{"id":"ASB-A-151643722","details":"In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-151643722","CVE-2020-0242"],"modified":"2026-04-17T15:55:28.020024Z","published":"2020-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"}],"affected":[{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-08-01"}]}],"versions":["8.0"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","id":"ASB-A-151643722-19d29303","digest":{"function_hash":"338517978009753270771075971955006194024","length":1372},"target":{"function":"NuPlayerDriver::notifyListener_l","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Line","id":"ASB-A-151643722-24dbf62c","digest":{"line_hashes":["68762050946771697909153949919300292353","115136153507478749229531670102787782968","57975181769065734848698804904215535020","94985156930797785515687696151323669870","215130344324707041168855055689814716577","149444718171788907227940664294514945932","283109304772066993894798419244945953654","75540971250215794128160525218375513470","79184933469946688309994126175862956930","284370207654256253207498251055580374605","158764811638399078070390527706018330785","132960497475179756936280411028795213029","90231484915474161111665324090744072697","171434388312040294206175305564639900192","317051119088722702455309269789605940045","230375219837531452191070182776909129162","203429538992895337513326144881183564460","167553722907564739993014628430888159571","201734540577200677347955937809129639032","84837435922442434991123958438193803019","332329815085618130380038266150578484591","231641427403628256543074046836237567694","285632608063057880088894693718025176312","72957773220694104424787652424373743582","276658915807023810039989049567380792692","310914620801247333527217062202233634882","29596156925072181809153800740039148252","326618135817771068816859199940112541631","132373818188828183485415184249574358212","162270660663605029679584607000692223331","223880047302031816845651769514361294768","135582123997148526978912225769921059129","94682963605914528154339593602898404304","294781077198013897192040493756506891373","162107980502403396874032718139266553473","213717078337946846992035212692571629749","329290485897673505570119194292763190506","85005565345317875519306389160181804954","103008366326069690208917903507325086265","291842477210511642350752805904168934404","335509452559260605908244674348832981680","312074861960969291741538384139257579035","256383471407669284505191812758180168435","16851598889783919493885661792046389938"],"threshold":0.9},"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-4c50bb38","digest":{"function_hash":"229611388859470585784565905170352380863","length":181},"target":{"function":"NuPlayerDriver::setUID","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Line","id":"ASB-A-151643722-5128925a","digest":{"line_hashes":["285693742590668977864572485398167092788","163354062488960643812532540975635500944","149807217642544446754387382624414796857","122005495037328633938150858824226178426"],"threshold":0.9},"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.h"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-64e350f8","digest":{"function_hash":"119514076358916030166398816307305096955","length":245},"target":{"function":"NuPlayerDriver::~NuPlayerDriver","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-8d5f46b9","digest":{"function_hash":"19970835269334683979683547178283901791","length":2130},"target":{"function":"NuPlayerDriver::updateMetrics","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-d0523b43","digest":{"function_hash":"284467511168557220306610799003606564379","length":257},"target":{"function":"NuPlayerDriver::getParameter","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-f63bdfc0","digest":{"function_hash":"16733455476364751386489623831865073483","length":594},"target":{"function":"NuPlayerDriver::logMetrics","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"}],"spl":"2020-08-01","types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-151643722.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-08-01"}]}],"versions":["8.1"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","id":"ASB-A-151643722-25a87e97","digest":{"function_hash":"19970835269334683979683547178283901791","length":2130},"target":{"function":"NuPlayerDriver::updateMetrics","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Line","id":"ASB-A-151643722-2c1e8557","digest":{"line_hashes":["285693742590668977864572485398167092788","163354062488960643812532540975635500944","149807217642544446754387382624414796857","122005495037328633938150858824226178426"],"threshold":0.9},"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.h"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-4ddffdf6","digest":{"function_hash":"16733455476364751386489623831865073483","length":594},"target":{"function":"NuPlayerDriver::logMetrics","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-531c5593","digest":{"function_hash":"338517978009753270771075971955006194024","length":1372},"target":{"function":"NuPlayerDriver::notifyListener_l","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Line","id":"ASB-A-151643722-5c8f8573","digest":{"line_