{"id":"PUB-A-140762419", "published":"2023-06-01T00:00:00Z", "modified":"2026-04-29T15:10:00.007170452Z", "aliases":["CVE-2023-21178", "A-140762419"], "details":"In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/system/sepolicy", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13-next:0"}, {"fixed":"13-next:2023-06-01"}]}], "versions":["13-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/sepolicy/+/7bedb9d1a070dbe99e483c3287e6ef270520699a"], "severity":"Moderate", "spl":"2023-06-01", "types":["ID"]}}, {"package":{"name":"platform/system/vold", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13-next:0"}, {"fixed":"13-next:2023-06-01"}]}], "versions":["13-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/vold/+/759ac5f87ceae053109aaae84e3a8c97cba1e511"], "severity":"Moderate", "spl":"2023-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"279529191378870486788272884241248626986", "length":1231}, "id":"PUB-A-140762419-2815cad6", "match_only_versions":["13-next"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/vold/+/759ac5f87ceae053109aaae84e3a8c97cba1e511", "target":{"file":"KeyUtil.cpp", "function":"evictKey"}}, {"deprecated":false, "digest":{"function_hash":"2145353606480915603368113091176684617", "length":1246}, "id":"PUB-A-140762419-36366056", "match_only_versions":["13-next"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/vold/+/759ac5f87ceae053109aaae84e3a8c97cba1e511", "target":{"file":"KeyUtil.cpp", "function":"installKey"}}, {"deprecated":false, "digest":{"line_hashes":["155404919740601357418490522122473867967", "89050903858336461750279238023313389709", "299740521285904443963372476497241076934", "326896357792371990119871513749450325763", "282920753469770144136751944084212869195", "63206651620664014721004767940093754973", "47755117522734981925638724129234018972", "229621141676731449773252323792796277177", "182452104478105228845516234098983828751", "210437306731509637401451293472611847492", "230579831600606458996204686086340072861", "64572430561726623521731363476097600643", "164984371477251526163290153188969798974", "16437101110075321040525696888720516281", "7849359201417764438429642328655383327", "318625451194724682784989363561677233560", "145144332272125448045727486849429848686", "95206948271280546384323004515216514284", "92190529889188941048245140983048808380", "7247769280750136020356332859558564722"], "threshold":0.9}, "id":"PUB-A-140762419-724a0d75", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/vold/+/759ac5f87ceae053109aaae84e3a8c97cba1e511", "target":{"file":"KeyUtil.cpp"}}]}}, {"package":{"name":"platform/system/sepolicy", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-06-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/sepolicy/+/7bedb9d1a070dbe99e483c3287e6ef270520699a"], "severity":"Moderate", "spl":"2023-06-01", "types":["ID"]}}, {"package":{"name":"platform/system/vold", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-06-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/system/vold/+/759ac5f87ceae053109aaae84e3a8c97cba1e511"], "severity":"Moderate", "spl":"2023-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["155404919740601357418490522122473867967", "89050903858336461750279238023313389709", "299740521285904443963372476497241076934", "326896357792371990119871513749450325763", "282920753469770144136751944084212869195", "63206651620664014721004767940093754973", "47755117522734981925638724129234018972", "229621141676731449773252323792796277177", "182452104478105228845516234098983828751", "210437306731509637401451293472611847492", "230579831600606458996204686086340072861", "64572430561726623521731363476097600643", "164984371477251526163290153188969798974", "16437101110075321040525696888720516281", "7849359201417764438429642328655383327", "318625451194724682784989363561677233560", "145144332272125448045727486849429848686", "95206948271280546384323004515216514284", "92190529889188941048245140983048808380", "7247769280750136020356332859558564722"], "threshold":0.9}, "id":"PUB-A-140762419-981cb51a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/vold/+/759ac5f87ceae053109aaae84e3a8c97cba1e511", "target":{"file":"KeyUtil.cpp"}}, {"deprecated":false, "digest":{"function_hash":"279529191378870486788272884241248626986", "length":1231}, "id":"PUB-A-140762419-bb790035", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/vold/+/759ac5f87ceae053109aaae84e3a8c97cba1e511", "target":{"file":"KeyUtil.cpp", "function":"evictKey"}}, {"deprecated":false, "digest":{"function_hash":"2145353606480915603368113091176684617", "length":1246}, "id":"PUB-A-140762419-c58788cd", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/system/vold/+/759ac5f87ceae053109aaae84e3a8c97cba1e511", "target":{"file":"KeyUtil.cpp", "function":"installKey"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-06-01"}]}