In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "length": 213.0, "function_hash": "54319369983931035985253623226944933139" }, "id": "ASB-A-167389063-68b95f90", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/7fca112f30e2b4f19a3bbc18137f932d392dc299", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "UTF16StringToV8String" }, "signature_type": "Function" }, { "digest": { "length": 290.0, "function_hash": "88420207127959057571486896301700769903" }, "id": "ASB-A-167389063-8f6bf557", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/7fca112f30e2b4f19a3bbc18137f932d392dc299", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ASCIILiteralToV8String" }, "signature_type": "Function" }, { "digest": { "length": 169.0, "function_hash": "317578368809220362403679025200295575223" }, "id": "ASB-A-167389063-d3bedd02", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/7fca112f30e2b4f19a3bbc18137f932d392dc299", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ASCIIStringToV8String" }, "signature_type": "Function" }, { "digest": { "length": 352.0, "function_hash": "102540949548487053716683568735438200375" }, "id": "ASB-A-167389063-d4a17257", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/7fca112f30e2b4f19a3bbc18137f932d392dc299", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ProxyResolverV8::ProxyResolverV8" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "7819977470958370268167907724891288171", "205384604580871539287765083255524168558", "183005003192583941733429341898005514124", "228848859852153289971920113820480645814", "166987282086871582954005622308528750627", "58435346688335427498881153778877969437", "298007837709016046909350901418525541011", "97451646634816404221519568680403292480", "166235325295259286073232949758845939765", "304126582810150509224096110990514239332", "313844043336847075675588576594784550725", "155681556558217421962330921393186286987", "10399937934552739913075921836284715901", "49254021993327287152384873124671832894", "186074520429296606678186423137782008120", "110909172002972883397689039887554623361", "134632737123194788394478470943899966456", "253330627223239953189923204962967486025", "319801515939890122468815762201230095360", "61389336618862862575690348898018361224", "21443853583391453721066332395445018791", "233606202289033854137735700222660619821", "92821241577459086645939707418707895223", "73115169681794708102420034627843447988", "87225321570327340920308091036071633862", "176447606918519850908710471822999578050", "152458019363601401540238027041488023996", "121519998611201283347164959369006676776", "16400670057391740726452042311497681464", "238361885344640141194367867312574952049", "270895843280734734078568640837124687623", "25410393902457721889802040098173115105", "159730737597751184963267939056964471207", "19409506385501373034679444409759691324", "20617064488736504976573170072203283628", "166659101396603804856806597945372606347", "26562281984905500847028226465326805297", "145001639094123485257136407494794822667", "121007923054073036368589562446465291742", "296748936167609243897174825342054633482", "334719926781346970952783213539758264680", "277858622213813658340052780295425201954", "219604119212326536058530462465583004264", "255662931824245377673830469969292653457", "139043079044253644151856652329117236696", "201009336772552439988217477571944214902", "121433093079564343021240799667551471945", "188461184274205138498927061555830547021", "119496268423673460944889113320657413843", "337362271121254845285179579264185896964", "246137632121803357760251355727585846057", "99418036514414549075909709304010667458", "257214191948612363344619419583818675395", "324487928797832664377892406688101580906", "226503216081005253981907572548313725377", "139598370276263991583407662496978571632", "323526047167867321171985914600273090542", "303478076448504549952528539211173449771", "45754982530184920135079446687511559741", "233659057159256414523111915029017868829", "261010106910350988680676102011793551950", "61963540904916816377731152341922184208", "300679244824342584389123608623933495374", "133120323236447564066333635012472412218", "233678965445547506322179718034695453704", "210207812628736060412716392147433671686", "339345595913561075211521910855280072258", "242785643110015069693248626778418395231", "86308473004604527271239634604410342562", "57370525309683994951597301567621853198", "53234795531653911825379841679923862081", "245032214945696105210369453233250081763", "7787222368911034581083345711807603306", "206891034470658132119248847032958682581", "173798248183691100973150303048248696740", "35723480323357061917129557487464802483", "315833005113818398187527677890339827684", "224837719123696173428118936475993329468", "136977685507249229047853865441062696197", "327897327056524325072778679168251332800", "37871571895470178168825839818177146797", "171016242750189669390453691850110337508", "240205453745802649919626603365768456575", "26814896606743347377605149627068243468", "336950268546534094076324807095260612860", "206986709185625228306270581853969353747", "160136625029664122491287010490609754296", "318415665727644190511625292002781494237" ] }, "id": "ASB-A-167389063-daf99e79", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/7fca112f30e2b4f19a3bbc18137f932d392dc299", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/platform/external/chromium-libpac/+/7fca112f30e2b4f19a3bbc18137f932d392dc299" ], "spl": "2021-07-05", "severity": "High", "types": [ "RCE" ] }