hashes":["68762050946771697909153949919300292353","115136153507478749229531670102787782968","57975181769065734848698804904215535020","94985156930797785515687696151323669870","215130344324707041168855055689814716577","149444718171788907227940664294514945932","283109304772066993894798419244945953654","75540971250215794128160525218375513470","79184933469946688309994126175862956930","284370207654256253207498251055580374605","158764811638399078070390527706018330785","132960497475179756936280411028795213029","90231484915474161111665324090744072697","171434388312040294206175305564639900192","317051119088722702455309269789605940045","230375219837531452191070182776909129162","203429538992895337513326144881183564460","167553722907564739993014628430888159571","201734540577200677347955937809129639032","84837435922442434991123958438193803019","332329815085618130380038266150578484591","231641427403628256543074046836237567694","285632608063057880088894693718025176312","72957773220694104424787652424373743582","276658915807023810039989049567380792692","310914620801247333527217062202233634882","29596156925072181809153800740039148252","326618135817771068816859199940112541631","132373818188828183485415184249574358212","162270660663605029679584607000692223331","223880047302031816845651769514361294768","135582123997148526978912225769921059129","94682963605914528154339593602898404304","294781077198013897192040493756506891373","162107980502403396874032718139266553473","213717078337946846992035212692571629749","329290485897673505570119194292763190506","85005565345317875519306389160181804954","103008366326069690208917903507325086265","291842477210511642350752805904168934404","335509452559260605908244674348832981680","312074861960969291741538384139257579035","256383471407669284505191812758180168435","16851598889783919493885661792046389938"],"threshold":0.9},"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-8fcea04a","digest":{"function_hash":"284467511168557220306610799003606564379","length":257},"target":{"function":"NuPlayerDriver::getParameter","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-af243b15","digest":{"function_hash":"229611388859470585784565905170352380863","length":181},"target":{"function":"NuPlayerDriver::setUID","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-c46d7433","digest":{"function_hash":"119514076358916030166398816307305096955","length":245},"target":{"function":"NuPlayerDriver::~NuPlayerDriver","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"}],"spl":"2020-08-01","types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-151643722.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-08-01"}]}],"versions":["9"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","id":"ASB-A-151643722-54065af6","digest":{"function_hash":"19970835269334683979683547178283901791","length":2130},"target":{"function":"NuPlayerDriver::updateMetrics","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-542f188a","digest":{"function_hash":"16733455476364751386489623831865073483","length":594},"target":{"function":"NuPlayerDriver::logMetrics","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-66cd9084","digest":{"function_hash":"284467511168557220306610799003606564379","length":257},"target":{"function":"NuPlayerDriver::getParameter","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Line","id":"ASB-A-151643722-77c219ba","digest":{"line_hashes":["68762050946771697909153949919300292353","115136153507478749229531670102787782968","57975181769065734848698804904215535020","94985156930797785515687696151323669870","215130344324707041168855055689814716577","149444718171788907227940664294514945932","283109304772066993894798419244945953654","75540971250215794128160525218375513470","79184933469946688309994126175862956930","284370207654256253207498251055580374605","158764811638399078070390527706018330785","132960497475179756936280411028795213029","90231484915474161111665324090744072697","171434388312040294206175305564639900192","317051119088722702455309269789605940045","230375219837531452191070182776909129162","203429538992895337513326144881183564460","167553722907564739993014628430888159571","201734540577200677347955937809129639032","84837435922442434991123958438193803019","332329815085618130380038266150578484591","231641427403628256543074046836237567694","285632608063057880088894693718025176312","72957773220694104424787652424373743582","276658915807023810039989049567380792692","310914620801247333527217062202233634882","29596156925072181809153800740039148252","326618135817771068816859199940112541631","132373818188828183485415184249574358212","162270660663605029679584607000692223331","223880047302031816845651769514361294768","135582123997148526978912225769921059129","94682963605914528154339593602898404304","294781077198013897192040493756506891373","162107980502403396874032718139266553473","213717078337946846992035212692571629749","329290485897673505570119194292763190506","85005565345317875519306389160181804954","103008366326069690208917903507325086265","291842477210511642350752805904168934404","335509452559260605908244674348832981680","312074861960969291741538384139257579035","256383471407669284505191