CVE-2021-0318: Use After Free
In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/frameworks/nativeto a version that resolves this vulnerability.Fixed in 8.1:2021-01-01 - Upgrade
Upgrade
android/platform/frameworks/nativeto a version that resolves this vulnerability.Fixed in 9:2021-01-01 - Upgrade
Upgrade
android/platform/frameworks/nativeto a version that resolves this vulnerability.Fixed in 10:2021-01-01 - Upgrade
Upgrade
android/platform/frameworks/nativeto a version that resolves this vulnerability.Fixed in 11:2021-01-01
Event History
Frequently Asked Questions
Which Android releases are listed as affected?
The listed affected releases are Android 8.1, Android 9, Android 10, and Android 11.
Is exploitation reported to be publicly available?
Yes. An exploit was reported as published on 2022-04-23.
What component and tracking identifier should be used for triage?
The issue is in android/platform/frameworks/native, specifically SensorEventConnection.cpp in appendEventsToCacheLocked. The Android tracking ID is A-168211968.