{"id":"ASB-A-183262161","details":"In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-183262161","CVE-2021-0708"],"modified":"2026-07-10T15:26:01.587957612Z","published":"2021-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-10-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/4241ab5ee435ee3c5e6496c001b2cf5bc827cfc4"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12-next:0"},{"fixed":"12-next:2021-10-01"}]}],"versions":["12-next"],"ecosystem_specific":{"spl":"2021-10-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2"],"severity":"High","vanir_signatures":[{"signature_type":"Function","id":"ASB-A-183262161-1507cec1","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","signature_version":"v1","digest":{"length":1661,"function_hash":"284677995755459757779340064592353055164"},"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runDumpHeap"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","signature_version":"v1","deprecated":false,"id":"ASB-A-183262161-57d9478f","signature_type":"Function","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"},"digest":{"length":711,"function_hash":"134668538421500054805858506981720147348"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","signature_version":"v1","deprecated":false,"id":"ASB-A-183262161-a8c515e5","signature_type":"Line","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"digest":{"threshold":0.9,"line_hashes":["12833090086164136600540845336993134381","82675702859199202907431363079583039106","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","35740774921100177688145547066493569913","211076223809504312418586163262711689193","132986964995661594853390182470418925904","329663651087734520370141758021984657568","4048177358164353661916530752549029547","332742073038599585200005512309888147695","219924803452240690594680570736398528571","69993180770643367642826570116597244781","198399295809620037571879488489093741398","103168210440241069599483011506180502207","130536922999538945826085481402419475541","283715542509405723649732848297490085524","44600054439809896789909941750678427509","11937542124718842406290688089144466713"]}}],"types":["EoP","Unknown"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-10-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2021-10-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b"],"severity":"High","vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b","signature_version":"v1","deprecated":false,"id":"ASB-A-183262161-527d8c82","signature_type":"Line","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"digest":{"threshold":0.9,"line_hashes":["105781965476234511085300441079348568065","190036311201008882940703402484923525905","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","32858827774743862361284710579865996165","110492990727362969964840435663249817325","307667212380040728714956557022997296055","283436336536500440725463462883604519064","215247704062558659403560468469336986633","214661742751434314922971544950815032381","258678531736647848147579739796935829851","68618729088540146300878686519071478942"]}},{"signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-183262161-7b98f9be","source":"https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b","digest":{"length":707,"function_hash":"121797594058230280719934885770811979189"},"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b","signature_version":"v1","deprecated":false,"id":"ASB-A-183262161-fb6d6b6b","digest":{"length":1031,"function_hash":"284061722856446454669025880175422859334"},"signature_type":"Function","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runDumpHeap"}}],"types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-10-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2021-10-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392"],"severity":"High","vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392","deprecated":false,"signature_type":"Function","id":"ASB-A-183262161-50db1b27","digest":{"length":713,"function_hash":"219446689576170789916761395038483023231"},"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"}},{"id":"ASB-A-183262161-77c2a119","source":"https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392","deprecated":false,"signature_version":"v1","signature_type":"Function","digest":{"length":1037,"function_hash":"166861075445689166045572322354845827662"},"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runDumpHeap"}},{"signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-183262161-db6e0d4f","source":"https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392","digest":{"threshold":0.9,"line_hashes":["301756864833933699389875512038653254603","190036311201008882940703402484923525905","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","35740774921100177688145547066493569913","211076223809504312418586163262711689193","132986964995661594853390182470418925904","283436336536500440725463462883604519064","215247704062558659403560468469336986633","218665152784239650828429543158831964413","198399295809620037571879488489093741398","103168210440241069599483011506180502207"]},"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}}],"types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-10-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2021-10-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989"],"types":["EoP"],"severity":"High","vanir_signatures":[{"signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-183262161-a7c1189c","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"},"source":"https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989","digest":{"length":711,"function_hash":"134668538421500054805858506981720147348"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989","signature_version":"v1","deprecated":false,"id":"ASB-A-183262161-ddfaf999","signature_type":"Line","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"digest":{"threshold":0.9,"line_hashes":["301756864833933699389875512038653254603","190036311201008882940703402484923525905","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","35740774921100177688145547066493569913","211076223809504312418586163262711689193","132986964995661594853390182470418925904","53300382153044086470472265701092521828","254927741200068674398929884474873270286","332742073038599585200005512309888147695","219924803452240690594680570736398528571","69993180770643367642826570116597244781","198399295809620037571879488489093741398","103168210440241069599483011506180502207","130536922999538945826085481402419475541","283715542509405723649732848297490085524","44600054439809896789909941750678427509","11937542124718842406290688089144466713"]}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989","signature_version":"v1","deprecated":false,"id":"ASB-A-183262161-e3c9adde","digest":{"length":1656,"function_hash":"138719729715043585607974762482160070769"},"signature_type":"Function","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runDumpHeap"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-10-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-10-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172","deprecated":false,"signature_type":"Function","id":"ASB-A-183262161-45282d15","digest":{"length":1661,"function_hash":"284677995755459757779340064592353055164"},"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runDumpHeap"}},{"signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-183262161-7c91fe1d","source":"https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172","digest":{"threshold":0.9,"line_hashes":["85538186689281181308754390048425028014","82675702859199202907431363079583039106","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","35740774921100177688145547066493569913","211076223809504312418586163262711689193","132986964995661594853390182470418925904","329663651087734520370141758021984657568","4048177358164353661916530752549029547","332742073038599585200005512309888147695","219924803452240690594680570736398528571","69993180770643367642826570116597244781","198399295809620037571879488489093741398","103168210440241069599483011506180502207","130536922999538945826085481402419475541","283715542509405723649732848297490085524","44600054439809896789909941750678427509","11937542124718842406290688089144466713"]},"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}},{"signature_type":"Function","id":"ASB-A-183262161-cc3d971c","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172","signature_version":"v1","digest":{"length":711,"function_hash":"134668538421500054805858506981720147348"},"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"}}],"types":["EoP"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-10-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2021-10-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2"],"severity":"High","vanir_signatures":[{"id":"ASB-A-183262161-2a5c945f","source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","deprecated":false,"signature_version":"v1","signature_type":"Function","digest":{"length":711,"function_hash":"134668538421500054805858506981720147348"},"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"}},{"signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-183262161-e70027ab","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","digest":{"threshold":0.9,"line_hashes":["12833090086164136600540845336993134381","82675702859199202907431363079583039106","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","35740774921100177688145547066493569913","211076223809504312418586163262711689193","132986964995661594853390182470418925904","329663651087734520370141758021984657568","4048177358164353661916530752549029547","332742073038599585200005512309888147695","219924803452240690594680570736398528571","69993180770643367642826570116597244781","198399295809620037571879488489093741398","103168210440241069599483011506180502207","130536922999538945826085481402419475541","283715542509405723649732848297490085524","44600054439809896789909941750678427509","11937542124718842406290688089144466713"]}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","deprecated":false,"signature_type":"Function","id":"ASB-A-183262161-f5d959d7","digest":{"length":1661,"function_hash":"284677995755459757779340064592353055164"},"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runDumpHeap"}}],"types":["Unknown"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}}],"schema_version":"1.7.5"}