{"id":"ASB-A-190188264","details":"In RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-190188264","CVE-2021-0689"],"modified":"2026-09-17T16:10:43.690857626Z","published":"2021-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/external/skia/+/63656c27483416ea6483c8064d907d3102c84401"}],"affected":[{"package":{"name":"platform/external/skia","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"length":2480,"function_hash":"285395463373915393347545701890417304026"},"id":"ASB-A-190188264-18d2364b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/skia/+/a9aecd9f2c1f9a099cd215071f7eefd16716b78d","target":{"file":"src/codec/SkPngCodec.cpp","function":"AutoCleanPng::infoCallback"},"deprecated":false},{"digest":{"line_hashes":["183372306349494195711233200201906401609","335547607736632111091228371608756708370","19009387314362901367046143492276289475","265982299011217530669767913301086045165","130113877502114924679451253444039237699","338365214205985552224790986353001719399","75587140542545983769323770029755648260","134329723228639152069666605033475035357","35737381001436890795022336164807692117","80794029022840003927332240915561277619"],"threshold":0.9},"id":"ASB-A-190188264-d87e21bd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/skia/+/a9aecd9f2c1f9a099cd215071f7eefd16716b78d","target":{"file":"src/codec/SkPngCodec.cpp"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/external/skia/+/a9aecd9f2c1f9a099cd215071f7eefd16716b78d"],"severity":"High","spl":"2021-09-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-190188264.json"}},{"package":{"name":"platform/external/skia","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-09-01"}]}],"versions":["9"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/skia/+/6a2a767f72c965775fa1740bfcdc57c24488ac6a"],"severity":"High","spl":"2021-09-01","types":["ID"],"vanir_signatures":[{"target":{"function":"AutoCleanPng::infoCallback","file":"src/codec/SkPngCodec.cpp"},"deprecated":false,"digest":{"length":2892,"function_hash":"231182096711003808708792943300110672945"},"id":"ASB-A-190188264-107cb53b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/skia/+/6a2a767f72c965775fa1740bfcdc57c24488ac6a"},{"id":"ASB-A-190188264-e8321356","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/skia/+/6a2a767f72c965775fa1740bfcdc57c24488ac6a","target":{"file":"src/codec/SkPngCodec.cpp"},"deprecated":false,"digest":{"line_hashes":["10994850540922420492930445393929156302","255921365869658759796708459551026119000","67367156035029590188715067878742124319","276120219403427079990568762938266351640","134329723228639152069666605033475035357","292673673292277796286139533192802842706","25850175388776453459710090526632050636"],"threshold":0.9}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-190188264.json"}},{"package":{"name":"platform/external/skia","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-09-01"}]}],"versions":["10"],"ecosystem_specific":{"severity":"High","spl":"2021-09-01","types":["ID"],"vanir_signatures":[{"target":{"function":"AutoCleanPng::infoCallback","file":"src/codec/SkPngCodec.cpp"},"deprecated":false,"digest":{"function_hash":"182473588981492821971434054563942896719","length":2775},"id":"ASB-A-190188264-0079802e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/skia/+/f6de97fce5c06b0388d278f63179d7282c136e2e"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/skia/+/f6de97fce5c06b0388d278f63179d7282c136e2e","target":{"file":"src/codec/SkPngCodec.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["296164426771448767332794563870631957363","214802071101549081086748596673695376295","195191014024978020949360166116147171196","102281431097298178247267434048113930391","31880433092381863557589344417693260984","154609196070311678013871019635961844850","292060001566329102689319086667241910242","59358462761040295415055082760931036899","255921365869658759796708459551026119000","67367156035029590188715067878742124319","276120219403427079990568762938266351640","156273438097299005783040256352212825291","215376580948269150805891928936305255299","326564530949482491645081094487191766888","44893127217249116336724495894078550729","239799770277090836066355796810986406786","116214531548337953171757164617868497614","327439198515478220226181053636193154079"]},"id":"ASB-A-190188264-eb946bec","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/external/skia/+/f6de97fce5c06b0388d278f63179d7282c136e2e"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-190188264.json"}},{"package":{"name":"platform/external/skia","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-09-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-09-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/external/skia/+/f6de97fce5c06b0388d278f63179d7282c136e2e","target":{"file":"src/codec/SkPngCodec.cpp"},"deprecated":false,"digest":{"line_hashes":["296164426771448767332794563870631957363","214802071101549081086748596673695376295","195191014024978020949360166116147171196","102281431097298178247267434048113930391","31880433092381863557589344417693260984","154609196070311678013871019635961844850","292060001566329102689319086667241910242","59358462761040295415055082760931036899","255921365869658759796708459551026119000","67367156035029590188715067878742124319","276120219403427079990568762938266351640","156273438097299005783040256352212825291","215376580948269150805891928936305255299","326564530949482491645081094487191766888","44893127217249116336724495894078550729","239799770277090836066355796810986406786","116214531548337953171757164617868497614","327439198515478220226181053636193154079"],"threshold":0.9},"id":"ASB-A-190188264-185dc744","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/external/skia/+/f6de97fce5c06b0388d278f63179d7282c136e2e","target":{"function":"AutoCleanPng::infoCallback","file":"src/codec/SkPngCodec.cpp"},"deprecated":false,"digest":{"function_hash":"182473588981492821971434054563942896719","length":2775},"id":"ASB-A-190188264-6af31f75","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/external/skia/+/f6de97fce5c06b0388d278f63179d7282c136e2e"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-190188264.json"}}],"schema_version":"1.9.0"}