{"id":"ASB-A-185178568", "published":"2021-10-01T00:00:00Z", "modified":"2026-07-08T15:24:28.874761715Z", "aliases":["CVE-2021-0652", "A-185178568"], "details":"In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12-next:0"}, {"fixed":"12-next:2021-10-01"}]}], "versions":["12-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff"], "severity":"High", "spl":"2021-10-01", "types":["EoP", "Unknown"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"185864239362655514218475310092652484221", "length":56}, "id":"ASB-A-185178568-3d47b59b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}, {"deprecated":false, "digest":{"function_hash":"339478319862904858376976206025907280073", "length":107}, "id":"ASB-A-185178568-4693525a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}, {"deprecated":false, "digest":{"line_hashes":["121643977062923626745515733345286558681", "281943103480604893730279812896987304739", "39431095305666089737429303790417283263", "184443090632241604409289305091400330787", "288940757016037320418976212345001686936", "9773249350786764123582494058812485469", "176132001913208749900542624860763057957"], "threshold":0.9}, "id":"ASB-A-185178568-c8260a92", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-10-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/32207ceb2fb408d06924b46919fc438477fddcf0"], "severity":"High", "spl":"2021-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["121643977062923626745515733345286558681", "281943103480604893730279812896987304739", "39431095305666089737429303790417283263", "184443090632241604409289305091400330787", "288940757016037320418976212345001686936", "9773249350786764123582494058812485469", "176132001913208749900542624860763057957"], "threshold":0.9}, "id":"ASB-A-185178568-1f2538eb", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32207ceb2fb408d06924b46919fc438477fddcf0", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"}}, {"deprecated":false, "digest":{"function_hash":"185864239362655514218475310092652484221", "length":56}, "id":"ASB-A-185178568-3d297fe6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32207ceb2fb408d06924b46919fc438477fddcf0", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}, {"deprecated":false, "digest":{"function_hash":"339478319862904858376976206025907280073", "length":107}, "id":"ASB-A-185178568-a6fcbd59", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32207ceb2fb408d06924b46919fc438477fddcf0", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-10-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6edabc03017fdaa60e99e47fb0da2c297949b671"], "severity":"High", "spl":"2021-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["121643977062923626745515733345286558681", "281943103480604893730279812896987304739", "39431095305666089737429303790417283263", "184443090632241604409289305091400330787", "288940757016037320418976212345001686936", "9773249350786764123582494058812485469", "176132001913208749900542624860763057957"], "threshold":0.9}, "id":"ASB-A-185178568-1da9baa6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6edabc03017fdaa60e99e47fb0da2c297949b671", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"}}, {"deprecated":false, "digest":{"function_hash":"185864239362655514218475310092652484221", "length":56}, "id":"ASB-A-185178568-968540fd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6edabc03017fdaa60e99e47fb0da2c297949b671", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}, {"deprecated":false, "digest":{"function_hash":"339478319862904858376976206025907280073", "length":107}, "id":"ASB-A-185178568-d0831bed", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6edabc03017fdaa60e99e47fb0da2c297949b671", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-10-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e9831122e6c0fad4b0ddf394c239b6cfc039f221"], "severity":"High", "spl":"2021-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["121643977062923626745515733345286558681", "281943103480604893730279812896987304739", "39431095305666089737429303790417283263", "184443090632241604409289305091400330787", "288940757016037320418976212345001686936", "9773249350786764123582494058812485469", "176132001913208749900542624860763057957"], "threshold":0.9}, "id":"ASB-A-185178568-41129db9", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e9831122e6c0fad4b0ddf394c239b6cfc039f221", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"}}, {"deprecated":false, "digest":{"function_hash":"339478319862904858376976206025907280073", "length":107}, "id":"ASB-A-185178568-9486dc5e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e9831122e6c0fad4b0ddf394c239b6cfc039f221", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}, {"deprecated":false, "digest":{"function_hash":"185864239362655514218475310092652484221", "length":56}, "id":"ASB-A-185178568-9fbeaa9e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e9831122e6c0fad4b0ddf394c239b6cfc039f221", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-10-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/304f3af54526f3d80cc037e18f4cf89f1053737c"], "severity":"High", "spl":"2021-10-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"339478319862904858376976206025907280073", "length":107}, "id":"ASB-A-185178568-67234ea7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/304f3af54526f3d80cc037e18f4cf89f1053737c", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}, {"deprecated":false, "digest":{"function_hash":"185864239362655514218475310092652484221", "length":56}, "id":"ASB-A-185178568-6a3fae37", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/304f3af54526f3d80cc037e18f4cf89f1053737c", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}, {"deprecated":false, "digest":{"line_hashes":["121643977062923626745515733345286558681", "281943103480604893730279812896987304739", "39431095305666089737429303790417283263", "184443090632241604409289305091400330787", "288940757016037320418976212345001686936", "9773249350786764123582494058812485469", "176132001913208749900542624860763057957"], "threshold":0.9}, "id":"ASB-A-185178568-b79c2361", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/304f3af54526f3d80cc037e18f4cf89f1053737c", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2021-10-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff"], "severity":"High", "spl":"2021-10-01", "types":["Unknown"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"339478319862904858376976206025907280073", "length":107}, "id":"ASB-A-185178568-331f2c05", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}, {"deprecated":false, "digest":{"function_hash":"185864239362655514218475310092652484221", "length":56}, "id":"ASB-A-185178568-543d4746", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java", "function":"VectorDrawable"}}, {"deprecated":false, "digest":{"line_hashes":["121643977062923626745515733345286558681", "281943103480604893730279812896987304739", "39431095305666089737429303790417283263", "184443090632241604409289305091400330787", "288940757016037320418976212345001686936", "9773249350786764123582494058812485469", "176132001913208749900542624860763057957"], "threshold":0.9}, "id":"ASB-A-185178568-c74ade79", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff", "target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-10-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/0c4bc631f2e09ccd0712da39b3e1a6c4eaf52a65"}]}