{ "vanir_signatures": [ { "digest": { "length": 213.0, "function_hash": "54319369983931035985253623226944933139" }, "id": "ASB-A-167389063-1b990f36", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/204ba1d12f70ff42b540fcd64cb5d1d46af043a1", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "UTF16StringToV8String" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "7819977470958370268167907724891288171", "205384604580871539287765083255524168558", "183005003192583941733429341898005514124", "228848859852153289971920113820480645814", "166987282086871582954005622308528750627", "58435346688335427498881153778877969437", "298007837709016046909350901418525541011", "97451646634816404221519568680403292480", "166235325295259286073232949758845939765", "304126582810150509224096110990514239332", "313844043336847075675588576594784550725", "155681556558217421962330921393186286987", "10399937934552739913075921836284715901", "49254021993327287152384873124671832894", "186074520429296606678186423137782008120", "110909172002972883397689039887554623361", "134632737123194788394478470943899966456", "253330627223239953189923204962967486025", "319801515939890122468815762201230095360", "61389336618862862575690348898018361224", "21443853583391453721066332395445018791", "233606202289033854137735700222660619821", "92821241577459086645939707418707895223", "73115169681794708102420034627843447988", "87225321570327340920308091036071633862", "176447606918519850908710471822999578050", "152458019363601401540238027041488023996", "121519998611201283347164959369006676776", "16400670057391740726452042311497681464", "238361885344640141194367867312574952049", "270895843280734734078568640837124687623", "25410393902457721889802040098173115105", "159730737597751184963267939056964471207", "19409506385501373034679444409759691324", "20617064488736504976573170072203283628", "166659101396603804856806597945372606347", "26562281984905500847028226465326805297", "145001639094123485257136407494794822667", "121007923054073036368589562446465291742", "296748936167609243897174825342054633482", "334719926781346970952783213539758264680", "277858622213813658340052780295425201954", "219604119212326536058530462465583004264", "255662931824245377673830469969292653457", "139043079044253644151856652329117236696", "201009336772552439988217477571944214902", "121433093079564343021240799667551471945", "188461184274205138498927061555830547021", "119496268423673460944889113320657413843", "337362271121254845285179579264185896964", "246137632121803357760251355727585846057", "99418036514414549075909709304010667458", "257214191948612363344619419583818675395", "324487928797832664377892406688101580906", "226503216081005253981907572548313725377", "139598370276263991583407662496978571632", "323526047167867321171985914600273090542", "303478076448504549952528539211173449771", "45754982530184920135079446687511559741", "233659057159256414523111915029017868829", "261010106910350988680676102011793551950", "61963540904916816377731152341922184208", "300679244824342584389123608623933495374", "133120323236447564066333635012472412218", "233678965445547506322179718034695453704", "210207812628736060412716392147433671686", "339345595913561075211521910855280072258", "242785643110015069693248626778418395231", "86308473004604527271239634604410342562", "57370525309683994951597301567621853198", "53234795531653911825379841679923862081", "245032214945696105210369453233250081763", "7787222368911034581083345711807603306", "206891034470658132119248847032958682581", "173798248183691100973150303048248696740", "35723480323357061917129557487464802483", "315833005113818398187527677890339827684", "224837719123696173428118936475993329468", "136977685507249229047853865441062696197", "327897327056524325072778679168251332800", "37871571895470178168825839818177146797", "171016242750189669390453691850110337508", "240205453745802649919626603365768456575", "26814896606743347377605149627068243468", "336950268546534094076324807095260612860", "206986709185625228306270581853969353747", "160136625029664122491287010490609754296", "318415665727644190511625292002781494237" ] }, "id": "ASB-A-167389063-2bcb5b6b", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/204ba1d12f70ff42b540fcd64cb5d1d46af043a1", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc" }, "signature_type": "Line" }, { "digest": { "length": 290.0, "function_hash": "88420207127959057571486896301700769903" }, "id": "ASB-A-167389063-6c22d1a0", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/204ba1d12f70ff42b540fcd64cb5d1d46af043a1", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ASCIILiteralToV8String" }, "signature_type": "Function" }, { "digest": { "length": 169.0, "function_hash": "317578368809220362403679025200295575223" }, "id": "ASB-A-167389063-df65d9f4", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/204ba1d12f70ff42b540fcd64cb5d1d46af043a1", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ASCIIStringToV8String" }, "signature_type": "Function" }, { "digest": { "length": 352.0, "function_hash": "102540949548487053716683568735438200375" }, "id": "ASB-A-167389063-f034b3d1", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/204ba1d12f70ff42b540fcd64cb5d1d46af043a1", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ProxyResolverV8::ProxyResolverV8" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/external/chromium-libpac/+/204ba1d12f70ff42b540fcd64cb5d1d46af043a1" ], "spl": "2021-07-05", "severity": "High", "types": [ "RCE" ] }
