{"id":"ASB-A-183262161", "published":"2021-10-01T00:00:00Z", "modified":"2026-07-09T15:25:53.339171538Z", "aliases":["CVE-2021-0708", "A-183262161"], "details":"In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12-next:0"}, {"fixed":"12-next:2021-10-01"}]}], "versions":["12-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2"], "severity":"High", "spl":"2021-10-01", "types":["EoP", "Unknown"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"284677995755459757779340064592353055164", "length":1661}, "id":"ASB-A-183262161-1507cec1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runDumpHeap"}}, {"deprecated":false, "digest":{"function_hash":"134668538421500054805858506981720147348", "length":711}, "id":"ASB-A-183262161-57d9478f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runTraceIpcStop"}}, {"deprecated":false, "digest":{"line_hashes":["12833090086164136600540845336993134381", "82675702859199202907431363079583039106", "53986970093291337221256272384139676263", "44410977465853094606633497537384977802", "97687136630214288657633975244690662903", "107945595877785328795973789333103884130", "35740774921100177688145547066493569913", "211076223809504312418586163262711689193", "132986964995661594853390182470418925904", "329663651087734520370141758021984657568", "4048177358164353661916530752549029547", "332742073038599585200005512309888147695", "219924803452240690594680570736398528571", "69993180770643367642826570116597244781", "198399295809620037571879488489093741398", "103168210440241069599483011506180502207", "130536922999538945826085481402419475541", "283715542509405723649732848297490085524", "44600054439809896789909941750678427509", "11937542124718842406290688089144466713"], "threshold":0.9}, "id":"ASB-A-183262161-a8c515e5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-10-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b"], "severity":"High", "spl":"2021-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["105781965476234511085300441079348568065", "190036311201008882940703402484923525905", "53986970093291337221256272384139676263", "44410977465853094606633497537384977802", "97687136630214288657633975244690662903", "107945595877785328795973789333103884130", "32858827774743862361284710579865996165", "110492990727362969964840435663249817325", "307667212380040728714956557022997296055", "283436336536500440725463462883604519064", "215247704062558659403560468469336986633", "214661742751434314922971544950815032381", "258678531736647848147579739796935829851", "68618729088540146300878686519071478942"], "threshold":0.9}, "id":"ASB-A-183262161-527d8c82", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}}, {"deprecated":false, "digest":{"function_hash":"121797594058230280719934885770811979189", "length":707}, "id":"ASB-A-183262161-7b98f9be", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runTraceIpcStop"}}, {"deprecated":false, "digest":{"function_hash":"284061722856446454669025880175422859334", "length":1031}, "id":"ASB-A-183262161-fb6d6b6b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runDumpHeap"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-10-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392"], "severity":"High", "spl":"2021-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"219446689576170789916761395038483023231", "length":713}, "id":"ASB-A-183262161-50db1b27", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runTraceIpcStop"}}, {"deprecated":false, "digest":{"function_hash":"166861075445689166045572322354845827662", "length":1037}, "id":"ASB-A-183262161-77c2a119", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runDumpHeap"}}, {"deprecated":false, "digest":{"line_hashes":["301756864833933699389875512038653254603", "190036311201008882940703402484923525905", "53986970093291337221256272384139676263", "44410977465853094606633497537384977802", "97687136630214288657633975244690662903", "107945595877785328795973789333103884130", "35740774921100177688145547066493569913", "211076223809504312418586163262711689193", "132986964995661594853390182470418925904", "283436336536500440725463462883604519064", "215247704062558659403560468469336986633", "218665152784239650828429543158831964413", "198399295809620037571879488489093741398", "103168210440241069599483011506180502207"], "threshold":0.9}, "id":"ASB-A-183262161-db6e0d4f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-10-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989"], "severity":"High", "spl":"2021-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"134668538421500054805858506981720147348", "length":711}, "id":"ASB-A-183262161-a7c1189c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runTraceIpcStop"}}, {"deprecated":false, "digest":{"line_hashes":["301756864833933699389875512038653254603", "190036311201008882940703402484923525905", "53986970093291337221256272384139676263", "44410977465853094606633497537384977802", "97687136630214288657633975244690662903", "107945595877785328795973789333103884130", "35740774921100177688145547066493569913", "211076223809504312418586163262711689193", "132986964995661594853390182470418925904", "53300382153044086470472265701092521828", "254927741200068674398929884474873270286", "332742073038599585200005512309888147695", "219924803452240690594680570736398528571", "69993180770643367642826570116597244781", "198399295809620037571879488489093741398", "103168210440241069599483011506180502207", "130536922999538945826085481402419475541", "283715542509405723649732848297490085524", "44600054439809896789909941750678427509", "11937542124718842406290688089144466713"], "threshold":0.9}, "id":"ASB-A-183262161-ddfaf999", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}}, {"deprecated":false, "digest":{"function_hash":"138719729715043585607974762482160070769", "length":1656}, "id":"ASB-A-183262161-e3c9adde", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runDumpHeap"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-10-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172"], "severity":"High", "spl":"2021-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"284677995755459757779340064592353055164", "length":1661}, "id":"ASB-A-183262161-45282d15", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runDumpHeap"}}, {"deprecated":false, "digest":{"line_hashes":["85538186689281181308754390048425028014", "82675702859199202907431363079583039106", "53986970093291337221256272384139676263", "44410977465853094606633497537384977802", "97687136630214288657633975244690662903", "107945595877785328795973789333103884130", "35740774921100177688145547066493569913", "211076223809504312418586163262711689193", "132986964995661594853390182470418925904", "329663651087734520370141758021984657568", "4048177358164353661916530752549029547", "332742073038599585200005512309888147695", "219924803452240690594680570736398528571", "69993180770643367642826570116597244781", "198399295809620037571879488489093741398", "103168210440241069599483011506180502207", "130536922999538945826085481402419475541", "283715542509405723649732848297490085524", "44600054439809896789909941750678427509", "11937542124718842406290688089144466713"], "threshold":0.9}, "id":"ASB-A-183262161-7c91fe1d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}}, {"deprecated":false, "digest":{"function_hash":"134668538421500054805858506981720147348", "length":711}, "id":"ASB-A-183262161-cc3d971c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runTraceIpcStop"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2021-10-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2"], "severity":"High", "spl":"2021-10-01", "types":["Unknown"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"134668538421500054805858506981720147348", "length":711}, "id":"ASB-A-183262161-2a5c945f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runTraceIpcStop"}}, {"deprecated":false, "digest":{"line_hashes":["12833090086164136600540845336993134381", "82675702859199202907431363079583039106", "53986970093291337221256272384139676263", "44410977465853094606633497537384977802", "97687136630214288657633975244690662903", "107945595877785328795973789333103884130", "35740774921100177688145547066493569913", "211076223809504312418586163262711689193", "132986964995661594853390182470418925904", "329663651087734520370141758021984657568", "4048177358164353661916530752549029547", "332742073038599585200005512309888147695", "219924803452240690594680570736398528571", "69993180770643367642826570116597244781", "198399295809620037571879488489093741398", "103168210440241069599483011506180502207", "130536922999538945826085481402419475541", "283715542509405723649732848297490085524", "44600054439809896789909941750678427509", "11937542124718842406290688089144466713"], "threshold":0.9}, "id":"ASB-A-183262161-e70027ab", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}}, {"deprecated":false, "digest":{"function_hash":"284677995755459757779340064592353055164", "length":1661}, "id":"ASB-A-183262161-f5d959d7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2", "target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java", "function":"runDumpHeap"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-10-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/4241ab5ee435ee3c5e6496c001b2cf5bc827cfc4"}]}