ASB-A-262892300 — Vulnetix

ASB-A-262892300 PUBLISHED

In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	build/soong	13:0, 13, 13:0
platform	packages/modules/Virtualization	13:0, 13, 13

Timeline

Apr 1, 2023 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2023-04-01 advisory
https://android.googlesource.com/platform/build/soong/+/48d9ec056458a4bff78a9c572bc9c185dc037ccc patch
https://android.googlesource.com/platform/packages/modules/Virtualization/+/31782435ddf9c3641bf7c78cc64075dd95eede87 patch

Open in Interactive Console →