{"id":"ASB-A-169256435","details":"In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-169256435","CVE-2021-0332"],"modified":"2026-04-17T15:55:28.020024Z","published":"2021-02-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-02-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/native/+/dc057e52f571ca88f037a4501bf666c9eeffde23"}],"affected":[{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-02-01"}]}],"versions":["10"],"ecosystem_specific":{"types":["EoP"],"spl":"2021-02-01","vanir_signatures":[{"signature_type":"Function","id":"ASB-A-169256435-352b2671","target":{"function":"SurfaceFlinger::bootFinished","file":"services/surfaceflinger/SurfaceFlinger.cpp"},"source":"https://android.googlesource.com/platform/frameworks/native/+/dc057e52f571ca88f037a4501bf666c9eeffde23","signature_version":"v1","digest":{"function_hash":"305175000037777847869739778323322932277","length":1302},"deprecated":false},{"signature_type":"Line","id":"ASB-A-169256435-f3eb8706","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp"},"source":"https://android.googlesource.com/platform/frameworks/native/+/dc057e52f571ca88f037a4501bf666c9eeffde23","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["24011389149821078943807545718156320274","190808661938357363388931308589393641377","210256545940930974570281423710061550655","254610781248810612464680698439676847149","231555624903078311826769743132363545515","87053123104418556050834026955086727586","307481470207585688097923592933622416189","51719515296865098835946755732248173795","338654967491784204105109142268210389493","134883258304942563273637654266962424919","274459387907060637860502247779091748837","109789547837832638820080092017773906803","44156311696236830302345846054624875006","333449159257953718318381174990636303960"]},"deprecated":false}],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/native/+/dc057e52f571ca88f037a4501bf666c9eeffde23"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-169256435.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-02-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["EoP"],"spl":"2021-02-01","vanir_signatures":[{"signature_type":"Line","id":"ASB-A-169256435-8162fee0","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp"},"source":"https://android.googlesource.com/platform/frameworks/native/+/dc057e52f571ca88f037a4501bf666c9eeffde23","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["24011389149821078943807545718156320274","190808661938357363388931308589393641377","210256545940930974570281423710061550655","254610781248810612464680698439676847149","231555624903078311826769743132363545515","87053123104418556050834026955086727586","307481470207585688097923592933622416189","51719515296865098835946755732248173795","338654967491784204105109142268210389493","134883258304942563273637654266962424919","274459387907060637860502247779091748837","109789547837832638820080092017773906803","44156311696236830302345846054624875006","333449159257953718318381174990636303960"]},"deprecated":false},{"signature_type":"Function","id":"ASB-A-169256435-9fea7099","target":{"function":"SurfaceFlinger::bootFinished","file":"services/surfaceflinger/SurfaceFlinger.cpp"},"source":"https://android.googlesource.com/platform/frameworks/native/+/dc057e52f571ca88f037a4501bf666c9eeffde23","signature_version":"v1","digest":{"function_hash":"305175000037777847869739778323322932277","length":1302},"deprecated":false}],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/native/+/dc057e52f571ca88f037a4501bf666c9eeffde23"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-169256435.json"}}],"schema_version":"1.7.5"}