{"id":"ASB-A-248031255","details":"In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-248031255","CVE-2023-21094"],"modified":"2026-05-27T15:53:17.428190120Z","published":"2023-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/native/+/c710617ac6489a7f518c5138a78059a99f98e38d"}],"affected":[{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-04-01"}]}],"versions":["13-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e"],"vanir_signatures":[{"id":"ASB-A-248031255-030c1f5b","deprecated":false,"target":{"file":"libs/gui/LayerState.cpp"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["328884004822847517433513020617332187746","146914621623940310694676717643006474896","184883612208022720824473896991624352085"]}},{"id":"ASB-A-248031255-0bdacad9","target":{"file":"libs/nativedisplay/ADisplay.cpp"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_version":"v1","match_only_versions":["13-next"],"digest":{"threshold":0.9,"line_hashes":["8802101597798421580666011583014342300","45584811109840637596614130383706219778","303962698465956490477896226456675360749","280862145906525109579809333332056297127","179744147913173118635965429771483925421","186652070651073680461803001081100824502","97347899416673944203264596006214868199","103566936121336476540479083642897065193","265677616393901683639522016238439750010","199275655688171216233939458119483418484","12149890270783932562381583299387071242","88491050033983520102838239104572897769","251910545622945555711820606388390583933","311090809020237341934002264557785210823","43379731978685431891094662253159318250","148544080595842663543065356224737453702","186390330337385040575387760840907666258","254116926784039576592604866818769218643","285280058981793659720561421128495344693","98844469974545726275222493293784646636","89518961199280401471309410873580331379","154379668410171142966260722628309225235","150227417491323488462127670578316706467","288510087579006581887227463478383560395","11778919787324084801088423999770408113","285053846790116616444633400133478461552","64666373247684474477728966714155056233","242557069872506965913381481942634581504","169664355900139033237658379028353715653"]},"deprecated":false,"signature_type":"Line"},{"id":"ASB-A-248031255-0c2f98cf","target":{"file":"libs/nativedisplay/ADisplay.cpp","function":"ADisplay_acquirePhysicalDisplays"},"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"length":2294,"function_hash":"50013265630095781685555243827976449996"}},{"id":"ASB-A-248031255-1192dbda","target":{"file":"libs/gui/SurfaceComposerClient.cpp"},"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["109944620134236606010295949254670706280","42919189571133376585927729385662960942","30885418563766835748018450692769023753","76552818091796601987811047288954978170","110732025291846635483830822075527277971","276087947989013732448314891959750410496","87723042306448800302044299223902992573","271496275471904210646144815113826584151","71964343988881662566596464776802752107","283235800291880948261129657081430954535","41821180396758028839087183020874272199","272771422245558360332492608169201148946","315462065973815566285485401199391122261","61408668616873626239604542670961633919","292584651963736858892897840776269607244","118509196671957981718002140411037660465","93535556495795973694933924092654100937","176754564348677522286233166101150812077","203352222267620494271315738863532112580","152041623791175764853577203651016399431","61061915564799210009962350161489217512","172380890908514639197681880202508363748","33621661588933862073277924337519123420","140929573055877768714254207113583348839","283343123189714365767831579464533744228","76300734608802022893576114788457104962","94895125902724343862678978123541409717","295437529879804764410257410456042832127","41298295346853775620080296459883151471","487493255795905130575695296725718873","58163734965954952693531552743375986945","240539103498200985029711034538500232097","60044591755793101111344821300810424114","88958765992309027344669137212615225133","189550636886189116604664559236154762782","187695153093255514219281024841037125237","98031333052346323138937793426416878385","127488343516731780801048630861699073383","244731555867105062173692489210800259957","328345382943576073150812717318634940166","66439976799643576389368832915868842710","259933420528031782652399126178543978406","14267243515759183080763796597363572321","300777542210638288646151279742676166684","308601344764555663230589480703064010911","98982904296329019157453616644358543170","162214916823509015102750420096192300960","295491239141746260052781895609021738438","149102608087933802862877295840493461847","127054940915166752967410502311319747715","137053931557754340901505669179202714233","213754794839836318036708198688348011170","192085294