CVE-2021-1027: Incorrect Type Cast
In setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a privileged process due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/frameworks/nativeto a version that resolves this vulnerability.Fixed in 12:2021-12-01
Event History
Frequently Asked Questions
Who is exposed to this issue?
Android 12 devices are affected. Exploitation is local, so the attacker must already be able to run code on the device with low privileges.
Does exploitation require user interaction or special execution privileges?
No user interaction is required. The vulnerability can enable privilege escalation without additional execution privileges beyond the attacker’s existing local access.
What is the likely impact if exploitation succeeds?
Successful exploitation could allow arbitrary code execution in a privileged SurfaceFlinger process, with resulting high impact to confidentiality, integrity, and availability.