{"id":"ASB-A-168041375", "published":"2021-03-01T00:00:00Z", "modified":"2026-07-21T15:12:06.459254990Z", "aliases":["CVE-2021-0393", "A-168041375"], "details":"In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/external/v8", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-03-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"], "severity":"High", "spl":"2021-03-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"68822387662674219214143339273819682585", "length":208}, "id":"ASB-A-168041375-843607a1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc", "function":"Scanner::LiteralBuffer::NewCapacity"}}, {"deprecated":false, "digest":{"line_hashes":["73683958680049165979211975693756119657", "293702464388042483207081733306300778561", "27499702901675275339500606292842084744", "69653428789069823003850071469509633883", "62401931847356790151334193350899237744", "83262765221408912722797352828837182075", "11539691986864327304760663783673283536", "97914080865086127195577975637918366544", "126347256774539215083706433821688648133"], "threshold":0.9}, "id":"ASB-A-168041375-ba569632", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc"}}, {"deprecated":false, "digest":{"function_hash":"263161746382587322104995451145678285804", "length":284}, "id":"ASB-A-168041375-cc7cfbac", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc", "function":"Scanner::LiteralBuffer::ExpandBuffer"}}, {"deprecated":false, "digest":{"line_hashes":["163453483867054060793111605789220474888", "178250785529873274907737298438474862140", "45413672410275256888003104757266731438", "94670482747576076161544072988419009821", "199794052845645696193322984297550599065"], "threshold":0.9}, "id":"ASB-A-168041375-dbbbc1c6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.h"}}]}}, {"package":{"name":"platform/external/v8", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-03-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"], "severity":"High", "spl":"2021-03-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["73683958680049165979211975693756119657", "293702464388042483207081733306300778561", "27499702901675275339500606292842084744", "69653428789069823003850071469509633883", "62401931847356790151334193350899237744", "83262765221408912722797352828837182075", "11539691986864327304760663783673283536", "97914080865086127195577975637918366544", "126347256774539215083706433821688648133"], "threshold":0.9}, "id":"ASB-A-168041375-7a53ec14", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc"}}, {"deprecated":false, "digest":{"line_hashes":["163453483867054060793111605789220474888", "178250785529873274907737298438474862140", "45413672410275256888003104757266731438", "94670482747576076161544072988419009821", "199794052845645696193322984297550599065"], "threshold":0.9}, "id":"ASB-A-168041375-a170d11e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.h"}}, {"deprecated":false, "digest":{"function_hash":"263161746382587322104995451145678285804", "length":284}, "id":"ASB-A-168041375-b8d02f37", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc", "function":"Scanner::LiteralBuffer::ExpandBuffer"}}, {"deprecated":false, "digest":{"function_hash":"68822387662674219214143339273819682585", "length":208}, "id":"ASB-A-168041375-d70c2594", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc", "function":"Scanner::LiteralBuffer::NewCapacity"}}]}}, {"package":{"name":"platform/external/v8", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-03-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"], "severity":"High", "spl":"2021-03-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"263161746382587322104995451145678285804", "length":284}, "id":"ASB-A-168041375-2175becd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc", "function":"Scanner::LiteralBuffer::ExpandBuffer"}}, {"deprecated":false, "digest":{"line_hashes":["73683958680049165979211975693756119657", "293702464388042483207081733306300778561", "27499702901675275339500606292842084744", "69653428789069823003850071469509633883", "62401931847356790151334193350899237744", "83262765221408912722797352828837182075", "11539691986864327304760663783673283536", "97914080865086127195577975637918366544", "126347256774539215083706433821688648133"], "threshold":0.9}, "id":"ASB-A-168041375-97a95c49", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc"}}, {"deprecated":false, "digest":{"function_hash":"68822387662674219214143339273819682585", "length":208}, "id":"ASB-A-168041375-e4c66711", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc", "function":"Scanner::LiteralBuffer::NewCapacity"}}, {"deprecated":false, "digest":{"line_hashes":["163453483867054060793111605789220474888", "178250785529873274907737298438474862140", "45413672410275256888003104757266731438", "94670482747576076161544072988419009821", "199794052845645696193322984297550599065"], "threshold":0.9}, "id":"ASB-A-168041375-ef368fcb", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.h"}}]}}, {"package":{"name":"platform/external/v8", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-03-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"], "severity":"High", "spl":"2021-03-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["163453483867054060793111605789220474888", "178250785529873274907737298438474862140", "45413672410275256888003104757266731438", "94670482747576076161544072988419009821", "199794052845645696193322984297550599065"], "threshold":0.9}, "id":"ASB-A-168041375-41e6eacf", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.h"}}, {"deprecated":false, "digest":{"function_hash":"263161746382587322104995451145678285804", "length":284}, "id":"ASB-A-168041375-7be0c4cd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc", "function":"Scanner::LiteralBuffer::ExpandBuffer"}}, {"deprecated":false, "digest":{"function_hash":"68822387662674219214143339273819682585", "length":208}, "id":"ASB-A-168041375-987fa78f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc", "function":"Scanner::LiteralBuffer::NewCapacity"}}, {"deprecated":false, "digest":{"line_hashes":["73683958680049165979211975693756119657", "293702464388042483207081733306300778561", "27499702901675275339500606292842084744", "69653428789069823003850071469509633883", "62401931847356790151334193350899237744", "83262765221408912722797352828837182075", "11539691986864327304760663783673283536", "97914080865086127195577975637918366544", "126347256774539215083706433821688648133"], "threshold":0.9}, "id":"ASB-A-168041375-bfa7069b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee", "target":{"file":"src/parsing/scanner.cc"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-03-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/external/v8/+/a91d71434065cde21f480f5d92432b9a4f2f3521"}]}