{"id":"ASB-A-170212632","details":"In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-170212632","CVE-2021-0310"],"modified":"2026-04-22T14:59:17.843400Z","published":"2021-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/native/+/dc6cb05ebe2cefdce215d797a8e418ba26c8c86c"}],"affected":[{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-01-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["EoP"],"severity":"High","vanir_signatures":[{"id":"ASB-A-170212632-36cf706f","source":"https://android.googlesource.com/platform/frameworks/native/+/dc6cb05ebe2cefdce215d797a8e418ba26c8c86c","signature_type":"Function","signature_version":"v1","digest":{"length":129,"function_hash":"11837082547475677884209568133950236196"},"deprecated":false,"target":{"function":"ClientCounterCallback::forcePersist","file":"libs/binder/LazyServiceRegistrar.cpp"}},{"id":"ASB-A-170212632-4a5303fc","source":"https://android.googlesource.com/platform/frameworks/native/+/dc6cb05ebe2cefdce215d797a8e418ba26c8c86c","signature_type":"Function","signature_version":"v1","digest":{"length":825,"function_hash":"290648631386539840945849818482796118009"},"deprecated":false,"target":{"function":"ClientCounterCallback::registerService","file":"libs/binder/LazyServiceRegistrar.cpp"}},{"id":"ASB-A-170212632-5c6c442c","source":"https://android.googlesource.com/platform/frameworks/native/+/dc6cb05ebe2cefdce215d797a8e418ba26c8c86c","signature_type":"Line","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["273587440020132394551717509177102098292","118649271454645108918194347816797516516","60652214434420690929947116771932856649","176160748899813461103740475772807580271","207177581811711365039551266837370419405","46404827100799793697682655318037562713","307974972386696463500930767116791240657","174522796799402902291425313229634861793","16159322485704712292833981554549201089","45078968673492922097365397440224884302","331585062677449616910547332232224022411","196059623757699306660269847147050337166","20808678094597736096050845836007362697","49602335974835420464484986010633345017","32120147516303671230856763101019480394","53755956152706314058068673531028725171","8685726680975852767446720799669007713","2860296919848840076694380839946969228","58850785664355796967004366983701766332","225052934039848611721039256763042973470","116279839078549042673514120279843062934","203621807291916840204335740919959693573","46476042241032252117503407074423553123","315337517061447713345640992435767124712","36286016301228776485534193380553700340","261930145311988904532153410527458109415","131221462193476368395504752487973033742","108587633537507210242609878158511307392","21561605024418196760161681604929840141","48599417794759984776483785340188047779"]},"deprecated":false,"target":{"file":"libs/binder/LazyServiceRegistrar.cpp"}},{"id":"ASB-A-170212632-ab8aa34e","source":"https://android.googlesource.com/platform/frameworks/native/+/dc6cb05ebe2cefdce215d797a8e418ba26c8c86c","signature_type":"Function","signature_version":"v1","digest":{"length":438,"function_hash":"43248824239700235851614281142215946118"},"deprecated":false,"target":{"function":"ClientCounterCallback::onClients","file":"libs/binder/LazyServiceRegistrar.cpp"}},{"id":"ASB-A-170212632-bc02ec99","source":"https://android.googlesource.com/platform/frameworks/native/+/dc6cb05ebe2cefdce215d797a8e418ba26c8c86c","signature_type":"Function","signature_version":"v1","digest":{"length":1115,"function_hash":"75160528859637791868650932159065793636"},"deprecated":false,"target":{"function":"ClientCounterCallback::tryShutdown","file":"libs/binder/LazyServiceRegistrar.cpp"}}],"fixes":["https://android.googlesource.com/platform/frameworks/native/+/dc6cb05ebe2cefdce215d797a8e418ba26c8c86c"],"spl":"2021-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170212632.json"}}],"schema_version":"1.7.5"}