{"id":"ASB-A-157474195","details":"In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-157474195","CVE-2021-0337"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-02-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-02-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-02-01"}]}],"versions":["10"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"95207611329866541020810522679702160389","length":597},"id":"ASB-A-157474195-0c1041eb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba","target":{"function":"renameDocument","file":"core/java/com/android/internal/content/FileSystemProvider.java"}},{"deprecated":false,"digest":{"function_hash":"177888745711270769104500725269179465166","length":388},"id":"ASB-A-157474195-21c197f4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba","target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java","function":"deleteDocument"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba","target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java","function":"moveDocument"},"deprecated":false,"digest":{"length":552,"function_hash":"104469326549119752783813600499935556036"},"id":"ASB-A-157474195-3e7472a5"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba","target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java"},"deprecated":false,"digest":{"line_hashes":["337768421731177914852952627660101406566","160201817655052503962811299480944143267","326805259670909050863234206244251260029","166756985256022869606464148158220506442","19149938257146352426317412782251334080","304047694954246500064345687375436399951","186652238605562309358180782191173623162","313741471183135593549126092169425863949","205883396251054809150709612950476294635","208877308328643758029168981058035893429","290405506323056615402018598059130139739","58991343204514618830852163896601996662","263529015495012105749591513539264233732","269992576871638899273780706787786246227","317399817418477653900571388810832556481"],"threshold":0.9},"id":"ASB-A-157474195-6cd8ad62"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba","target":{"file":"packages/ExternalStorageProvider/src/com/android/externalstorage/ExternalStorageProvider.java"},"deprecated":false,"digest":{"line_hashes":["174315886285048729724468337538603502183","13641771033659361517556201659059900667","251762566533496679962500521846933460423","98043791869773912361626476327699343355"],"threshold":0.9},"id":"ASB-A-157474195-96dc10bd","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba"],"severity":"High","spl":"2021-02-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-157474195.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-02-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba","target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java","function":"renameDocument"},"deprecated":false,"digest":{"length":597,"function_hash":"95207611329866541020810522679702160389"},"id":"ASB-A-157474195-1b2974c5"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba","target":{"file":"packages/ExternalStorageProvider/src/com/android/externalstorage/ExternalStorageProvider.java"},"deprecated":false,"digest":{"line_hashes":["174315886285048729724468337538603502183","13641771033659361517556201659059900667","251762566533496679962500521846933460423","98043791869773912361626476327699343355"],"threshold":0.9},"id":"ASB-A-157474195-245b4ba2","signature_type":"Line"},{"target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java","function":"moveDocument"},"deprecated":false,"digest":{"length":552,"function_hash":"104469326549119752783813600499935556036"},"id":"ASB-A-157474195-c70ead19","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba"},{"digest":{"length":388,"function_hash":"177888745711270769104500725269179465166"},"id":"ASB-A-157474195-e3a70bbe","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba","target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java","function":"deleteDocument"},"deprecated":false},{"target":{"file":"core/java/com/android/internal/content/FileSystemProvider.java"},"deprecated":false,"digest":{"line_hashes":["337768421731177914852952627660101406566","160201817655052503962811299480944143267","326805259670909050863234206244251260029","166756985256022869606464148158220506442","19149938257146352426317412782251334080","304047694954246500064345687375436399951","186652238605562309358180782191173623162","313741471183135593549126092169425863949","205883396251054809150709612950476294635","208877308328643758029168981058035893429","290405506323056615402018598059130139739","58991343204514618830852163896601996662","263529015495012105749591513539264233732","269992576871638899273780706787786246227","317399817418477653900571388810832556481"],"threshold":0.9},"id":"ASB-A-157474195-f8a15fd0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5afa7645579a01b77005b8a60f3713ca3e653fba"],"severity":"High","spl":"2021-02-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-157474195.json"}}],"schema_version":"1.9.0"}