{ "vanir_signatures": [ { "digest": { "length": 211.0, "function_hash": "136206568738909224180577051552233980458" }, "id": "ASB-A-167389063-572422af", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/9295700ee70a56459ecc5854f6908d23fc881cd8", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "UTF16StringToV8String" }, "signature_type": "Function" }, { "digest": { "length": 352.0, "function_hash": "102540949548487053716683568735438200375" }, "id": "ASB-A-167389063-67f4817f", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/9295700ee70a56459ecc5854f6908d23fc881cd8", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ProxyResolverV8::ProxyResolverV8" }, "signature_type": "Function" }, { "digest": { "length": 169.0, "function_hash": "317578368809220362403679025200295575223" }, "id": "ASB-A-167389063-7210ba49", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/9295700ee70a56459ecc5854f6908d23fc881cd8", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ASCIIStringToV8String" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "7819977470958370268167907724891288171", "205384604580871539287765083255524168558", "183005003192583941733429341898005514124", "228848859852153289971920113820480645814", "166987282086871582954005622308528750627", "320851141247392351877990962030981705104", "146957997513893000861270387214622397093", "213008778889256174598886224705636666013", "197806215966501125194557327824091618014", "271171544836873843148837687945487136468", "184684583374187179734643606589833027297", "265189466522836756951033400168724657403", "199321060686492036380295940504054332405", "49254021993327287152384873124671832894", "180307096720045447882317408735798551047", "57318924824520726234183383512168566918", "256942518795239609504684547062051789857", "56947294706904033732957777321276099162", "87737222373160566773541786689427293851", "98512134112268812337255984103754122385", "21443853583391453721066332395445018791", "233606202289033854137735700222660619821", "92821241577459086645939707418707895223", "73115169681794708102420034627843447988", "101611399816151598005416431986598122093", "180704874817853025653732241712746602884", "152458019363601401540238027041488023996", "121519998611201283347164959369006676776", "16400670057391740726452042311497681464", "252631241967156227933065675110759495390", "292789212410103822220512034038930106745", "300124408545018153847416697992301808526", "289616132084272432503476568044154255683", "255843773272585991991282057593050826665", "113565159792402463097439699574725441698", "101243954612191978642227869015936225293", "111728799710931083524480706032605619266", "237866280760050859500607933511008869606", "171295697575506263740062916796803678117", "86382381285732682038458305878346372770", "325631883180594688791459213429737908334", "21417008305978078163225063554103267877", "140900674948525976863492432939291558859", "69318650463748422833699313187550095877", "260410206046579290045015460379278649960", "67344824230564360725471596716996425198", "94472921108844239214728767291198486262", "188461184274205138498927061555830547021", "74203358312022621775420256466023234840", "61941050840629726271163237949686464779", "226503216081005253981907572548313725377", "139598370276263991583407662496978571632", "323526047167867321171985914600273090542", "303478076448504549952528539211173449771", "45754982530184920135079446687511559741", "233659057159256414523111915029017868829", "261010106910350988680676102011793551950", "124388387459597924831933677108566610114", "44371273504671387152743015502980613381", "240074240002515010885612806793370617162", "204320553824775759483537062942026449199", "26654492375685971227838024944358139366", "24603139301708400671322188786916367758", "98072491083759699423838953773984339656", "178618994511918322720447480948458695424", "164104017879147704345651565849020254086", "274331083366246288222669904681937104930", "206891034470658132119248847032958682581", "173798248183691100973150303048248696740", "35723480323357061917129557487464802483", "315833005113818398187527677890339827684", "224837719123696173428118936475993329468", "136977685507249229047853865441062696197", "327897327056524325072778679168251332800", "37871571895470178168825839818177146797", "171016242750189669390453691850110337508", "240205453745802649919626603365768456575", "26814896606743347377605149627068243468", "336950268546534094076324807095260612860", "206986709185625228306270581853969353747", "160136625029664122491287010490609754296", "318415665727644190511625292002781494237" ] }, "id": "ASB-A-167389063-8f23faad", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/9295700ee70a56459ecc5854f6908d23fc881cd8", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc" }, "signature_type": "Line" }, { "digest": { "length": 290.0, "function_hash": "88420207127959057571486896301700769903" }, "id": "ASB-A-167389063-a850387f", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/9295700ee70a56459ecc5854f6908d23fc881cd8", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ASCIILiteralToV8String" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/external/chromium-libpac/+/9295700ee70a56459ecc5854f6908d23fc881cd8" ], "spl": "2021-07-05", "severity": "High", "types": [ "RCE" ] }
