{"id":"ASB-A-178055795","details":"In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-178055795","CVE-2021-0511"],"modified":"2026-04-17T15:55:28.020024Z","published":"2021-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/art/+/7c7cae75a80eece7cf009ea12da644ea7c893c1d"},{"type":"FIX","url":"https://android.googlesource.com/platform/art/+/2c4ee9b7ff3a8ce17ba4e0cfd841eb2027d51619"},{"type":"FIX","url":"https://android.googlesource.com/platform/art/+/c802c3713270b363240dc48409a66c5c35601281"}],"affected":[{"package":{"name":"platform/art","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-06-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2021-06-01","severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/art/+/faf5aa5271657003fe5371ad1b02e2051821d762"],"vanir_signatures":[{"id":"ASB-A-178055795-032e4a54","digest":{"threshold":0.9,"line_hashes":["95178260811580609073631174584030749292","114600207394863519324993044620855137787","277903182790040223191656352022758274783","202609011106672864266867157709272170220","19534557538293043854725970006280641560","178852320204322548237681267715798083518"]},"source":"https://android.googlesource.com/platform/art/+/faf5aa5271657003fe5371ad1b02e2051821d762","target":{"file":"runtime/dex2oat_environment_test.h"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-3b413850","digest":{"threshold":0.9,"line_hashes":["13421431304951089023866300946747598148","170538225290461789114814540671153742138","25644904483345650728522169153337499525","300964585422484968720977966793961979483","40237016133221692470691450795652738063","63783888020605062934176388597438731521","65064634222046571851297683076730984164","336127746910105019364329731299533353694"]},"source":"https://android.googlesource.com/platform/art/+/faf5aa5271657003fe5371ad1b02e2051821d762","target":{"file":"dex2oat/dex2oat.cc"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-44998a5d","digest":{"length":2524,"function_hash":"269771033704227106190286187026286807618"},"source":"https://android.googlesource.com/platform/art/+/faf5aa5271657003fe5371ad1b02e2051821d762","target":{"file":"dex2oat/dex2oat_test.cc","function":"TEST_F"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-5dd45e60","digest":{"length":996,"function_hash":"111268461435774808039873791191293832241"},"source":"https://android.googlesource.com/platform/art/+/faf5aa5271657003fe5371ad1b02e2051821d762","target":{"file":"dex2oat/dex2oat.cc","function":"Dex2oat"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-8d8ba876","digest":{"length":5099,"function_hash":"251690474302535193911022098914431308098"},"source":"https://android.googlesource.com/platform/art/+/faf5aa5271657003fe5371ad1b02e2051821d762","target":{"file":"dex2oat/dex2oat.cc","function":"OpenFile"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-e3364dba","digest":{"threshold":0.9,"line_hashes":["241286721636719056680329883137299460795","95922851498800621865998824612599228342","131289175080625295645317613855019417605","233131238673522682363740205787539410297","215123201303509973297212733983334997016","214246228550114490415284451143614549963","155813314193338694936795656010137477060","220464426866859664994732973642781990067","49859956880049523169551180709132493392","19912453441451090608768462787758417670","24800410847746180077653343538957049085","53683203978007644359616991748592485951","110886893262740750325365652761489584523","303572301446645135641701706306706757294","135078260820846357487115246853150074193","167146826138721216897892995971899904919","338085588267880863298731767346561050536","258653292215448112131863407674360215106","289618888058954882197440463335534913405","333080654061789867460061268818582314149","264824648557519826436590576999514942736","33360838250258221513665767308650125900","236072596348453360912916595959473472351","215253116165594250965274614700593192772","265471406050575704471807959500449525036","195651291240424695019473398767449083716","321690660942107553548390205806292650140","59329883643395782176326084629205154984","259551909560435145511386412540306455655","828590095754306426240298919980726063","11070357672006919021769413224244422734","168467799113469901684680421458000008187","24938324430543821367385214251221345301","125739512192469733962436014317221970493","100834153242700124386538369265782652401","140807688876820335682671782190748883560","181715895649808295298090619290508599353","328286899160246085482488988839819956553","275478872189542895389866177803960534750","175367958082637642356580328379148961855","238093499440902616868506698199289582096","332077336292529470119064202619469971398","229907257169013604783747396756755504461","225655330594593556877322268277665040343","219833057603661926258643355688196884909","260621943452910264822971367636157959967","33519107243222588263768280475785339665","251427426925563644780043896027923719687","158928993025494706758950097548077691173","290770714051058992840217687822608793799","27773482328801345363267301887808024604","89446892191366145987736028657729953888","334071936498317917948182193601410679087","192600551664224368166809618493153164179","287568194398246352477665632720071233067","123576839788399968364016908508666903951","97854678595753135790996102260713180577","220548529417126904318878049767652911705","173204845580869072105801702404918835737","190991970016933822