{"id":"PUB-A-256591441","details":"In registerSignalHandlers of main.c, there is a possible local arbitrary code execution   due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-256591441","CVE-2023-21020"],"modified":"2026-09-22T15:22:15.314525410Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/StatsD/+/992c86cfa9b615e8e62426a5014a0b10501a37b0"}],"affected":[{"package":{"name":"platform/packages/modules/StatsD","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/StatsD/+/992c86cfa9b615e8e62426a5014a0b10501a37b0"],"severity":"Moderate","spl":"2023-03-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"statsd/src/main.cpp"},"deprecated":false,"digest":{"line_hashes":["314817827637828342880955890469328961627","260969941955375475668777182419459543626","334113579255801437038977983441306919034","173189343450552462395248524531502233542","129849452835575680659823935461717724920","83718369344036115522319402550543040334","16001930605414978469470912963344849182","195955100118898708897446181034483366226","273349282485225985937796567476237427484","91397241793206339794653254615417520385","29807277704382798858935598479353289843","48577354335287188420686873933696083621","102427140245959600049550732061187805794","178441290731508068702537209819204515910","215272494121980979092601051813263149914","222676632469001025285115379168911905242","312872181474121745233895410469015452914","96305273537978682458243178994480165515","201773762346121508239117422335800833156","149403628616472136907591886240779207234","315883162896068618317386544602119111075","331364431804415054580799380184035610880","22180935920724786830384601289094655121","191866813637121691927494984062773796535","158986997174725434635601432989179524147","92727982918979718084508866640117533563","183533875569848885046573331264109545684","268274132982296726754680370187504993786"],"threshold":0.9},"id":"PUB-A-256591441-2cccb8f5","match_only_versions":["13"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/StatsD/+/992c86cfa9b615e8e62426a5014a0b10501a37b0"},{"id":"PUB-A-256591441-d536ed8c","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/StatsD/+/992c86cfa9b615e8e62426a5014a0b10501a37b0","target":{"file":"statsd/src/main.cpp","function":"signalHandler"},"deprecated":false,"digest":{"length":351,"function_hash":"151766590558765629684275105768374584739"}},{"target":{"file":"statsd/src/main.cpp","function":"registerSignalHandlers"},"deprecated":false,"digest":{"function_hash":"201987785594624122716473348128341216944","length":324},"id":"PUB-A-256591441-e177e40f","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/StatsD/+/992c86cfa9b615e8e62426a5014a0b10501a37b0"},{"source":"https://android.googlesource.com/platform/packages/modules/StatsD/+/992c86cfa9b615e8e62426a5014a0b10501a37b0","target":{"function":"main","file":"statsd/src/main.cpp"},"deprecated":false,"digest":{"length":826,"function_hash":"151065701975192630090666588795524179466"},"id":"PUB-A-256591441-e7c384e0","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-256591441.json"}}],"schema_version":"1.9.0"}