{"id":"ASB-A-185178568","details":"In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-185178568","CVE-2021-0652"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-10-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/0c4bc631f2e09ccd0712da39b3e1a6c4eaf52a65"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12-next:0"},{"fixed":"12-next:2021-10-01"}]}],"versions":["12-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff"],"severity":"High","spl":"2021-10-01","types":["EoP","Unknown"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java","function":"VectorDrawable"},"deprecated":false,"digest":{"function_hash":"185864239362655514218475310092652484221","length":56},"id":"ASB-A-185178568-3d47b59b"},{"digest":{"function_hash":"339478319862904858376976206025907280073","length":107},"id":"ASB-A-185178568-4693525a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java","function":"VectorDrawable"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["121643977062923626745515733345286558681","281943103480604893730279812896987304739","39431095305666089737429303790417283263","184443090632241604409289305091400330787","288940757016037320418976212345001686936","9773249350786764123582494058812485469","176132001913208749900542624860763057957"],"threshold":0.9},"id":"ASB-A-185178568-c8260a92","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-185178568.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-10-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/32207ceb2fb408d06924b46919fc438477fddcf0"],"severity":"High","spl":"2021-10-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/32207ceb2fb408d06924b46919fc438477fddcf0","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"},"deprecated":false,"digest":{"line_hashes":["121643977062923626745515733345286558681","281943103480604893730279812896987304739","39431095305666089737429303790417283263","184443090632241604409289305091400330787","288940757016037320418976212345001686936","9773249350786764123582494058812485469","176132001913208749900542624860763057957"],"threshold":0.9},"id":"ASB-A-185178568-1f2538eb","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/32207ceb2fb408d06924b46919fc438477fddcf0","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java","function":"VectorDrawable"},"deprecated":false,"digest":{"length":56,"function_hash":"185864239362655514218475310092652484221"},"id":"ASB-A-185178568-3d297fe6"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/32207ceb2fb408d06924b46919fc438477fddcf0","target":{"function":"VectorDrawable","file":"graphics/java/android/graphics/drawable/VectorDrawable.java"},"deprecated":false,"digest":{"function_hash":"339478319862904858376976206025907280073","length":107},"id":"ASB-A-185178568-a6fcbd59","signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-185178568.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-10-01"}]}],"versions":["9"],"ecosystem_specific":{"severity":"High","spl":"2021-10-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/6edabc03017fdaa60e99e47fb0da2c297949b671","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"},"deprecated":false,"digest":{"line_hashes":["121643977062923626745515733345286558681","281943103480604893730279812896987304739","39431095305666089737429303790417283263","184443090632241604409289305091400330787","288940757016037320418976212345001686936","9773249350786764123582494058812485469","176132001913208749900542624860763057957"],"threshold":0.9},"id":"ASB-A-185178568-1da9baa6","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6edabc03017fdaa60e99e47fb0da2c297949b671","target":{"function":"VectorDrawable","file":"graphics/java/android/graphics/drawable/VectorDrawable.java"},"deprecated":false,"digest":{"function_hash":"185864239362655514218475310092652484221","length":56},"id":"ASB-A-185178568-968540fd","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6edabc03017fdaa60e99e47fb0da2c297949b671","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java","function":"VectorDrawable"},"deprecated":false,"digest":{"function_hash":"339478319862904858376976206025907280073","length":107},"id":"ASB-A-185178568-d0831bed","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6edabc03017fdaa60e99e47fb0da2c297949b671"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-185178568.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-10-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e9831122e6c0fad4b0ddf394c239b6cfc039f221"],"severity":"High","spl":"2021-10-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/e9831122e6c0fad4b0ddf394c239b6cfc039f221","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"},"deprecated":false,"digest":{"line_hashes":["121643977062923626745515733345286558681","281943103480604893730279812896987304739","39431095305666089737429303790417283263","184443090632241604409289305091400330787","288940757016037320418976212345001686936","9773249350786764123582494058812485469","176132001913208749900542624860763057957"],"threshold":0.9},"id":"ASB-A-185178568-41129db9","signature_type":"Line","signature_version":"v1"},{"digest":{"length":107,"function_hash":"339478319862904858376976206025907280073"},"id":"ASB-A-185178568-9486dc5e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e9831122e6c0fad4b0ddf394c239b6cfc039f221","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java","function":"VectorDrawable"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e9831122e6c0fad4b0ddf394c239b6cfc039f221","target":{"function":"VectorDrawable","file":"graphics/java/android/graphics/drawable/VectorDrawable.java"},"deprecated":false,"digest":{"function_hash":"185864239362655514218475310092652484221","length":56},"id":"ASB-A-185178568-9fbeaa9e"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-185178568.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-10-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/304f3af54526f3d80cc037e18f4cf89f1053737c","target":{"function":"VectorDrawable","file":"graphics/java/android/graphics/drawable/VectorDrawable.java"},"deprecated":false,"digest":{"length":107,"function_hash":"339478319862904858376976206025907280073"},"id":"ASB-A-185178568-67234ea7","signature_type":"Function"},{"target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java","function":"VectorDrawable"},"deprecated":false,"digest":{"function_hash":"185864239362655514218475310092652484221","length":56},"id":"ASB-A-185178568-6a3fae37","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/304f3af54526f3d80cc037e18f4cf89f1053737c"},{"deprecated":false,"digest":{"line_hashes":["121643977062923626745515733345286558681","281943103480604893730279812896987304739","39431095305666089737429303790417283263","184443090632241604409289305091400330787","288940757016037320418976212345001686936","9773249350786764123582494058812485469","176132001913208749900542624860763057957"],"threshold":0.9},"id":"ASB-A-185178568-b79c2361","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/304f3af54526f3d80cc037e18f4cf89f1053737c","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/304f3af54526f3d80cc037e18f4cf89f1053737c"],"severity":"High","spl":"2021-10-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-185178568.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-10-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","spl":"2021-10-01","types":["Unknown"],"vanir_signatures":[{"id":"ASB-A-185178568-331f2c05","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff","target":{"function":"VectorDrawable","file":"graphics/java/android/graphics/drawable/VectorDrawable.java"},"deprecated":false,"digest":{"function_hash":"339478319862904858376976206025907280073","length":107}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java","function":"VectorDrawable"},"deprecated":false,"digest":{"function_hash":"185864239362655514218475310092652484221","length":56},"id":"ASB-A-185178568-543d4746"},{"digest":{"line_hashes":["121643977062923626745515733345286558681","281943103480604893730279812896987304739","39431095305666089737429303790417283263","184443090632241604409289305091400330787","288940757016037320418976212345001686936","9773249350786764123582494058812485469","176132001913208749900542624860763057957"],"threshold":0.9},"id":"ASB-A-185178568-c74ade79","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff","target":{"file":"graphics/java/android/graphics/drawable/VectorDrawable.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/549ee05ac5458d04f8a5dab36cd3bff951e565ff"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-185178568.json"}}],"schema_version":"1.9.0"}