034823319665267739520118248277","34895818949025747572895216231076438527","326147903351046373521580540775135710567","289591026492737636916112747506977608868","50293713025158529085801118773152486655","182772344982114272921339366531448710249","80939792475083413324059412039772675920","282206265490061911846769679228711069682"]}},{"id":"ASB-A-248031255-12522aaa","signature_type":"Function","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceComposerAIDL::getStaticDisplayInfo"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"length":1687,"function_hash":"98273288080596444444556142017326209329"}},{"id":"ASB-A-248031255-177fccd1","signature_type":"Function","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::getStaticDisplayInfo"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"length":1023,"function_hash":"36065873446319606963444451757932601067"}},{"id":"ASB-A-248031255-2457f4d0","target":{"file":"libs/nativedisplay/ADisplay.cpp","function":"getToken"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_version":"v1","match_only_versions":["13-next"],"digest":{"length":163,"function_hash":"45445115589430617583526327361114569580"},"deprecated":false,"signature_type":"Function"},{"id":"ASB-A-248031255-25cbd7cd","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceComposerAIDL::getDynamicDisplayInfo"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Function","digest":{"length":2276,"function_hash":"252567541273346294214883436886274570132"}},{"id":"ASB-A-248031255-3084294d","deprecated":false,"target":{"file":"services/surfaceflinger/fuzzer/surfaceflinger_fuzzers_utils.h","function":"fuzzBoot"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Function","digest":{"length":1115,"function_hash":"254295629132661821606563006538530954256"}},{"id":"ASB-A-248031255-44369dee","deprecated":false,"target":{"file":"services/surfaceflinger/tests/Credentials_test.cpp","function":"TEST_F"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Function","digest":{"length":166,"function_hash":"32221156968282663955610838221142294289"}},{"id":"ASB-A-248031255-5c9e52a6","signature_type":"Line","signature_version":"v1","target":{"file":"services/surfaceflinger/fuzzer/surfaceflinger_fuzzers_utils.h"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["215625600489160925593154059430955671600","295386083042065479217302608428480848830","280349942613516364515230345636808308944","13416651290697051870341835335954659464","198718239023540821321384789504080305031","157451887192142898647544206842144709395","319272522552822191112052427463115879235","188627647544103973560627597263942336772","333841396135937028543625859463451209942","37671821019618602374905240488148038830","104296283226008532898470777060499217298","115516683578296146429933379925657398048","225106571867500012435074370770704642912","20936744780453765792686206488217928893","240983898245029079720997745074448655142","194531819035272091097939224878126159576","261718761405316113286310380940664078079","303935849069961192795484466746211933653","83080918906745615710289492538780335417","134788091061619614987064678150288721013","250749322232293345032744987129933513957","336658069474923417828250349909736226725","77675487052056941112400981406583255692","330757659157604170108939626089166829940","290297083507955067551992770244426810611","141228188202137006537465578372720233265","186334448470410307252824599466335298902"]}},{"id":"ASB-A-248031255-5f497c27","deprecated":false,"target":{"file":"services/surfaceflinger/tests/Credentials_test.cpp","function":"TEST_F"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Function","digest":{"length":292,"function_hash":"286915471981234264626254421910339413701"}},{"id":"ASB-A-248031255-63497120","deprecated":false,"target":{"file":"services/surfaceflinger/tests/unittests/TestableSurfaceFlinger.h"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["178899900013559385176450025200879065547","50964426107145070968960235420485900275","138381343825479107303963707900672583216","219992278717503876215787462989829606182","2490379587852567979625253058479411467","137585239410778562754313445520928168298"]}},{"id":"ASB-A-248031255-672fa6d7","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.h"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["169308381641408031981727974264572262839","309773076469722216419799187321143483215","181571217560258711530780138979345506951","174127456434672753601131409396874539739","120621436523681382270253185330763186049","65677166115426714989079968127868722629","25526980894820825567100404742670009648","274842523585586622888660888364709332717","179946488007622465281312798355739446960","38503552837727220244631948882097311283","162534124047051089521396977817638548530","86104623846039372395782717114163508576","34