{"id":"ASB-A-170407229","details":"In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-170407229","CVE-2021-0303"],"modified":"2026-04-28T15:17:37.552933Z","published":"2021-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Car/+/768c8bfbe91db71e11eae2c57fb678ff2a5bf15e"}],"affected":[{"package":{"name":"platform/packages/services/Car","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-01-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-01-01","vanir_signatures":[{"signature_type":"Line","id":"ASB-A-170407229-2219ae0e","target":{"file":"computepipe/runner/graph/GrpcGraph.h"},"signature_version":"v1","digest":{"line_hashes":["149034651446994225714339430338901109799","303017522966066426508121419274081024675","127825902284716770998849616093624273684","270542647819393024699947286036225425437"],"threshold":0.9},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Car/+/768c8bfbe91db71e11eae2c57fb678ff2a5bf15e"},{"signature_type":"Line","id":"ASB-A-170407229-4703bd81","target":{"file":"computepipe/runner/graph/StreamSetObserver.cpp"},"signature_version":"v1","digest":{"line_hashes":["198007000969203456944154763932761291711","233278460311280763429806768702509240780","242321736343132880548076034681360583778","261649821002671132808691193212676781905","179999821055994617598909711599811062253","232605659286078810198664314566775403037","136021596008883875080555851564103243455","243639013444837486967567106174339511951","243913294725583533054863163876602740616","257513727361335770917118843526115911658","261649821002671132808691193212676781905","52927731441009658946324702406837992505","51213215182040076933079111548084304599","331880209193717711827003125226260512618"],"threshold":0.9},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Car/+/768c8bfbe91db71e11eae2c57fb678ff2a5bf15e"},{"signature_type":"Line","id":"ASB-A-170407229-49534a5b","target":{"file":"computepipe/runner/graph/StreamSetObserver.h"},"signature_version":"v1","digest":{"line_hashes":["14686108483290435074736450552861036318","5194399126077119717971446225245765594","322474105435136414587291573065825012860","61167545376560958259121273536453259655","86760702733378374970471321665019226463","78965180015137783044089025848615127434","228253597487838976214456325674782091032","173160551245796013574467385735708626229"],"threshold":0.9},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Car/+/768c8bfbe91db71e11eae2c57fb678ff2a5bf15e"},{"signature_type":"Function","id":"ASB-A-170407229-a6e1f2b9","target":{"function":"StreamSetObserver::reportStreamClosed","file":"computepipe/runner/graph/StreamSetObserver.cpp"},"signature_version":"v1","digest":{"length":495,"function_hash":"140770819237822934173887726050920113736"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Car/+/768c8bfbe91db71e11eae2c57fb678ff2a5bf15e"},{"signature_type":"Line","id":"ASB-A-170407229-cd91fc19","target":{"file":"computepipe/runner/graph/GrpcGraph.cpp"},"signature_version":"v1","digest":{"line_hashes":["171879069369734606005693753317037232833","264137279557660056454489603906596033092","161667849154710287324658626257242348613"],"threshold":0.9},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Car/+/768c8bfbe91db71e11eae2c57fb678ff2a5bf15e"},{"signature_type":"Function","id":"ASB-A-170407229-d30eb84a","target":{"function":"StreamSetObserver::stopObservingStreams","file":"computepipe/runner/graph/StreamSetObserver.cpp"},"signature_version":"v1","digest":{"length":474,"function_hash":"322101897216613372303853391801165898844"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Car/+/768c8bfbe91db71e11eae2c57fb678ff2a5bf15e"}],"severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/packages/services/Car/+/768c8bfbe91db71e11eae2c57fb678ff2a5bf15e"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-170407229.json"}}],"schema_version":"1.7.5"}