{"id":"ASB-A-157474195", "published":"2021-02-01T00:00:00Z", "modified":"2026-06-12T15:08:17.296522730Z", "aliases":["CVE-2021-0337", "A-157474195"], "details":"In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-02-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"95207611329866541020810522679702160389", "length":597}, "id":"ASB-A-157474195-0c1041eb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba", "target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java", "function":"renameDocument"}}, {"deprecated":false, "digest":{"function_hash":"177888745711270769104500725269179465166", "length":388}, "id":"ASB-A-157474195-21c197f4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba", "target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java", "function":"deleteDocument"}}, {"deprecated":false, "digest":{"function_hash":"104469326549119752783813600499935556036", "length":552}, "id":"ASB-A-157474195-3e7472a5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba", "target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java", "function":"moveDocument"}}, {"deprecated":false, "digest":{"line_hashes":["337768421731177914852952627660101406566", "160201817655052503962811299480944143267", "326805259670909050863234206244251260029", "166756985256022869606464148158220506442", "19149938257146352426317412782251334080", "304047694954246500064345687375436399951", "186652238605562309358180782191173623162", "313741471183135593549126092169425863949", "205883396251054809150709612950476294635", "208877308328643758029168981058035893429", "290405506323056615402018598059130139739", "58991343204514618830852163896601996662", "263529015495012105749591513539264233732", "269992576871638899273780706787786246227", "317399817418477653900571388810832556481"], "threshold":0.9}, "id":"ASB-A-157474195-6cd8ad62", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba", "target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java"}}, {"deprecated":false, "digest":{"line_hashes":["174315886285048729724468337538603502183", "13641771033659361517556201659059900667", "251762566533496679962500521846933460423", "98043791869773912361626476327699343355"], "threshold":0.9}, "id":"ASB-A-157474195-96dc10bd", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba", "target":{"file":"packages/ExternalStorageProvider/src/com/android/externalstorage/ExternalStorageProvider.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-02-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"95207611329866541020810522679702160389", "length":597}, "id":"ASB-A-157474195-1b2974c5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba", "target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java", "function":"renameDocument"}}, {"deprecated":false, "digest":{"line_hashes":["174315886285048729724468337538603502183", "13641771033659361517556201659059900667", "251762566533496679962500521846933460423", "98043791869773912361626476327699343355"], "threshold":0.9}, "id":"ASB-A-157474195-245b4ba2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba", "target":{"file":"packages/ExternalStorageProvider/src/com/android/externalstorage/ExternalStorageProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"104469326549119752783813600499935556036", "length":552}, "id":"ASB-A-157474195-c70ead19", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba", "target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java", "function":"moveDocument"}}, {"deprecated":false, "digest":{"function_hash":"177888745711270769104500725269179465166", "length":388}, "id":"ASB-A-157474195-e3a70bbe", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba", "target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java", "function":"deleteDocument"}}, {"deprecated":false, "digest":{"line_hashes":["337768421731177914852952627660101406566", "160201817655052503962811299480944143267", "326805259670909050863234206244251260029", "166756985256022869606464148158220506442", "19149938257146352426317412782251334080", "304047694954246500064345687375436399951", "186652238605562309358180782191173623162", "313741471183135593549126092169425863949", "205883396251054809150709612950476294635", "208877308328643758029168981058035893429", "290405506323056615402018598059130139739", "58991343204514618830852163896601996662", "263529015495012105749591513539264233732", "269992576871638899273780706787786246227", "317399817418477653900571388810832556481"], "threshold":0.9}, "id":"ASB-A-157474195-f8a15fd0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba", "target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-02-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba"}]}