963822727305792730845","330317253928933234065421519869008392720","50458765384721148810891958970258345757","320519354074037272473868795264395518117","173917164255915894242161100620417172102","158054828432769014096557577684756489352","190482437122325676368899049954203372973","115185519586874616461207427528247495411","171333284149661703785860320030040806726","68076637193055184237797008673605659522","70590809433598218870619388862962746039","283354950265681196701882618257230633077","153480840486109462067683546883871648130","58910627411786145365432272621599100962","61540827382189234320877166696054813605","252325283960592902624466481737884893442","336351845885852367422487714977737894259","29951909294014565090499493678910793888","252522281713638812493818168577673457385","171472696337666042231804760606380616914","228879818349312776357144829556469726081","86028416662312877644968299259355792782","175367337775747353380657116501039904817","32305340874095010419349951845656396530","46444485668287275244552145697270959636","15270248377540136999368717328143997760","204070579518966253537973334176054396665","141469501076485116015580219957154579449","69662153684074460059897875533750769937","289815111081418606549417184210508693796","275639873648868012619339340454804174524","58494975484443663623447151996032049150","30615281071621278945868670541974162231","266969273534074074753860021340680236509","35174142623659375526412762619714251091","79365821425906659814489620348478193544","210960680159690980008918180397846008506","81067094942303035997871850519723683795","330769091842968277632573967402617101979","92805139362562953680994400987078662449","228209783620751855530221699421872311151","269070402074663115133988725964275825321","145895131126886921634995709070395607582","339028832195604926046107794781767083851","292075169782248552775848865728068428617","152828083520906126797390710087319021828","280929291093965179268326007479682887837","290163740101812671085503034234722491385","131614746437259905723728696654704868939","236873504350605653655106674577593136316","111644451646261603917356319172918821436","214850124387002008725125646378538275901","34658033575839369463278848560447742387","203810072723317040626102704873855527160","97296277634830827498144685137884597107","162762761838633302144235235551482864064","26706356462518470837728454631496619994","273270161195023116109491915760069729140","273013450710838482879656070017941678433","290930787932500629905699837281160061076","43783942879283924035461389710956633664","227324162817698080483591150863329792239","137408422425357112291643995698705400943","192680415649003525850358061263478353267","14559341045267280723339926130751162788","249732711425737243940441802801579659767","329125070667075150985987058337662536989","193946489466779481038902192717004732193","197733745601167790243108441607287559987","119457255384837341084352026659954508946"]},"source":"https://android.googlesource.com/platform/art/+/faf5aa5271657003fe5371ad1b02e2051821d762","target":{"file":"dex2oat/dex2oat_test.cc"},"signature_type":"Line","deprecated":false,"signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-178055795.json"}},{"package":{"name":"platform/art","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-06-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2021-06-01","severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/art/+/e28d339a00d679392456d8c316cf19048985b21e"],"vanir_signatures":[{"id":"ASB-A-178055795-0d393975","digest":{"threshold":0.9,"line_hashes":["241286721636719056680329883137299460795","95922851498800621865998824612599228342","131289175080625295645317613855019417605","233131238673522682363740205787539410297","215123201303509973297212733983334997016","214246228550114490415284451143614549963","155813314193338694936795656010137477060","220464426866859664994732973642781990067","54403679478622495411176872075541034170","106243288889661246940100007619694217636","24800410847746180077653343538957049085","53683203978007644359616991748592485951","110886893262740750325365652761489584523","250650240618691573195718880994914835009","53149384719185535307547590097937220361","200345846037553751382580194833602303933","38395940111813261592814197849349928258","162171542595304188155909591853042641435","114041120491684464205893674887586718341","214091128382813096729853142065235074309","33459582674539120979957540057408573506","11070357672006919021769413224244422734","168467799113469901684680421458000008187","24938324430543821367385214251221345301","125739512192469733962436014317221970493","100834153242700124386538369265782652401","140807688876820335682671782190748883560","181715895649808295298090619290508599353","328286899160246085482488988839819956553","275478872189542895389866177803960534750","175367958082637642356580328379148961855","108821872421532289648901581695157936204","134185577214864638797054647873820115256","226868166401171224498129114705875850595","33519107243222588263768280475785339665","251427426925563644780043896027923719687","158928993025494706758950097548077691173","290770714051058992840217687822608793799","27773482328801345363267301887808024604","89446892191366145987736028657729953888","334071936498317917948182193601410679087","192600551664224368166809618493153164179","269427461619365111905786224341725110281","178933303014671742376503141814530002354