128032666080559154730552530238094459","194904913670175166258997482709911997327","117092130611795256652838215084308282114","102072768122471948202850881983374325943","205016232965529405168302650903507158848","17774401942544673355968318365304733053","89231259199993100437844689253873728716","321130669018148413657306997568165374734","85879084176720952807681789453880148808","59036340471206275906284325798068460320"]}},{"id":"ASB-A-248031255-68482fd6","deprecated":false,"target":{"file":"services/surfaceflinger/fuzzer/surfaceflinger_fuzzers_utils.h","function":"fuzzSurfaceFlinger"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Function","digest":{"length":1939,"function_hash":"177006426984895845842893386388811926161"}},{"id":"ASB-A-248031255-6e068e82","signature_version":"v1","signature_type":"Function","target":{"file":"libs/gui/SurfaceComposerClient.cpp","function":"SurfaceComposerClient::getDynamicDisplayInfo"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"length":2223,"function_hash":"167696188942279664108238047433774961425"}},{"id":"ASB-A-248031255-7c819ab2","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceComposerAIDL::getPhysicalDisplayToken"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_version":"v1","match_only_versions":["13-next"],"digest":{"length":272,"function_hash":"134097227557000324409777334063336323649"},"signature_type":"Function","deprecated":false},{"id":"ASB-A-248031255-84e92b82","deprecated":false,"target":{"file":"libs/gui/SurfaceComposerClient.cpp","function":"SurfaceComposerClient::getStaticDisplayInfo"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Function","digest":{"length":1773,"function_hash":"9772973172312192174406462367666656078"}},{"id":"ASB-A-248031255-8d26ec1d","signature_version":"v1","signature_type":"Function","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::getDynamicDisplayInfo"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"length":2774,"function_hash":"179158769854169655174144763115541692576"}},{"id":"ASB-A-248031255-9146fd62","signature_type":"Line","target":{"file":"libs/gui/tests/Surface_test.cpp"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["99808465455616328717627835102705473185","105770171844722238091232382718851183355","191294950149381581447865345171432771815","75899383763759855962843534883608172929","186667380948004096776372793418337017074","163077217539335384491420827617566073121","268971802351131896527696628607318360138","72682807654536506649708816407554609903","119156656291837606065158544361635323942"]}},{"id":"ASB-A-248031255-990f7ece","signature_version":"v1","signature_type":"Function","target":{"file":"services/surfaceflinger/tests/DisplayConfigs_test.cpp","function":"TEST_F"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"length":900,"function_hash":"231348490827447721502611613472983256889"}},{"id":"ASB-A-248031255-9ee08be0","target":{"file":"libs/nativedisplay/ADisplay.cpp","function":"ADisplay_getCurrentConfig"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_version":"v1","match_only_versions":["13-next"],"digest":{"length":525,"function_hash":"95928947388595925091893008326430279849"},"deprecated":false,"signature_type":"Function"},{"id":"ASB-A-248031255-a2ea770a","signature_type":"Function","target":{"file":"services/surfaceflinger/tests/Credentials_test.cpp","function":"TEST_F"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"length":263,"function_hash":"331721818010641101368488817112609960460"}},{"id":"ASB-A-248031255-addbee9c","signature_type":"Line","signature_version":"v1","target":{"file":"services/surfaceflinger/tests/DisplayConfigs_test.cpp"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["297728829303947267573113437734994086989","75347490385870780332688264601488129832","205242024843494254743387846997894502094","23260258885094276268340519231528360988","309660770761243816100699081598819639255","127092019778151323686574329916222755763","89838747988235568204711972085755951600","149857859193573495906293374597898997693","111517705025723638161103341707554116395","46619265267834665906547144158202230050","149365481145978383580553678189732973860","331576272246792690336679440113962481400"]}},{"id":"ASB-A-248031255-c1214f3c","signature_type":"Line","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["162112601197196461032340468200773766374","281313278542527269544972656407152865753","194473057910026995302480963691649821483","271385854835947005455786410175487580297","46289109204787752662311473533282608370","326258073084227900806636378407402713751","68378173835825726368546640852122557141","225576946193614793042911770785345243228","207187565642289793057772378044582054907","98336951683088959792867385714377648809","6960137967569277090653820944926841574","66778932712961921330664065846