{"schema_version":"1.9.0","id":"ASB-A-240019719","published":"2023-03-01T00:00:00Z","modified":"2026-09-08T15:39:03.104189951Z","aliases":["A-240019719","CVE-2021-33655"],"details":"In fbcon_set_font() of fbcon.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2023-03-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/52833e8fafb2ada5329f89b4e03a838ace0644bd","https://android.googlesource.com/kernel/common/+/e8a2596dec19b4ed1d9a3b3a0dcc428b0468074a","https://android.googlesource.com/kernel/common/+/b54f2a0d7bc35bec294c796e5b779a2c960b1145"],"severity":"High","spl":"2023-03-05","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"260368242011700339528141153546759620060","length":2230},"id":"ASB-A-240019719-0d9eea6c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/52833e8fafb2ada5329f89b4e03a838ace0644bd","target":{"file":"drivers/video/fbdev/core/fbmem.c","function":"fb_set_var"}},{"deprecated":false,"digest":{"line_hashes":["220704080036185236950158588689116762957","146819525641386820595486975508173557986","152494364300023753278409797644414637462"],"threshold":0.9},"id":"ASB-A-240019719-2d935707","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/52833e8fafb2ada5329f89b4e03a838ace0644bd","target":{"file":"drivers/video/fbdev/core/fbmem.c"}},{"deprecated":false,"digest":{"line_hashes":["145214828066865294559026777866206346704","74273726301264452381742795473067020242","98584942807167272420032876425097977336"],"threshold":0.9},"id":"ASB-A-240019719-602e4306","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/b54f2a0d7bc35bec294c796e5b779a2c960b1145","target":{"file":"drivers/video/fbdev/core/fbcon.c"}},{"deprecated":false,"digest":{"function_hash":"237877605262909335765337413501427008668","length":2120},"id":"ASB-A-240019719-8c716c97","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/e8a2596dec19b4ed1d9a3b3a0dcc428b0468074a","target":{"file":"drivers/video/fbdev/core/fbmem.c","function":"do_fb_ioctl"}},{"deprecated":false,"digest":{"function_hash":"32680718910003695153068326154783534040","length":1635},"id":"ASB-A-240019719-ba2e9a01","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/b54f2a0d7bc35bec294c796e5b779a2c960b1145","target":{"file":"drivers/video/fbdev/core/fbcon.c","function":"fbcon_set_font"}},{"deprecated":false,"digest":{"line_hashes":["139595783800889817610535237357284472539","286891797931192681199206635193469849391","189615521132268010970490211699267266912","220804743819273572867304279509796439362","213164206842185859280247276716851666100","15621184755067764871661004093351894155","12003470756970607673472171164672216868","46292734064832699823715455874387192271"],"threshold":0.9},"id":"ASB-A-240019719-c650b1fb","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/e8a2596dec19b4ed1d9a3b3a0dcc428b0468074a","target":{"file":"include/linux/fbcon.h"}},{"deprecated":false,"digest":{"line_hashes":["4805974244079610571020223133689330202","220829309033984216009626881265785601298","78949393936684919963760381278998600401","304463444265663019437793569792849990614"],"threshold":0.9},"id":"ASB-A-240019719-f542543f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/e8a2596dec19b4ed1d9a3b3a0dcc428b0468074a","target":{"file":"drivers/video/fbdev/core/fbmem.c"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-240019719.json"}}],"references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/52833e8fafb2ada5329f89b4e03a838ace0644bd"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/e8a2596dec19b4ed1d9a3b3a0dcc428b0468074a"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/b54f2a0d7bc35bec294c796e5b779a2c960b1145"}]}