","60210430655458514195387303147320413581","41796050904966264419912029249127372624","124930506771621973879457648077306307128","333879170451463130466506873450459554661","165809548465220319837330657936770400980","305546972987171297929585555202773116300","113957048177257640106735801773883051581","33801753546257533555364457782825777113","309793651632613242675223726419779435144","35174142623659375526412762619714251091","79365821425906659814489620348478193544","210960680159690980008918180397846008506","81067094942303035997871850519723683795","43287484063134838038407849938913875277","150959391562886204900429384332465560562","228209783620751855530221699421872311151","269070402074663115133988725964275825321","311605392715001603363234747594094438802","215771659736443716300542363171796245719","292075169782248552775848865728068428617","152828083520906126797390710087319021828","280929291093965179268326007479682887837","290163740101812671085503034234722491385","131614746437259905723728696654704868939","236873504350605653655106674577593136316","111644451646261603917356319172918821436","214850124387002008725125646378538275901","34658033575839369463278848560447742387","203810072723317040626102704873855527160","97296277634830827498144685137884597107","162762761838633302144235235551482864064","26706356462518470837728454631496619994","273270161195023116109491915760069729140","273013450710838482879656070017941678433","290930787932500629905699837281160061076","43783942879283924035461389710956633664","227324162817698080483591150863329792239","137408422425357112291643995698705400943","192680415649003525850358061263478353267","14559341045267280723339926130751162788","249732711425737243940441802801579659767","252599295341313653838186063092063854471","193946489466779481038902192717004732193","197733745601167790243108441607287559987","119457255384837341084352026659954508946"]},"source":"https://android.googlesource.com/platform/art/+/e28d339a00d679392456d8c316cf19048985b21e","target":{"file":"dex2oat/dex2oat_test.cc"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-252bdaeb","digest":{"threshold":0.9,"line_hashes":["95178260811580609073631174584030749292","114600207394863519324993044620855137787","309906101344126570320371769001926941611","202609011106672864266867157709272170220","19534557538293043854725970006280641560","178852320204322548237681267715798083518"]},"source":"https://android.googlesource.com/platform/art/+/e28d339a00d679392456d8c316cf19048985b21e","target":{"file":"runtime/dex2oat_environment_test.h"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-283e6e28","digest":{"length":5072,"function_hash":"113793550145453704886928549541901689692"},"source":"https://android.googlesource.com/platform/art/+/e28d339a00d679392456d8c316cf19048985b21e","target":{"file":"dex2oat/dex2oat.cc","function":"OpenFile"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-50c2b213","digest":{"threshold":0.9,"line_hashes":["63791521462298871218716355066132641985","283451119868728416362457941946908194180","230287094903759335384273636438314574092","107083079455176910900163064795428886118","40237016133221692470691450795652738063","63783888020605062934176388597438731521","65064634222046571851297683076730984164","336127746910105019364329731299533353694"]},"source":"https://android.googlesource.com/platform/art/+/e28d339a00d679392456d8c316cf19048985b21e","target":{"file":"dex2oat/dex2oat.cc"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-c1880476","digest":{"length":996,"function_hash":"111268461435774808039873791191293832241"},"source":"https://android.googlesource.com/platform/art/+/e28d339a00d679392456d8c316cf19048985b21e","target":{"file":"dex2oat/dex2oat.cc","function":"Dex2oat"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-efc93730","digest":{"length":2302,"function_hash":"201029698443268787998097621954013546739"},"source":"https://android.googlesource.com/platform/art/+/e28d339a00d679392456d8c316cf19048985b21e","target":{"file":"dex2oat/dex2oat_test.cc","function":"TEST_F"},"signature_type":"Function","deprecated":false,"signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-178055795.json"}},{"package":{"name":"platform/art","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-06-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-06-01","severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/art/+/2c4ee9b7ff3a8ce17ba4e0cfd841eb2027d51619","https://android.googlesource.com/platform/art/+/c60638a44e3d0b78b704665650d58044cf0195e3","https://android.googlesource.com/platform/art/+/6c9431c02e739de83c7c804d64e4a4656d24d55f"],"vanir_signatures":[{"id":"ASB-A-178055795-03452728","digest":{"threshold":0.9,"line_hashes":["95178260811580609073631174584030749292","114600207394863519324993044620855137787","309906101344126570320371769001926941611","202609011106672864266867157709272170220","19534557538293043854725970006280641560","178852320204322548237681267715798083518"]},"source":"https://android.googlesource.com/platform/art/+/2c4ee9b7ff3a8ce17ba4e0cfd841eb2027d51619","target":{"file":"runtime/dex2oat_environment_test.h"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-1bc7bd04","digest":{"length":2302,"function_hash":"201029698443268787998097621954013546739"},"source":"https://android.googlesource.com/platform/art/+/2c4ee9b7ff3a8ce17ba4e0cfd841eb2027d51619","target":{"file