{"id":"ASB-A-151456667","details":"In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-151456667","CVE-2020-0241"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2020-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62"}],"affected":[{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-08-01"}]}],"versions":["8.0"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62"],"spl":"2020-08-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp","function":"NuPlayer::NuPlayerStreamListener::NuPlayerStreamListener"},"source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","signature_version":"v1","digest":{"length":500,"function_hash":"62971634248029269408542293229664182959"},"id":"ASB-A-151456667-22f87b22","signature_type":"Function","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/StreamingSource.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["257757637620382329678879983761818846967","46490953783783870605287287212776723184","137922293143610324958808373583274821078","161431903262230913429395045052690299544"]},"id":"ASB-A-151456667-2f27a665","signature_type":"Line","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["13497574384380726460251324515130884166","272604493749544362242506650795268532910","288141264307228506863231467794057690792","204108946973673161190656929158304247213"]},"id":"ASB-A-151456667-8d5b4a82","signature_type":"Line","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/StreamingSource.cpp","function":"NuPlayer::StreamingSource::start"},"source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","signature_version":"v1","digest":{"length":355,"function_hash":"279492365202655454309351300190304790654"},"id":"ASB-A-151456667-fc352956","signature_type":"Function","deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-151456667.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-08-01"}]}],"versions":["8.1"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62"],"spl":"2020-08-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["13497574384380726460251324515130884166","272604493749544362242506650795268532910","288141264307228506863231467794057690792","204108946973673161190656929158304247213"]},"id":"ASB-A-151456667-10157337","signature_type":"Line","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp","function":"NuPlayer::NuPlayerStreamListener::NuPlayerStreamListener"},"source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","signature_version":"v1","digest":{"length":500,"function_hash":"62971634248029269408542293229664182959"},"id":"ASB-A-151456667-99dee2cf","signature_type":"Function","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/StreamingSource.cpp"},"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","digest":{"threshold":0.9,"line_hashes":["257757637620382329678879983761818846967","46490953783783870605287287212776723184","137922293143610324958808373583274821078","161431903262230913429395045052690299544"]},"id":"ASB-A-151456667-dc42e1eb","signature_version":"v1","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/StreamingSource.cpp","function":"NuPlayer::StreamingSource::start"},"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","digest":{"length":355,"function_hash":"279492365202655454309351300190304790654"},"id":"ASB-A-151456667-df362532","signature_version":"v1","deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-151456667.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-08-01"}]}],"versions":["9"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62"],"severity":"High","spl":"2020-08-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp"},"signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["13497574384380726460251324515130884166","272604493749544362242506650795268532910","288141264307228506863231467794057690792","204108946973673161190656929158304247213"]},"id":"ASB-A-151456667-11d58372","source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/StreamingSource.cpp","function":"NuPlayer::StreamingSource::start"},"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","digest":{"length":355,"function_hash":"279492365202655454309351300190304790654"},"id":"ASB-A-151456667-77c70d93","signature_version":"v1","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/StreamingSource.cpp"},"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","digest":{"threshold":0.9,"line_hashes":["257757637620382329678879983761818846967","46490953783783870605287287212776723184","137922293143610324958808373583274821078","161431903262230913429395045052690299544"]},"id":"ASB-A-151456667-7d5f6017","signature_version":"v1","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp","function":"NuPlayer::NuPlayerStreamListener::NuPlayerStreamListener"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","digest":{"length":500,"function_hash":"62971634248029269408542293229664182959"},"id":"ASB-A-151456667-922f9c33","signature_type":"Function","deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-151456667.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-08-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62"],"severity":"High","spl":"2020-08-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"media/libmediaplayerservice/nuplayer/StreamingSource.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["257757637620382329678879983761818846967","46490953783783870605287287212776723184","137922293143610324958808373583274821078","161431903262230913429395045052690299544"]},"id":"ASB-A-151456667-035c7ba0","signature_type":"Line","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/StreamingSource.cpp","function":"NuPlayer::StreamingSource::start"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","digest":{"length":355,"function_hash":"279492365202655454309351300190304790654"},"id":"ASB-A-151456667-0ef02654","signature_type":"Function","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp","function":"NuPlayer::NuPlayerStreamListener::NuPlayerStreamListener"},"signature_version":"v1","signature_type":"Function","digest":{"function_hash":"62971634248029269408542293229664182959","length":500},"id":"ASB-A-151456667-24161624","source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","deprecated":false},{"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp"},"source":"https://android.googlesource.com/platform/frameworks/av/+/82f267012f29089c284340868de7375e77510e62","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["13497574384380726460251324515130884166","272604493749544362242506650795268532910","288141264307228506863231467794057690792","204108946973673161190656929158304247213"]},"id":"ASB-A-151456667-bd7c32a2","signature_type":"Line","deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-151456667.json"}}],"schema_version":"1.7.5"}