{"id":"ASB-A-173791720","details":"In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-173791720","CVE-2021-0482"],"modified":"2026-04-17T15:55:28.020024Z","published":"2021-05-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-05-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/av/+/57d90982aa7a18a8c76c8dcc418c8da51a71aa9d"}],"affected":[{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-05-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["31720975925371240062096962052173993532","32890642582790990401923168691713557679","193205213437368109749021548128736062943","291095870346864351525038385758693296440","101800555834483060078922478256255672403","53857638293026492631586814022719749582","108077987798667861763436399720858649243","9680066337789697969397751176713189604","51735360889714806237317608628319082383","336371214607740558140805486650704358189","172887182482113472360488374289864876334","297970688711824588001664852039962223815","284971779020009294491005523693180868253","244532554672678047083455290050022905178","6835333318025838598805636986210187962","248919439583777541603689600075566970616","85973394935136365577603272088800369827","310434769550580136398104748284764588653","126387952158582908508781902712900972522","27576804663472073380290529978259404365"]},"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/d11e1606e3183c97771ce46ea213a9d71223c45f","target":{"file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Line","id":"ASB-A-173791720-279bf9a0","signature_version":"v1"},{"digest":{"function_hash":"62906351011521272114789696718489729566","length":358},"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/d11e1606e3183c97771ce46ea213a9d71223c45f","target":{"function":"MediaCodec::ResourceManagerServiceProxy::init","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-173791720-51ad4a44","signature_version":"v1"},{"digest":{"function_hash":"199634622738700981948097317946204406748","length":197},"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/d11e1606e3183c97771ce46ea213a9d71223c45f","target":{"function":"MediaCodec::ResourceManagerServiceProxy::~ResourceManagerServiceProxy","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-173791720-54988edb","signature_version":"v1"},{"digest":{"function_hash":"195702878043464915354362868006007168623","length":141},"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/av/+/d11e1606e3183c97771ce46ea213a9d71223c45f","target":{"function":"MediaCodec::ResourceManagerServiceProxy::BinderDiedCallback","file":"media/libstagefright/MediaCodec.cpp"},"signature_type":"Function","id":"ASB-A-173791720-61024d0d","signature_version":"v1"}],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/av/+/d11e1606e3183c97771ce46ea213a9d71223c45f"],"types":["EoP"],"spl":"2021-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-173791720.json"}}],"schema_version":"1.7.5"}