{"id":"PUB-A-233338564", "published":"2023-03-01T00:00:00Z", "modified":"2026-07-10T15:26:01.587957612Z", "aliases":["CVE-2023-21018", "A-233338564"], "details":"In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/external/perfetto", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-03-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/perfetto/+/7076286ad6373cdc79b989652929236f8e9841ef"], "severity":"Moderate", "spl":"2023-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["88545782820470722185258939600760124082", "141185074383073179309257259460373829530", "151911977581720218950056226347624371621", "291385474918072065364481440096143627881", "4319774242246258842648944880925668600", "109791571089080802379767279196878690069"], "threshold":0.9}, "id":"PUB-A-233338564-560fbc0a", "match_only_versions":["13"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/perfetto/+/7076286ad6373cdc79b989652929236f8e9841ef", "target":{"file":"src/profiling/memory/unwinding.h"}}, {"deprecated":false, "digest":{"line_hashes":["278109555857641491656739200814794431822", "180342086707531848116863261382111200309", "320889837013034100650056372438105173383"], "threshold":0.9}, "id":"PUB-A-233338564-7e2cd29c", "match_only_versions":["13"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/external/perfetto/+/7076286ad6373cdc79b989652929236f8e9841ef", "target":{"file":"src/profiling/memory/unwinding.cc"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-03-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/external/perfetto/+/7076286ad6373cdc79b989652929236f8e9841ef"}]}