ASB-A-145728687

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-145728687.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-145728687
Aliases
  • A-145728687
  • CVE-2021-0339
Published
2021-02-01T00:00:00Z
Modified
2024-08-07T19:29:55.385415Z
Summary
Apps can get users to unknowingly perform sensitive actions using custom activity transitions
Details

In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.0:0
Fixed
8.0:2021-02-01

Affected versions

8.*

8.0

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "240781198046845352434196478099827908088"
                ]
            },
            "id": "ASB-A-145728687-30be760b",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "36091877609933478902730458305469049693",
                    "67533018356329670738168630456462339402",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-3dd304df",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1974.0,
                "function_hash": "167828252731237662873183528669658555204"
            },
            "id": "ASB-A-145728687-4b7cae53",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java",
                "function": "applyAnimationLocked"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "23523782773389466836621538368226403930"
                ]
            },
            "id": "ASB-A-145728687-61d6173f",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1893.0,
                "function_hash": "325382780500559816446535272171156250603"
            },
            "id": "ASB-A-145728687-61f392d9",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "163659835493645217942056745688260239209",
                    "67197349575078546983537388621422344987",
                    "339409768252200418230092563651351172882",
                    "240864001526411414009679456950581741048",
                    "152514264018916218721630519884049229079",
                    "90990027467105170270383297570393656745",
                    "100426657230759903596327288333531349361",
                    "276398014797168536078958137083508763400"
                ]
            },
            "id": "ASB-A-145728687-67b9e47c",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "231539437310315697941278323587159037610",
                    "4937962150403825499401672251382748247",
                    "11290961894387417694016744318634730401",
                    "155360886554012105513767779387919737384",
                    "305654537393863517286560693638326836628",
                    "280481565460752370918354230791119225576",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-70a0df1d",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowContainer.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "247696804619584906799706780696937307631",
                    "157542136676645543136959906951626233086",
                    "46811760796802864518475460361728743665",
                    "134531182231603227023463595470447221904",
                    "36091877609933478902730458305469049693",
                    "67533018356329670738168630456462339402",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-ab918f9f",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "240781198046845352434196478099827908088"
                ]
            },
            "id": "ASB-A-145728687-cb7bd26d",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "333756920912109618764997694891827105405"
                ]
            },
            "id": "ASB-A-145728687-edde2519",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1868.0,
                "function_hash": "117023374065508659552058408052738580225"
            },
            "id": "ASB-A-145728687-f3772485",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1388.0,
                "function_hash": "130790051744340993377782274621376596963"
            },
            "id": "ASB-A-145728687-f46c51fb",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowContainer.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
        "https://android.googlesource.com/platform/frameworks/base/+/4236b3e88fe444e2fbec7aa564fccf8b57c071dd",
        "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
        "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
        "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478"
    ],
    "spl": "2021-02-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2021-02-01

Affected versions

8.*

8.1

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "36091877609933478902730458305469049693",
                    "67533018356329670738168630456462339402",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-14a51344",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "247696804619584906799706780696937307631",
                    "157542136676645543136959906951626233086",
                    "46811760796802864518475460361728743665",
                    "134531182231603227023463595470447221904",
                    "36091877609933478902730458305469049693",
                    "67533018356329670738168630456462339402",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-18ebb7a0",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "333756920912109618764997694891827105405"
                ]
            },
            "id": "ASB-A-145728687-60ff69a9",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "231539437310315697941278323587159037610",
                    "4937962150403825499401672251382748247",
                    "11290961894387417694016744318634730401",
                    "155360886554012105513767779387919737384",
                    "305654537393863517286560693638326836628",
                    "280481565460752370918354230791119225576",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-746009d7",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowContainer.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "163659835493645217942056745688260239209",
                    "67197349575078546983537388621422344987",
                    "339409768252200418230092563651351172882",
                    "240864001526411414009679456950581741048",
                    "152514264018916218721630519884049229079",
                    "90990027467105170270383297570393656745",
                    "100426657230759903596327288333531349361",
                    "276398014797168536078958137083508763400"
                ]
            },
            "id": "ASB-A-145728687-8195f74c",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "240781198046845352434196478099827908088"
                ]
            },
            "id": "ASB-A-145728687-8bae1a2b",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1893.0,
                "function_hash": "325382780500559816446535272171156250603"
            },
            "id": "ASB-A-145728687-a03be3a2",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1388.0,
                "function_hash": "130790051744340993377782274621376596963"
            },
            "id": "ASB-A-145728687-b367c47b",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowContainer.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1868.0,
                "function_hash": "117023374065508659552058408052738580225"
            },
            "id": "ASB-A-145728687-c51cc288",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1974.0,
                "function_hash": "167828252731237662873183528669658555204"
            },
            "id": "ASB-A-145728687-ddb7a222",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java",
                "function": "applyAnimationLocked"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "23523782773389466836621538368226403930"
                ]
            },
            "id": "ASB-A-145728687-dffcd89f",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "240781198046845352434196478099827908088"
                ]
            },
            "id": "ASB-A-145728687-e52d4681",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
        "https://android.googlesource.com/platform/frameworks/base/+/4236b3e88fe444e2fbec7aa564fccf8b57c071dd",
        "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
        "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
        "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478"
    ],
    "spl": "2021-02-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2021-02-01