319976860","34304204938005110431629228040785126682","338952324256071106030061638125903894939","305664237037212469523884557987753145450","293042290683300218872168199563043182685","5503072735300967864339022749204841229","326258073084227900806636378407402713751","68378173835825726368546640852122557141","225576946193614793042911770785345243228","207187565642289793057772378044582054907","98336951683088959792867385714377648809","6960137967569277090653820944926841574","66778932712961921330664065846319976860","303056166013603942276085013598349815237","251246230383492398709060297834297896592","129450867982281655125270987387639628905","176145872028815415990033352790351065406","218200242989836812126255089011418403511","71943588693277709249669480329771191563","194845739099130974132779238661330859828","312457155519962555972845009080759445851","203717074557522443404636370585122982359","253309557234887165933447043233350190210","250021311405732552606337615847229881387","292438057918877206917953337881260451035","328111730597299131397778018435063563610","234901948306430726036671656514842365303","321451478923417652664250719013610712285","257946688776612966013000352705881651621","61185497893736571883727060660019995982","6947438383025424077187555610153100244","309869268785912351299875296074890565362","180509243745620423025592791837604165829","231486130623828211635365059228295318760","124563334815844082024855629982974514165","243710300906629100297045172510998981076","87693419284064671477351174990295772740","179841063331217018142389774687841759334","261853603561464692826995056534657966293","300851996364682315807299406416605604486","3389411013511668903923663387434616008","38427071549734497711994766653406900182","70514554757151653019178802357387608126","328661469848677527591703889903216158031","303113391414335987184025973442982548777","122096290623332630912034946304383096998","244340985807391198617735818167581207849","87568588339277117071093242283035604512","105676349312024878827791673414277879317","128255393787935919348542951315515245339","190141541533362245957734560132602548441","257695226279001889412006242368855629510","86919225461697840377427043438116082134","232630982954772029979650932050225224683","101581212265578927287260661702949566055","33621661588933862073277924337519123420","140929573055877768714254207113583348839","283343123189714365767831579464533744228","76300734608802022893576114788457104962","94895125902724343862678978123541409717","295437529879804764410257410456042832127","41298295346853775620080296459883151471","487493255795905130575695296725718873","58163734965954952693531552743375986945","328228782784295866547467698196668345676","219883552723622972668343206457580059494","321141871947285912291555893598363729249","337798019063468779911544952169785811002","130480604140211851959064818923049850934","127502621164205005631267086230526650619","10514503449917491587907878128288029599","23013100166212005444692087254508735189","39275300374359518269524845107084923801","242089503632974746408202796840519116499","34214122460900998660536632235796521362","187579243954766388662354658104106836994","2099204452077386882844780620679421062","130571933173231132197599582018955243855","136746081614834184551626244664854241908","315572353817110889157381123793797957453","105859608897249388144910953078652381919","172196969456445069542817630479881097808","132639319124132123530844743071103761087","338951741040485461629112348576621222226","136096091236387567184010986140776330075","117192021632274338057575746301682899756","261905123647566596496521057912675423661","34745575144132168780297982640662929551","254081062434683825868513095095124230657","77259493643636795144868774750064222090","187404337530009286584910347493884323482"]}},{"id":"ASB-A-248031255-c8433484","signature_type":"Line","target":{"file":"libs/gui/fuzzer/libgui_fuzzer_utils.h"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["132311911791951442648432113215727819983","52851801705810211367064954709510157253","83161821624681885608295580532077371148","185709990652964886974448560478271527185","207232153271634953398533795176295098472","79620568328256232368602763849283620111"]}},{"id":"ASB-A-248031255-cb0b1097","deprecated":false,"target":{"file":"libs/gui/include/gui/LayerState.h"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["134645919708385604242258103691644821526","48874385485260837418162292240157883616","43080312797915558891096827477182713796","68729186628623181284017957297639805012"]}},{"id":"ASB-A-248031255-d4578a98","signature_type":"Function","signature_version":"v1","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::applyTransactionState"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"length":1541,"function_hash":"94849740572786492586482140927322