{"id":"ASB-A-176444622","details":"In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-176444622","CVE-2021-0510"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/hardware/interfaces/+/9191787d0e73712608eff22fca9aea9480d4691e"}],"affected":[{"package":{"name":"platform/hardware/interfaces","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-06-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2021-06-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/interfaces/+/d468101f149e30bc4ec5105555973d4ed8b4e009","target":{"file":"drm/1.0/default/CryptoPlugin.cpp"},"deprecated":false,"digest":{"line_hashes":["137378813570596590094778362080755671176","90106377484174975455564131918402057136","246524809232248934677036880304414481783","154143101464377361727192659246603798336","113084945922290690774573775275858985920","331628084900826418848421835281485859915","68990439568804655583011682940077539403","152327495164168164380241693940353026773"],"threshold":0.9},"id":"ASB-A-176444622-725c17ef","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/hardware/interfaces/+/d468101f149e30bc4ec5105555973d4ed8b4e009"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-176444622.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-06-01"}]}],"versions":["9"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-176444622-a29c37fd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/a44d24476226d92ab66e3573ed613ddc555172ff","target":{"function":"CryptoPlugin::decrypt","file":"drm/mediadrm/plugins/clearkey/hidl/CryptoPlugin.cpp"},"deprecated":false,"digest":{"function_hash":"68259926958128311778129082746027067165","length":4173}},{"deprecated":false,"digest":{"line_hashes":["224106305415867355946096070495053294470","152429897004112786606571710302394375068","134883749357658149370915030570652469906","152327495164168164380241693940353026773","179954984451917713031089792380648662350","264298949911011163485260866338663751604","182509013215656757272313039702013762214","79868785389749169529183912015347522416"],"threshold":0.9},"id":"ASB-A-176444622-ac06fda4","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/a44d24476226d92ab66e3573ed613ddc555172ff","target":{"file":"drm/mediadrm/plugins/clearkey/hidl/CryptoPlugin.cpp"}}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/a44d24476226d92ab66e3573ed613ddc555172ff"],"severity":"High","spl":"2021-06-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-176444622.json"}},{"package":{"name":"platform/hardware/interfaces","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-06-01"}]}],"versions":["9"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/hardware/interfaces/+/ff537c8516e1f8be96264d3c5db3ac084e307566"],"severity":"High","spl":"2021-06-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["137378813570596590094778362080755671176","90106377484174975455564131918402057136","246524809232248934677036880304414481783","154143101464377361727192659246603798336","113084945922290690774573775275858985920","331628084900826418848421835281485859915","68990439568804655583011682940077539403","152327495164168164380241693940353026773","326535734156762876726196237194443882500","335596279074292283518826108667747081538","75913187668697301781522012737457200670","128321274538814115532472178115114263168"],"threshold":0.9},"id":"ASB-A-176444622-49bcdb3f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/interfaces/+/ff537c8516e1f8be96264d3c5db3ac084e307566","target":{"file":"drm/1.0/default/CryptoPlugin.cpp"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-176444622.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-06-01"}]}],"versions":["10"],"ecosystem_specific":{"severity":"High","spl":"2021-06-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"drm/mediadrm/plugins/clearkey/hidl/CryptoPlugin.cpp"},"deprecated":false,"digest":{"line_hashes":["224106305415867355946096070495053294470","61914207677528524866476737762295053136","234058767390099327305618880344336618187","298101867695329982703361566339176402876","206400793694344726629374785358298641053","264298949911011163485260866338663751604","182509013215656757272313039702013762214","79868785389749169529183912015347522416"],"threshold":0.9},"id":"ASB-A-176444622-1d50cb6c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c9044cdef93c7c611118424f31448d618cc9da3"},{"deprecated":false,"digest":{"length":4176,"function_hash":"33642656514070477647385361666684744139"},"id":"ASB-A-176444622-2797e8bc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/3c9044cdef93c7c611118424f31448d618cc9da3","target":{"file":"drm/mediadrm/plugins/clearkey/hidl/CryptoPlugin.cpp","function":"CryptoPlugin::decrypt_1_2"}}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/3c9044cdef93c7c611118424f31448d618cc9da3"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-176444622.json"}},{"package":{"name":"platform/hardware/interfaces","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-06-01"}]}],"versions":["10"],"ecosystem_specific":{"severity":"High","spl":"2021-06-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/hardware/interfaces/+/a6e551feef4e5faeec9ecc6b287eeade751e7f8b","target":{"file":"drm/1.0/default/CryptoPlugin.cpp"},"deprecated":false,"digest":{"line_hashes":["137378813570596590094778362080755671176","90106377484174975455564131918402057136","246524809232248934677036880304414481783","154143101464377361727192659246603798336","113084945922290690774573775275858985920","331628084900826418848421835281485859915","68990439568804655583011682940077539403","152327495164168164380241693940353026773","326535734156762876726196237194443882500","335596279074292283518826108667747081538","75913187668697301781522012737457200670","128321274538814115532472178115114263168"],"threshold":0.9},"id":"ASB-A-176444622-df24bb4a","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/hardware/interfaces/+/a6e551feef4e5faeec9ecc6b287eeade751e7f8b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-176444622.json"}},{"package":{"name":"platform/frameworks/av","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-06-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-06-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["224106305415867355946096070495053294470","61914207677528524866476737762295053136","234058767390099327305618880344336618187","298101867695329982703361566339176402876","206400793694344726629374785358298641053","264298949911011163485260866338663751604","182509013215656757272313039702013762214","79868785389749169529183912015347522416"],"threshold":0.9},"id":"ASB-A-176444622-8e66b279","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/49c0fe413ceb2e0cef356d2738d63bb873845e04","target":{"file":"drm/mediadrm/plugins/clearkey/hidl/CryptoPlugin.cpp"}},{"id":"ASB-A-176444622-b400cf65","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/av/+/49c0fe413ceb2e0cef356d2738d63bb873845e04","target":{"file":"drm/mediadrm/plugins/clearkey/hidl/CryptoPlugin.cpp","function":"CryptoPlugin::decrypt_1_2"},"deprecated":false,"digest":{"length":4176,"function_hash":"33642656514070477647385361666684744139"}}],"fixes":["https://android.googlesource.com/platform/frameworks/av/+/49c0fe413ceb2e0cef356d2738d63bb873845e04"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-176444622.json"}},{"package":{"name":"platform/hardware/interfaces","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-06-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-06-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/hardware/interfaces/+/9191787d0e73712608eff22fca9aea9480d4691e","target":{"file":"drm/1.0/default/CryptoPlugin.cpp"},"deprecated":false,"digest":{"line_hashes":["137378813570596590094778362080755671176","90106377484174975455564131918402057136","246524809232248934677036880304414481783","154143101464377361727192659246603798336","113084945922290690774573775275858985920","331628084900826418848421835281485859915","68990439568804655583011682940077539403","152327495164168164380241693940353026773","326535734156762876726196237194443882500","335596279074292283518826108667747081538","75913187668697301781522012737457200670","128321274538814115532472178115114263168"],"threshold":0.9},"id":"ASB-A-176444622-70bab501","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/hardware/interfaces/+/9191787d0e73712608eff22fca9aea9480d4691e"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-176444622.json"}}],"schema_version":"1.9.0"}