812758180168435","16851598889783919493885661792046389938"],"threshold":0.9},"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-822b6387","digest":{"function_hash":"119514076358916030166398816307305096955","length":245},"target":{"function":"NuPlayerDriver::~NuPlayerDriver","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-c946d007","digest":{"function_hash":"229611388859470585784565905170352380863","length":181},"target":{"function":"NuPlayerDriver::setUID","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-cc9c0cbd","digest":{"function_hash":"338517978009753270771075971955006194024","length":1372},"target":{"function":"NuPlayerDriver::notifyListener_l","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Line","id":"ASB-A-151643722-f8f066b3","digest":{"line_hashes":["285693742590668977864572485398167092788","163354062488960643812532540975635500944","149807217642544446754387382624414796857","122005495037328633938150858824226178426"],"threshold":0.9},"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.h"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"}],"spl":"2020-08-01","types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-151643722.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-08-01"}]}],"versions":["10"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","id":"ASB-A-151643722-130a81f3","digest":{"line_hashes":["285693742590668977864572485398167092788","163354062488960643812532540975635500944","149807217642544446754387382624414796857","122005495037328633938150858824226178426"],"threshold":0.9},"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.h"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-136ab849","digest":{"function_hash":"119514076358916030166398816307305096955","length":245},"target":{"function":"NuPlayerDriver::~NuPlayerDriver","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-4287747f","digest":{"function_hash":"284467511168557220306610799003606564379","length":257},"target":{"function":"NuPlayerDriver::getParameter","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-52509b3f","digest":{"function_hash":"229611388859470585784565905170352380863","length":181},"target":{"function":"NuPlayerDriver::setUID","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-754dfe83","digest":{"function_hash":"19970835269334683979683547178283901791","length":2130},"target":{"function":"NuPlayerDriver::updateMetrics","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Line","id":"ASB-A-151643722-953fcc12","digest":{"line_hashes":["68762050946771697909153949919300292353","115136153507478749229531670102787782968","57975181769065734848698804904215535020","94985156930797785515687696151323669870","215130344324707041168855055689814716577","149444718171788907227940664294514945932","283109304772066993894798419244945953654","75540971250215794128160525218375513470","79184933469946688309994126175862956930","284370207654256253207498251055580374605","158764811638399078070390527706018330785","132960497475179756936280411028795213029","90231484915474161111665324090744072697","171434388312040294206175305564639900192","317051119088722702455309269789605940045","230375219837531452191070182776909129162","203429538992895337513326144881183564460","167553722907564739993014628430888159571","201734540577200677347955937809129639032","84837435922442434991123958438193803019","332329815085618130380038266150578484591","231641427403628256543074046836237567694","285632608063057880088894693718025176312","72957773220694104424787652424373743582","276658915807023810039989049567380792692","310914620801247333527217062202233634882","29596156925072181809153800740039148252","326618135817771068816859199940112541631","132373818188828183485415184249574358212","162270660663605029679584607000692223331","223880047302031816845651769514361294768","135582123997148526978912225769921059129","94682963605914528154339593602898404304","294781077198013897192040493756506891373","162107980502403396874032718139266553473","213717078337946846992035212692571629749","329290485897673505570119194292763190506","85005565345317875519306389160181804954","103008366326069690208917903507325086265","291842477210511642350752805904168934404","335509452559260605908244674348832981680","312074861960969291741538384139257579035","256383471407669284505191812758180168435","16851598889783919493885661792046389938"],"threshold":0.9},"target":{"file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-f0e17282","digest":{"function_hash":"16733455476364751386489623831865073483","length":594},"target":{"function":"NuPlayerDriver::logMetrics","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"},{"signature_type":"Function","id":"ASB-A-151643722-f938dc09","digest":{"function_hash":"338517978009753270771075971955006194024","length":1372},"target":{"function":"NuPlayerDriver::notifyListener_l","file":"media/libmediaplayerservice/nuplayer/NuPlayerDriver.cpp"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"}],"spl":"2020-08-01","types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/av/+/f191963f5645f59390b640136fd928e5a492aa84"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-151643722.json"}}],"schema_version":"1.7.5"}