082692"}},{"id":"ASB-A-248031255-d8770857","signature_type":"Function","signature_version":"v1","target":{"file":"services/surfaceflinger/tests/Credentials_test.cpp","function":"TEST_F"},"source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","deprecated":false,"digest":{"length":577,"function_hash":"128374567287624876163660397576731389862"}},{"id":"ASB-A-248031255-da69818e","deprecated":false,"target":{"file":"services/surfaceflinger/tests/Credentials_test.cpp","function":"TEST_F"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Function","digest":{"length":343,"function_hash":"201102201819771022135661300298715085368"}},{"id":"ASB-A-248031255-ebc92ee4","deprecated":false,"target":{"file":"services/surfaceflinger/tests/Credentials_test.cpp"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["313487998849518024079889988419266120901","141039722709293352245042737029641115914","55367003171458159237284623185925201721","335854992820641531696246051103854614720","68888582310035860273895736830606027533","289004185294264206698556395270801533688","239459634386701520258445555451627615431","150310932332026232714292416224614886107","210095507638041622021159040720689972812","36670833261236495256608245413416740342","282636124346991743408320756725957753308","256777796026665528398939723674542128125","337945895895126857959850573909315752725","322463540871866036270966043390135784193","234544511325494810514844053253602521209","189862637460068124541458127135656123793","141760766538849012374105177297572799978","336474340037320162326487881960140768852","225667913765179393898982209896315165931","156832919431898011677183974883244027590","201243987689256488407610585645871295901","153816712050832545504974146930094173837","120367240131808958980242093142698644891","87752723422597038805092304137651387617","201282911443714682697247952140092497852","144140776004521457731032387287553246008","223819870136243490951825979908987323550","159308826078645416350893101566234725558","164806001962395921871778025981921176585","5611953722186164279672056421270119114","123719611520926816834075887321158999382","112252912211222387637033638648577375354","188898474371647801641328621745171727914","70174279968445365918353856555427171086","9924486477115112225794385695789998651","182277539480254507151382341571054907489"]}},{"id":"ASB-A-248031255-f01da59f","deprecated":false,"target":{"file":"libs/gui/include/gui/SurfaceComposerClient.h"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6bb12824db3c540775b2b737331ed3f448a50e2e","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["23300054071085751962938891983708100938","262251845536795056210087376754938808227","149839674209752113436849144929672717677","2688546354938469700107499004611471081","224511679716421541409853410194622176325","156577179883599909675922982962884084488","227273204268180486630459435983418756035","129497524799962203561431199095075588889","153431302413609020187551167778343526405"]}}],"severity":"High","types":["EoP"],"spl":"2023-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-248031255.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-04-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/03d4458ea0cb00c28f695d99aae5e4c6b15fc237"],"spl":"2023-04-01","severity":"High","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-248031255-1767cb2b","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/03d4458ea0cb00c28f695d99aae5e4c6b15fc237","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["11575403032549093641676552700161275335","146488538237030615160847921121835635282","140153226303854254681882047678880275108","225353453873340278080168432411336011639","11417243842465885412986841012367191969","254702129660496385938620106948211661577","139015734242182151863123904410859964109","305220997663313291549252579570171419493","34362214828989651139938621797972434257","169071035596864256993385727363544433439","222444348883962114813822463369828773599","273091127513139066898076277107940595829","169369306663887385514556051154912455880","1810506623728927548021013074629145006","174773506656230501174693222674065016428","126374258159224574284848907323109355564","6947438383025424077187555610153100244"]}},{"id":"ASB-A-248031255-4295059e","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::setTransactionState"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/03d4458ea0cb00c28f695d99aae5e4c6b15fc237","signature_type":"Function","digest":{"length":1173,"function_hash":"290098182675551993193030843292965841654"}},{"id":"ASB-A-248031255-72ea9f8c","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::applyTransactionState"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/03d4458ea0cb00c28f695d99aae5e4c6b15fc237","signature_type":"Function","digest":{"length":3641,"function_