{"id":"ASB-A-183262161","details":"In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-183262161","CVE-2021-0708"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-10-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/4241ab5ee435ee3c5e6496c001b2cf5bc827cfc4"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12-next:0"},{"fixed":"12-next:2021-10-01"}]}],"versions":["12-next"],"ecosystem_specific":{"spl":"2021-10-01","types":["EoP","Unknown"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"284677995755459757779340064592353055164","length":1661},"id":"ASB-A-183262161-1507cec1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","target":{"function":"runDumpHeap","file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}},{"deprecated":false,"digest":{"function_hash":"134668538421500054805858506981720147348","length":711},"id":"ASB-A-183262161-57d9478f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"}},{"id":"ASB-A-183262161-a8c515e5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["12833090086164136600540845336993134381","82675702859199202907431363079583039106","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","35740774921100177688145547066493569913","211076223809504312418586163262711689193","132986964995661594853390182470418925904","329663651087734520370141758021984657568","4048177358164353661916530752549029547","332742073038599585200005512309888147695","219924803452240690594680570736398528571","69993180770643367642826570116597244781","198399295809620037571879488489093741398","103168210440241069599483011506180502207","130536922999538945826085481402419475541","283715542509405723649732848297490085524","44600054439809896789909941750678427509","11937542124718842406290688089144466713"]}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-10-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b"],"severity":"High","spl":"2021-10-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["105781965476234511085300441079348568065","190036311201008882940703402484923525905","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","32858827774743862361284710579865996165","110492990727362969964840435663249817325","307667212380040728714956557022997296055","283436336536500440725463462883604519064","215247704062558659403560468469336986633","214661742751434314922971544950815032381","258678531736647848147579739796935829851","68618729088540146300878686519071478942"]},"id":"ASB-A-183262161-527d8c82"},{"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"},"deprecated":false,"digest":{"function_hash":"121797594058230280719934885770811979189","length":707},"id":"ASB-A-183262161-7b98f9be","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b"},{"digest":{"function_hash":"284061722856446454669025880175422859334","length":1031},"id":"ASB-A-183262161-fb6d6b6b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6984eaa9f4a369228259047c2f797d022afb8f3b","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runDumpHeap"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-10-01"}]}],"versions":["9"],"ecosystem_specific":{"severity":"High","spl":"2021-10-01","types":["EoP"],"vanir_signatures":[{"digest":{"length":713,"function_hash":"219446689576170789916761395038483023231"},"id":"ASB-A-183262161-50db1b27","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"},"deprecated":false},{"deprecated":false,"digest":{"length":1037,"function_hash":"166861075445689166045572322354845827662"},"id":"ASB-A-183262161-77c2a119","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392","target":{"function":"runDumpHeap","file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}},{"deprecated":false,"digest":{"line_hashes":["301756864833933699389875512038653254603","190036311201008882940703402484923525905","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","35740774921100177688145547066493569913","211076223809504312418586163262711689193","132986964995661594853390182470418925904","283436336536500440725463462883604519064","215247704062558659403560468469336986633","218665152784239650828429543158831964413","198399295809620037571879488489093741398","103168210440241069599483011506180502207"],"threshold":0.9},"id":"ASB-A-183262161-db6e0d4f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4c0b9a5fbdcd06df8844affd1253a734aaa27392"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-10-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989"],"severity":"High","spl":"2021-10-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-183262161-a7c1189c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"},"deprecated":false,"digest":{"length":711,"function_hash":"134668538421500054805858506981720147348"}},{"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"deprecated":false,"digest":{"line_hashes":["301756864833933699389875512038653254603","190036311201008882940703402484923525905","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","35740774921100177688145547066493569913","211076223809504312418586163262711689193","132986964995661594853390182470418925904","53300382153044086470472265701092521828","254927741200068674398929884474873270286","332742073038599585200005512309888147695","219924803452240690594680570736398528571","69993180770643367642826570116597244781","198399295809620037571879488489093741398","103168210440241069599483011506180502207","130536922999538945826085481402419475541","283715542509405723649732848297490085524","44600054439809896789909941750678427509","11937542124718842406290688089144466713"],"threshold":0.9},"id":"ASB-A-183262161-ddfaf999","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989"},{"digest":{"function_hash":"138719729715043585607974762482160070769","length":1656},"id":"ASB-A-183262161-e3c9adde","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3555fa2f09972cb238eeeee6b0d7ed286d731989","target":{"function":"runDumpHeap","file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-10-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172","target":{"function":"runDumpHeap","file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"deprecated":false,"digest":{"function_hash":"284677995755459757779340064592353055164","length":1661},"id":"ASB-A-183262161-45282d15","signature_type":"Function"},{"target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"deprecated":false,"digest":{"line_hashes":["85538186689281181308754390048425028014","82675702859199202907431363079583039106","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","35740774921100177688145547066493569913","211076223809504312418586163262711689193","132986964995661594853390182470418925904","329663651087734520370141758021984657568","4048177358164353661916530752549029547","332742073038599585200005512309888147695","219924803452240690594680570736398528571","69993180770643367642826570116597244781","198399295809620037571879488489093741398","103168210440241069599483011506180502207","130536922999538945826085481402419475541","283715542509405723649732848297490085524","44600054439809896789909941750678427509","11937542124718842406290688089144466713"],"threshold":0.9},"id":"ASB-A-183262161-7c91fe1d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172"},{"digest":{"function_hash":"134668538421500054805858506981720147348","length":711},"id":"ASB-A-183262161-cc3d971c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/76e8e04703cb49a4984145a18f4552c4bcf72172"],"severity":"High","spl":"2021-10-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-10-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2021-10-01","types":["Unknown"],"vanir_signatures":[{"id":"ASB-A-183262161-2a5c945f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runTraceIpcStop"},"deprecated":false,"digest":{"length":711,"function_hash":"134668538421500054805858506981720147348"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["12833090086164136600540845336993134381","82675702859199202907431363079583039106","53986970093291337221256272384139676263","44410977465853094606633497537384977802","97687136630214288657633975244690662903","107945595877785328795973789333103884130","35740774921100177688145547066493569913","211076223809504312418586163262711689193","132986964995661594853390182470418925904","329663651087734520370141758021984657568","4048177358164353661916530752549029547","332742073038599585200005512309888147695","219924803452240690594680570736398528571","69993180770643367642826570116597244781","198399295809620037571879488489093741398","103168210440241069599483011506180502207","130536922999538945826085481402419475541","283715542509405723649732848297490085524","44600054439809896789909941750678427509","11937542124718842406290688089144466713"]},"id":"ASB-A-183262161-e70027ab","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2","target":{"file":"services/core/java/com/android/server/am/ActivityManagerShellCommand.java","function":"runDumpHeap"},"deprecated":false,"digest":{"length":1661,"function_hash":"284677995755459757779340064592353055164"},"id":"ASB-A-183262161-f5d959d7","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/468aeab7e726ae36f222219bb9daf1e3bec673d2"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-183262161.json"}}],"schema_version":"1.9.0"}