Affected versions

Other

9

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 1974.0,
                "function_hash": "167828252731237662873183528669658555204"
            },
            "id": "ASB-A-145728687-1826f596",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java",
                "function": "applyAnimationLocked"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1868.0,
                "function_hash": "117023374065508659552058408052738580225"
            },
            "id": "ASB-A-145728687-22064ed9",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1893.0,
                "function_hash": "325382780500559816446535272171156250603"
            },
            "id": "ASB-A-145728687-22d28f42",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "23523782773389466836621538368226403930"
                ]
            },
            "id": "ASB-A-145728687-296a4a95",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "231539437310315697941278323587159037610",
                    "4937962150403825499401672251382748247",
                    "11290961894387417694016744318634730401",
                    "155360886554012105513767779387919737384",
                    "305654537393863517286560693638326836628",
                    "280481565460752370918354230791119225576",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-400f176c",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowContainer.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "240781198046845352434196478099827908088"
                ]
            },
            "id": "ASB-A-145728687-409666eb",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1388.0,
                "function_hash": "130790051744340993377782274621376596963"
            },
            "id": "ASB-A-145728687-47d1afc4",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowContainer.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "163659835493645217942056745688260239209",
                    "67197349575078546983537388621422344987",
                    "339409768252200418230092563651351172882",
                    "240864001526411414009679456950581741048",
                    "152514264018916218721630519884049229079",
                    "90990027467105170270383297570393656745",
                    "100426657230759903596327288333531349361",
                    "276398014797168536078958137083508763400"
                ]
            },
            "id": "ASB-A-145728687-75457517",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "240781198046845352434196478099827908088"
                ]
            },
            "id": "ASB-A-145728687-8d90da1e",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "247696804619584906799706780696937307631",
                    "157542136676645543136959906951626233086",
                    "46811760796802864518475460361728743665",
                    "134531182231603227023463595470447221904",
                    "36091877609933478902730458305469049693",
                    "67533018356329670738168630456462339402",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-b7bab5de",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "36091877609933478902730458305469049693",
                    "67533018356329670738168630456462339402",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-cc48f8c6",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "333756920912109618764997694891827105405"
                ]
            },
            "id": "ASB-A-145728687-e4e0efab",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
        "https://android.googlesource.com/platform/frameworks/base/+/4236b3e88fe444e2fbec7aa564fccf8b57c071dd",
        "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
        "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
        "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478"
    ],
    "spl": "2021-02-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2021-02-01

Affected versions

Other

10

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "247696804619584906799706780696937307631",
                    "157542136676645543136959906951626233086",
                    "46811760796802864518475460361728743665",
                    "134531182231603227023463595470447221904",
                    "36091877609933478902730458305469049693",
                    "67533018356329670738168630456462339402",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-13563c77",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "240781198046845352434196478099827908088"
                ]
            },
            "id": "ASB-A-145728687-27ba4b71",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1974.0,
                "function_hash": "167828252731237662873183528669658555204"
            },
            "id": "ASB-A-145728687-2a89376e",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java",
                "function": "applyAnimationLocked"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "163659835493645217942056745688260239209",
                    "67197349575078546983537388621422344987",
                    "339409768252200418230092563651351172882",
                    "240864001526411414009679456950581741048",
                    "152514264018916218721630519884049229079",
                    "90990027467105170270383297570393656745",
                    "100426657230759903596327288333531349361",
                    "276398014797168536078958137083508763400"
                ]
            },
            "id": "ASB-A-145728687-2bf08e15",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "240781198046845352434196478099827908088"
                ]
            },
            "id": "ASB-A-145728687-482657e6",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "36091877609933478902730458305469049693",
                    "67533018356329670738168630456462339402",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-4cccf682",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "333756920912109618764997694891827105405"
                ]
            },
            "id": "ASB-A-145728687-5a656194",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "231539437310315697941278323587159037610",
                    "4937962150403825499401672251382748247",
                    "11290961894387417694016744318634730401",
                    "155360886554012105513767779387919737384",
                    "305654537393863517286560693638326836628",
                    "280481565460752370918354230791119225576",
                    "72100810950757557694061907275778600190",
                    "283341378247100862670133738043043598035"
                ]
            },
            "id": "ASB-A-145728687-6477012c",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowContainer.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1388.0,
                "function_hash": "130790051744340993377782274621376596963"
            },
            "id": "ASB-A-145728687-65d1c5d4",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowContainer.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "336707258065719586684353975544365425851",
                    "117930595580383156483928805671010410397",
                    "187445336059344001661830403286881195750",
                    "23523782773389466836621538368226403930"
                ]
            },
            "id": "ASB-A-145728687-94ba2378",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppTransition.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1893.0,
                "function_hash": "325382780500559816446535272171156250603"
            },
            "id": "ASB-A-145728687-9580bb40",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1868.0,
                "function_hash": "117023374065508659552058408052738580225"
            },
            "id": "ASB-A-145728687-e8618f99",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/AppWindowToken.java",
                "function": "loadAnimation"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/36bcc77337814d4d36e2b10eb062ac417d91611e",
        "https://android.googlesource.com/platform/frameworks/base/+/4236b3e88fe444e2fbec7aa564fccf8b57c071dd",
        "https://android.googlesource.com/platform/frameworks/base/+/6de34f8ee714691dbc3c089245bf832006826ebe",
        "https://android.googlesource.com/platform/frameworks/base/+/8669ef385780b8415412407deec85539a1e7db98",
        "https://android.googlesource.com/platform/frameworks/base/+/ee11625bb707c3512d4e44a35cc85b0bd14a2478"
    ],
    "spl": "2021-02-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}