{"id":"ASB-A-168041375","details":"In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-168041375","CVE-2021-0393"],"modified":"2026-09-11T15:42:03.104094163Z","published":"2021-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/external/v8/+/a91d71434065cde21f480f5d92432b9a4f2f3521"}],"affected":[{"package":{"name":"platform/external/v8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-03-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"],"severity":"High","spl":"2021-03-01","types":["RCE"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"68822387662674219214143339273819682585","length":208},"id":"ASB-A-168041375-843607a1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.cc","function":"Scanner::LiteralBuffer::NewCapacity"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["73683958680049165979211975693756119657","293702464388042483207081733306300778561","27499702901675275339500606292842084744","69653428789069823003850071469509633883","62401931847356790151334193350899237744","83262765221408912722797352828837182075","11539691986864327304760663783673283536","97914080865086127195577975637918366544","126347256774539215083706433821688648133"]},"id":"ASB-A-168041375-ba569632","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.cc","function":"Scanner::LiteralBuffer::ExpandBuffer"},"deprecated":false,"digest":{"length":284,"function_hash":"263161746382587322104995451145678285804"},"id":"ASB-A-168041375-cc7cfbac"},{"source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.h"},"deprecated":false,"digest":{"line_hashes":["163453483867054060793111605789220474888","178250785529873274907737298438474862140","45413672410275256888003104757266731438","94670482747576076161544072988419009821","199794052845645696193322984297550599065"],"threshold":0.9},"id":"ASB-A-168041375-dbbbc1c6","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-168041375.json"}},{"package":{"name":"platform/external/v8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-03-01"}]}],"versions":["9"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"],"severity":"High","spl":"2021-03-01","types":["RCE"],"vanir_signatures":[{"digest":{"line_hashes":["73683958680049165979211975693756119657","293702464388042483207081733306300778561","27499702901675275339500606292842084744","69653428789069823003850071469509633883","62401931847356790151334193350899237744","83262765221408912722797352828837182075","11539691986864327304760663783673283536","97914080865086127195577975637918366544","126347256774539215083706433821688648133"],"threshold":0.9},"id":"ASB-A-168041375-7a53ec14","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.cc"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["163453483867054060793111605789220474888","178250785529873274907737298438474862140","45413672410275256888003104757266731438","94670482747576076161544072988419009821","199794052845645696193322984297550599065"]},"id":"ASB-A-168041375-a170d11e","signature_type":"Line"},{"target":{"function":"Scanner::LiteralBuffer::ExpandBuffer","file":"src/parsing/scanner.cc"},"deprecated":false,"digest":{"length":284,"function_hash":"263161746382587322104995451145678285804"},"id":"ASB-A-168041375-b8d02f37","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"function":"Scanner::LiteralBuffer::NewCapacity","file":"src/parsing/scanner.cc"},"deprecated":false,"digest":{"function_hash":"68822387662674219214143339273819682585","length":208},"id":"ASB-A-168041375-d70c2594","signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-168041375.json"}},{"package":{"name":"platform/external/v8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-03-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2021-03-01","types":["RCE"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"263161746382587322104995451145678285804","length":284},"id":"ASB-A-168041375-2175becd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.cc","function":"Scanner::LiteralBuffer::ExpandBuffer"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.cc"},"deprecated":false,"digest":{"line_hashes":["73683958680049165979211975693756119657","293702464388042483207081733306300778561","27499702901675275339500606292842084744","69653428789069823003850071469509633883","62401931847356790151334193350899237744","83262765221408912722797352828837182075","11539691986864327304760663783673283536","97914080865086127195577975637918366544","126347256774539215083706433821688648133"],"threshold":0.9},"id":"ASB-A-168041375-97a95c49","signature_type":"Line"},{"target":{"function":"Scanner::LiteralBuffer::NewCapacity","file":"src/parsing/scanner.cc"},"deprecated":false,"digest":{"function_hash":"68822387662674219214143339273819682585","length":208},"id":"ASB-A-168041375-e4c66711","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"},{"digest":{"line_hashes":["163453483867054060793111605789220474888","178250785529873274907737298438474862140","45413672410275256888003104757266731438","94670482747576076161544072988419009821","199794052845645696193322984297550599065"],"threshold":0.9},"id":"ASB-A-168041375-ef368fcb","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.h"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-168041375.json"}},{"package":{"name":"platform/external/v8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-03-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","spl":"2021-03-01","types":["RCE"],"vanir_signatures":[{"target":{"file":"src/parsing/scanner.h"},"deprecated":false,"digest":{"line_hashes":["163453483867054060793111605789220474888","178250785529873274907737298438474862140","45413672410275256888003104757266731438","94670482747576076161544072988419009821","199794052845645696193322984297550599065"],"threshold":0.9},"id":"ASB-A-168041375-41e6eacf","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"},{"digest":{"length":284,"function_hash":"263161746382587322104995451145678285804"},"id":"ASB-A-168041375-7be0c4cd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.cc","function":"Scanner::LiteralBuffer::ExpandBuffer"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"68822387662674219214143339273819682585","length":208},"id":"ASB-A-168041375-987fa78f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.cc","function":"Scanner::LiteralBuffer::NewCapacity"}},{"id":"ASB-A-168041375-bfa7069b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee","target":{"file":"src/parsing/scanner.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["73683958680049165979211975693756119657","293702464388042483207081733306300778561","27499702901675275339500606292842084744","69653428789069823003850071469509633883","62401931847356790151334193350899237744","83262765221408912722797352828837182075","11539691986864327304760663783673283536","97914080865086127195577975637918366544","126347256774539215083706433821688648133"]}}],"fixes":["https://android.googlesource.com/platform/external/v8/+/05cbe2825f00470860200896b20960b66e2549ee"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-168041375.json"}}],"schema_version":"1.9.0"}