hash":"138432020787237748298990999592081102919"}},{"id":"ASB-A-248031255-83e942ec","signature_type":"Line","signature_version":"v1","target":{"file":"services/surfaceflinger/SurfaceFlinger.h"},"source":"https://android.googlesource.com/platform/frameworks/native/+/03d4458ea0cb00c28f695d99aae5e4c6b15fc237","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["35084912249456917402049977241892550732","209703544620246322994444775677034631043","42049173814671202202756406002398862167","294636869204235601596262152180910192147","263189955258353920996433685247976142170","10266183659089183967451079343840320793"]}},{"id":"ASB-A-248031255-caf0f2c8","signature_type":"Function","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::flushTransactionQueues"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/03d4458ea0cb00c28f695d99aae5e4c6b15fc237","deprecated":false,"digest":{"length":946,"function_hash":"215015399567301438147987966561187059144"}},{"id":"ASB-A-248031255-dc70ef30","signature_type":"Line","signature_version":"v1","target":{"file":"libs/gui/LayerState.cpp"},"source":"https://android.googlesource.com/platform/frameworks/native/+/03d4458ea0cb00c28f695d99aae5e4c6b15fc237","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["158316474625177380927379967336735792071","210021420014394732488362221031205883846","331030268047125451190618899420805559668"]}},{"id":"ASB-A-248031255-f4e29cb4","signature_version":"v1","signature_type":"Line","target":{"file":"libs/gui/include/gui/LayerState.h"},"source":"https://android.googlesource.com/platform/frameworks/native/+/03d4458ea0cb00c28f695d99aae5e4c6b15fc237","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["317645742015809968955593669413695559437","209205903857459800866391737011896266369","284320251439892850691172552861599132363","143914511802391581898506169495056495632"]}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-248031255.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-04-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1"],"spl":"2023-04-01","severity":"High","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-248031255-278b5683","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::flushTransactionQueues"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","signature_type":"Function","digest":{"length":2318,"function_hash":"239457206200097888841325021654567369461"}},{"id":"ASB-A-248031255-30e46259","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::applyTransactionState"},"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","deprecated":false,"digest":{"length":1972,"function_hash":"110769220489571881464343189798378182627"}},{"id":"ASB-A-248031255-99f1b712","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["145615856718437616831483496451083817831","253600639988209104645368250246721111165","269528716752610404915213522275307294135","48517541724204249610792938186164510083","25543726340567907514621759732904383013","332876141248795726585369109313701995698","220785237213459660584054123303721824619","275920640426152123097910538942775904395","211400873190448602796863696110332059733","46122150379648084203876475601621532805","223632542363610063711766368435571242763","234901948306430726036671656514842365303","321451478923417652664250719013610712285","257946688776612966013000352705881651621","61185497893736571883727060660019995982","6947438383025424077187555610153100244"]}},{"id":"ASB-A-248031255-ba5d9523","deprecated":false,"target":{"file":"libs/gui/LayerState.cpp"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["328884004822847517433513020617332187746","146914621623940310694676717643006474896","184883612208022720824473896991624352085"]}},{"id":"ASB-A-248031255-ca301a55","deprecated":false,"target":{"file":"libs/gui/include/gui/LayerState.h"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["317645742015809968955593669413695559437","209205903857459800866391737011896266369","284320251439892850691172552861599132363","143914511802391581898506169495056495632"]}},{"id":"ASB-A-248031255-cf340b84","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.h"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["308311011635490374035437625052596538048","73795980220107137702902453184651856085","136616800417881680180001663762337460754","162534124047051089521396977817638548530"]}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-248031255.