":"dex2oat/dex2oat_test.cc","function":"TEST_F"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-460b1b16","digest":{"threshold":0.9,"line_hashes":["63791521462298871218716355066132641985","283451119868728416362457941946908194180","230287094903759335384273636438314574092","107083079455176910900163064795428886118","41798760986870106326714781778789459782","316900152785000680303222227295387678285","219758474527698782836775740917049366633","190883670727912493155151589763780272977"]},"source":"https://android.googlesource.com/platform/art/+/2c4ee9b7ff3a8ce17ba4e0cfd841eb2027d51619","target":{"file":"dex2oat/dex2oat.cc"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-a0a7e69c","digest":{"threshold":0.9,"line_hashes":["122557147804758949026365042730388211398","216237382923716249639185728242620380347","242882242356845109876547908773863163266","233131238673522682363740205787539410297","215123201303509973297212733983334997016","214246228550114490415284451143614549963","155813314193338694936795656010137477060","220464426866859664994732973642781990067","54403679478622495411176872075541034170","106243288889661246940100007619694217636","24800410847746180077653343538957049085","53683203978007644359616991748592485951","110886893262740750325365652761489584523","250650240618691573195718880994914835009","53149384719185535307547590097937220361","200345846037553751382580194833602303933","38395940111813261592814197849349928258","162171542595304188155909591853042641435","114041120491684464205893674887586718341","214091128382813096729853142065235074309","33459582674539120979957540057408573506","11070357672006919021769413224244422734","168467799113469901684680421458000008187","24938324430543821367385214251221345301","125739512192469733962436014317221970493","100834153242700124386538369265782652401","140807688876820335682671782190748883560","181715895649808295298090619290508599353","328286899160246085482488988839819956553","275478872189542895389866177803960534750","175367958082637642356580328379148961855","108821872421532289648901581695157936204","134185577214864638797054647873820115256","226868166401171224498129114705875850595","33519107243222588263768280475785339665","251427426925563644780043896027923719687","158928993025494706758950097548077691173","290770714051058992840217687822608793799","27773482328801345363267301887808024604","89446892191366145987736028657729953888","334071936498317917948182193601410679087","192600551664224368166809618493153164179","269427461619365111905786224341725110281","178933303014671742376503141814530002354","60210430655458514195387303147320413581","41796050904966264419912029249127372624","124930506771621973879457648077306307128","333879170451463130466506873450459554661","165809548465220319837330657936770400980","305546972987171297929585555202773116300","113957048177257640106735801773883051581","33801753546257533555364457782825777113","309793651632613242675223726419779435144","35174142623659375526412762619714251091","79365821425906659814489620348478193544","210960680159690980008918180397846008506","81067094942303035997871850519723683795","43287484063134838038407849938913875277","150959391562886204900429384332465560562","228209783620751855530221699421872311151","269070402074663115133988725964275825321","311605392715001603363234747594094438802","215771659736443716300542363171796245719","292075169782248552775848865728068428617","152828083520906126797390710087319021828","280929291093965179268326007479682887837","290163740101812671085503034234722491385","131614746437259905723728696654704868939","236873504350605653655106674577593136316","111644451646261603917356319172918821436","214850124387002008725125646378538275901","34658033575839369463278848560447742387","203810072723317040626102704873855527160","97296277634830827498144685137884597107","162762761838633302144235235551482864064","26706356462518470837728454631496619994","273270161195023116109491915760069729140","281285099319338814265582478544066656163","194096902353752751381449370817760825565","156912793131947193578418572112907473363","227324162817698080483591150863329792239","137408422425357112291643995698705400943","192680415649003525850358061263478353267","14559341045267280723339926130751162788","249732711425737243940441802801579659767","252599295341313653838186063092063854471","193946489466779481038902192717004732193","197733745601167790243108441607287559987","119457255384837341084352026659954508946"]},"source":"https://android.googlesource.com/platform/art/+/2c4ee9b7ff3a8ce17ba4e0cfd841eb2027d51619","target":{"file":"dex2oat/dex2oat_test.cc"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-d68dd7e0","digest":{"length":1031,"function_hash":"26200461490374016820165323400110241682"},"source":"https://android.googlesource.com/platform/art/+/2c4ee9b7ff3a8ce17ba4e0cfd841eb2027d51619","target":{"file":"dex2oat/dex2oat.cc","function":"Dex2oat"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-178055795-f1cedd03","digest":{"length":4963,"function_hash":"57756586504269003420386906167296589353"},"source":"https://android.googlesource.com/platform/art/+/2c4ee9b7ff3a8ce17ba4e0cfd841eb2027d51619","target":{"file":"dex2oat/dex2oat.cc","function":"OpenFile"},"signature_type":"Function","deprecated":false,"signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-178055795.json"}}],"schema_version":"1.7.5"}