[AIDL] statsd_service_fuzzer crashes on startup

2023-11-0100:00:00

Google

osv.dev

memory corruption

privilege escalation

exploitation

software

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/packages/modules/statsdeq13
platform/packages/modules/statsdeq12
platform/packages/modules/statsdeq12L
platform/packages/modules/statsdeq11
platform/packages/modules/statsdeq14

Name	Operator	Version
platform/packages/modules/statsd	eq	13
platform/packages/modules/statsd	eq	12
platform/packages/modules/statsd	eq	12L
platform/packages/modules/statsd	eq	11
platform/packages/modules/statsd	eq	14