{ "vanir_signatures": [ { "digest": { "length": 211.0, "function_hash": "136206568738909224180577051552233980458" }, "id": "ASB-A-167389063-5e64f930", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/438381db24b83e6fde76a4ca2c6a9fa91f822265", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "UTF16StringToV8String" }, "signature_type": "Function" }, { "digest": { "length": 169.0, "function_hash": "317578368809220362403679025200295575223" }, "id": "ASB-A-167389063-78c777ff", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/438381db24b83e6fde76a4ca2c6a9fa91f822265", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ASCIIStringToV8String" }, "signature_type": "Function" }, { "digest": { "length": 290.0, "function_hash": "88420207127959057571486896301700769903" }, "id": "ASB-A-167389063-896ac8cd", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/438381db24b83e6fde76a4ca2c6a9fa91f822265", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ASCIILiteralToV8String" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "7819977470958370268167907724891288171", "205384604580871539287765083255524168558", "183005003192583941733429341898005514124", "228848859852153289971920113820480645814", "166987282086871582954005622308528750627", "320851141247392351877990962030981705104", "146957997513893000861270387214622397093", "213008778889256174598886224705636666013", "197806215966501125194557327824091618014", "271171544836873843148837687945487136468", "184684583374187179734643606589833027297", "265189466522836756951033400168724657403", "199321060686492036380295940504054332405", "49254021993327287152384873124671832894", "180307096720045447882317408735798551047", "57318924824520726234183383512168566918", "256942518795239609504684547062051789857", "56947294706904033732957777321276099162", "87737222373160566773541786689427293851", "98512134112268812337255984103754122385", "21443853583391453721066332395445018791", "233606202289033854137735700222660619821", "92821241577459086645939707418707895223", "73115169681794708102420034627843447988", "101611399816151598005416431986598122093", "180704874817853025653732241712746602884", "152458019363601401540238027041488023996", "121519998611201283347164959369006676776", "16400670057391740726452042311497681464", "252631241967156227933065675110759495390", "292789212410103822220512034038930106745", "300124408545018153847416697992301808526", "289616132084272432503476568044154255683", "255843773272585991991282057593050826665", "113565159792402463097439699574725441698", "101243954612191978642227869015936225293", "111728799710931083524480706032605619266", "237866280760050859500607933511008869606", "171295697575506263740062916796803678117", "86382381285732682038458305878346372770", "325631883180594688791459213429737908334", "21417008305978078163225063554103267877", "140900674948525976863492432939291558859", "69318650463748422833699313187550095877", "260410206046579290045015460379278649960", "67344824230564360725471596716996425198", "94472921108844239214728767291198486262", "188461184274205138498927061555830547021", "74203358312022621775420256466023234840", "61941050840629726271163237949686464779", "226503216081005253981907572548313725377", "139598370276263991583407662496978571632", "323526047167867321171985914600273090542", "303478076448504549952528539211173449771", "45754982530184920135079446687511559741", "233659057159256414523111915029017868829", "261010106910350988680676102011793551950", "124388387459597924831933677108566610114", "44371273504671387152743015502980613381", "240074240002515010885612806793370617162", "204320553824775759483537062942026449199", "26654492375685971227838024944358139366", "24603139301708400671322188786916367758", "98072491083759699423838953773984339656", "178618994511918322720447480948458695424", "164104017879147704345651565849020254086", "274331083366246288222669904681937104930", "206891034470658132119248847032958682581", "173798248183691100973150303048248696740", "35723480323357061917129557487464802483", "315833005113818398187527677890339827684", "224837719123696173428118936475993329468", "136977685507249229047853865441062696197", "327897327056524325072778679168251332800", "37871571895470178168825839818177146797", "171016242750189669390453691850110337508", "240205453745802649919626603365768456575", "26814896606743347377605149627068243468", "336950268546534094076324807095260612860", "206986709185625228306270581853969353747", "160136625029664122491287010490609754296", "318415665727644190511625292002781494237" ] }, "id": "ASB-A-167389063-b0d0624a", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/438381db24b83e6fde76a4ca2c6a9fa91f822265", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc" }, "signature_type": "Line" }, { "digest": { "length": 352.0, "function_hash": "102540949548487053716683568735438200375" }, "id": "ASB-A-167389063-d6a7fbc2", "source": "https://android.googlesource.com/platform/external/chromium-libpac/+/438381db24b83e6fde76a4ca2c6a9fa91f822265", "deprecated": false, "signature_version": "v1", "target": { "file": "src/proxy_resolver_v8.cc", "function": "ProxyResolverV8::ProxyResolverV8" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/external/chromium-libpac/+/438381db24b83e6fde76a4ca2c6a9fa91f822265" ], "spl": "2021-07-05", "severity": "High", "types": [ "RCE" ] }