"deprecated": false
}
],
"spl": "2025-03-01"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"
],
"severity": "High",
"types": [
"EoP"
],
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"5021685984790554028578586044454569582",
"158063599821068648845358961348018589092",
"1644809115128101204043221543353588375",
"239001468851271657634345280584581928601"
]
},
"signature_version": "v1",
"id": "ASB-A-382775095-b4c8b016",
"target": {
"file": "cmds/servicemanager/main.cpp"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06",
"deprecated": false
},
{
"digest": {
"length": 979.0,
"function_hash": "255594495738122695466899620609061562274"
},
"signature_version": "v1",
"id": "ASB-A-382775095-ba47c4f3",
"target": {
"file": "cmds/servicemanager/main.cpp",
"function": "main"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06",
"deprecated": false
}
],
"spl": "2025-03-01"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"
],
"severity": "High",
"types": [
"EoP"
],
"vanir_signatures": [
{
"digest": {
"length": 979.0,
"function_hash": "255594495738122695466899620609061562274"
},
"signature_version": "v1",
"id": "ASB-A-382775095-5d35d6a0",
"target": {
"file": "cmds/servicemanager/main.cpp",
"function": "main"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"5021685984790554028578586044454569582",
"158063599821068648845358961348018589092",
"1644809115128101204043221543353588375",
"239001468851271657634345280584581928601"
]
},
"signature_version": "v1",
"id": "ASB-A-382775095-b31eb96f",
"target": {
"file": "cmds/servicemanager/main.cpp"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06",
"deprecated": false
}
],
"spl": "2025-03-01"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/native/+/f7e88ce3ad00852c92ec23997bb78b0a9b358d65"
],
"severity": "High",
"types": [
"EoP"
],
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"337286965434251483831955774888882175871",
"313999500694981596962968914895666274670",
"41442552728851546643087969104938208301",
"239001468851271657634345280584581928601"
]
},
"signature_version": "v1",
"id": "ASB-A-382775095-708244dd",
"target": {
"file": "cmds/servicemanager/main.cpp"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/native/+/f7e88ce3ad00852c92ec23997bb78b0a9b358d65",
"deprecated": false
},
{
"digest": {
"length": 1436.0,
"function_hash": "331552110268812508616993286843637271200"
},
"signature_version": "v1",
"id": "ASB-A-382775095-ccbbbdd8",
"target": {
"file": "cmds/servicemanager/main.cpp",
"function": "main"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/native/+/f7e88ce3ad00852c92ec23997bb78b0a9b358d65",
"deprecated": false
}
],
"spl": "2025-03-01"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"
],
"severity": "High",
"types": [
"EoP"
],
"vanir_signatures": [
{
"digest": {
"length": 979.0,
"function_hash": "255594495738122695466899620609061562274"
},
"signature_version": "v1",
"id": "ASB-A-382775095-447a6095",
"target": {
"file": "cmds/servicemanager/main.cpp",
"function": "main"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"5021685984790554028578586044454569582",
"158063599821068648845358961348018589092",
"1644809115128101204043221543353588375",
"239001468851271657634345280584581928601"
]
},
"signature_version": "v1",
"id": "ASB-A-382775095-6a9977f9",
"target": {
"file": "cmds/servicemanager/main.cpp"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06",
"deprecated": false
}
],
"spl": "2025-03-01"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"
],
"severity": "High",
"types": [
"EoP"
],
"vanir_signatures": [
{
"digest": {
"length": 979.0,
"function_hash": "255594495738122695466899620609061562274"
},
"signature_version": "v1",
"id": "ASB-A-382775095-1abf1cc4",
"target": {
"file": "cmds/servicemanager/main.cpp",
"function": "main"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"5021685984790554028578586044454569582",
"158063599821068648845358961348018589092",
"1644809115128101204043221543353588375",
"239001468851271657634345280584581928601"
]
},
"signature_version": "v1",
"id": "ASB-A-382775095-c74797f7",
"target": {
"file": "cmds/servicemanager/main.cpp"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06",
"deprecated": false
}
],
"spl": "2025-03-01"
}