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-04-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1"],"vanir_signatures":[{"id":"ASB-A-248031255-2f0588cc","deprecated":false,"target":{"file":"libs/gui/include/gui/LayerState.h"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["317645742015809968955593669413695559437","209205903857459800866391737011896266369","284320251439892850691172552861599132363","143914511802391581898506169495056495632"]}},{"id":"ASB-A-248031255-44b18e5a","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::applyTransactionState"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","signature_type":"Function","digest":{"length":1972,"function_hash":"110769220489571881464343189798378182627"}},{"id":"ASB-A-248031255-a200f6ff","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["145615856718437616831483496451083817831","253600639988209104645368250246721111165","269528716752610404915213522275307294135","48517541724204249610792938186164510083","25543726340567907514621759732904383013","332876141248795726585369109313701995698","220785237213459660584054123303721824619","275920640426152123097910538942775904395","211400873190448602796863696110332059733","46122150379648084203876475601621532805","223632542363610063711766368435571242763","234901948306430726036671656514842365303","321451478923417652664250719013610712285","257946688776612966013000352705881651621","61185497893736571883727060660019995982","6947438383025424077187555610153100244"]}},{"id":"ASB-A-248031255-adf4c7a8","deprecated":false,"target":{"file":"libs/gui/LayerState.cpp"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["328884004822847517433513020617332187746","146914621623940310694676717643006474896","184883612208022720824473896991624352085"]}},{"id":"ASB-A-248031255-bb45d245","target":{"file":"services/surfaceflinger/SurfaceFlinger.h"},"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["308311011635490374035437625052596538048","73795980220107137702902453184651856085","136616800417881680180001663762337460754","162534124047051089521396977817638548530"]}},{"id":"ASB-A-248031255-d78d447b","signature_type":"Function","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::flushTransactionQueues"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/3ea58dbc1d7a248160403f089b9998bf6694aae1","deprecated":false,"digest":{"length":2318,"function_hash":"239457206200097888841325021654567369461"}}],"severity":"High","types":["EoP"],"spl":"2023-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-248031255.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-04-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/5d1b23522b6a164c43375bd11e3369b4c1f49ac5"],"spl":"2023-04-01","severity":"High","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-248031255-2fc518f9","signature_version":"v1","signature_type":"Line","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp"},"source":"https://android.googlesource.com/platform/frameworks/native/+/5d1b23522b6a164c43375bd11e3369b4c1f49ac5","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["21020745834931105579993283310832062037","163967163435418575718093726979810893521","19873892903008614240628814150228584958","234901948306430726036671656514842365303","321451478923417652664250719013610712285","257946688776612966013000352705881651621","61185497893736571883727060660019995982","6947438383025424077187555610153100244"]}},{"id":"ASB-A-248031255-32e78eac","deprecated":false,"target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp","function":"SurfaceFlinger::applyTransactionState"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/5d1b23522b6a164c43375bd11e3369b4c1f49ac5","signature_type":"Function","digest":{"length":1804,"function_hash":"256027364577784698794885109186247417366"}},{"id":"ASB-A-248031255-4f82d4f3","deprecated":false,"target":{"file":"libs/gui/LayerState.cpp"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/5d1b23522b6a164c43375bd11e3369b4c1f49ac5","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["328884004822847517433513020617332187746","146914621623940310694676717643006474896","184883612208022720824473896991624352085"]}},{"id":"ASB-A-248031255-c072933e","signature_type":"Line","target":{"file":"libs/gui/include/gui/LayerState.h"},"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/5d1b23522b6a164c43375bd11e3369b4c1f49ac5","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["134645919708385604242258103691644821526","48874385485260837418162292240157883616","43080312797915558891096827477182713796","68729186628623181284017957297639805012"]}},{"id":"ASB-A-248031255-c0e58cd5","signature_type":"Line","signature_version":"v1","target":{"file":"services/surfaceflinger/SurfaceFlinger.h"},"source":"https://android.googlesource.com/platform/frameworks/native/+/5d1b23522b6a164c43375bd11e3369b4c1f49ac5","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["166007515361009771076551582988085619749","102431735267172059060815899214999177480","189214038169520632968028758749735063375","162534124047051089521396977817638548530"]}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-248031255.json"}}],"schema_version":"1.7.5"}