In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"length": 437.0,
"function_hash": "75403572291900251402800288404936096474"
},
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-159624555-51c97bf8",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93f167b8f577027f5744dc8c03c8f4c256735eb8",
"target": {
"function": "sendAccessibilityEvent",
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"92498848191069466092222126922485971270",
"65041935603204192840723665464151945450",
"339674721772209413281979408130928599869",
"201608410934937031541543181524573951178",
"32163582248344005832108534133936724048",
"25965682776163692576899563424569715093",
"267708305245113452024208228160191879244",
"246014632333981967826004685269531913786",
"150523377781151915408209844388548707548",
"158686701729319315411122897789048614190",
"35581597285240808296277725000076282916",
"42231322040038733498808506484382845776",
"172484534436847483227282879811115012358",
"263205558041395604472807198803656677753",
"256892666641338777685044173271654975407",
"174940933925774713663290117590139296991",
"14740851157531722587355820869139065060",
"119143170322131313896848543823826318552",
"325502569584188076507953913947343808158",
"156082532344662398572145123716949750816",
"82703287650791591770710267788260531852",
"266704107741786978678594094864540290841",
"296507674053513201859659860164831146816",
"170426873783206624507271577176082369556",
"196256208067729569464098546055049612867",
"307940008054439690991819820968271580886",
"142790914983824335325714296563471263582",
"175844919543013441195734297147786783750",
"29889121688857335673035163703266516558",
"57363209687634864166073354590363805036",
"267430687161799427355071746949077206887",
"225648164962881739716022892581273451105",
"261786311612812442669683402564561374479",
"296197565612008786819207926844410431484",
"50603770596340394536140832293694891486",
"260387501309450439381361986826326613876"
]
},
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/93f167b8f577027f5744dc8c03c8f4c256735eb8",
"id": "ASB-A-159624555-6e1e5486",
"signature_version": "v1"
},
{
"digest": {
"length": 2319.0,
"function_hash": "160142011874012977331377936901549308246"
},
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-159624555-c8f0361c",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93f167b8f577027f5744dc8c03c8f4c256735eb8",
"target": {
"function": "buzzBeepBlinkLocked",
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
}
},
{
"digest": {
"length": 558.0,
"function_hash": "190352307311690693956168260148758677339"
},
"deprecated": false,
"signature_type": "Function",
"target": {
"function": "onBootPhase",
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93f167b8f577027f5744dc8c03c8f4c256735eb8",
"id": "ASB-A-159624555-e121e350"
}
],
"severity": "High",
"spl": "2021-09-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/93f167b8f577027f5744dc8c03c8f4c256735eb8"
],
"types": [
"ID"
]
}
{
"spl": "2021-09-01",
"severity": "High",
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/0caa60087fe6859ae0b2d96c59cc6643c06c17fc"
],
"vanir_signatures": [
{
"digest": {
"length": 1198.0,
"function_hash": "31215627447559021458081627794383742020"
},
"deprecated": false,
"signature_type": "Function",
"target": {
"function": "onBootPhase",
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0caa60087fe6859ae0b2d96c59cc6643c06c17fc",
"id": "ASB-A-159624555-2492068e"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"48744699434131953465242130325956471125",
"209179148642430074595816025921100442721",
"287759642462721839171715678043724351783",
"96501031133167593571244584695794902533",
"212179371336635971381397715158376386156",
"112233712386258365335114926834639048571",
"50214528746936815886182360473692021606",
"126109581854644738976045486305609977620",
"169279390404585177999594496235529362548",
"6396691220960814944426278550038312284",
"208879514335488209256613446029007994149",
"246014632333981967826004685269531913786",
"150523377781151915408209844388548707548",
"132494616344946002114161713088397275177",
"235209677611016730855426344193674978859",
"112600124039104890000373992658161005830",
"238377230647358381838615529342638142415",
"136921981610011995365740308689499969372",
"245909530202272826180671118821559391034",
"71512400644782231434735777560890646104",
"335279095730612211066811396096957415293",
"288080665962860764931388789900385168680",
"94436026648277766987464040648862843626",
"296722958804568823469489750611300921964",
"291002332634451589904760724822478533537",
"23018416963043446710462771359362716567",
"139528139007037105423577291416413587378",
"170426873783206624507271577176082369556",
"196256208067729569464098546055049612867",
"307940008054439690991819820968271580886",
"142790914983824335325714296563471263582",
"175844919543013441195734297147786783750",
"29889121688857335673035163703266516558",
"57363209687634864166073354590363805036",
"267430687161799427355071746949077206887",
"225648164962881739716022892581273451105",
"261786311612812442669683402564561374479",
"296197565612008786819207926844410431484",
"50603770596340394536140832293694891486",
"260387501309450439381361986826326613876"
]
},
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0caa60087fe6859ae0b2d96c59cc6643c06c17fc",
"id": "ASB-A-159624555-5cb9fe55"
},
{
"digest": {
"length": 437.0,
"function_hash": "75403572291900251402800288404936096474"
},
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-159624555-bd0041ef",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0caa60087fe6859ae0b2d96c59cc6643c06c17fc",
"target": {
"function": "sendAccessibilityEvent",
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
}
},
{
"digest": {
"length": 3318.0,
"function_hash": "161464696418810758762591759412413888437"
},
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-159624555-df3208ec",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0caa60087fe6859ae0b2d96c59cc6643c06c17fc",
"target": {
"function": "buzzBeepBlinkLocked",
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
}
}
]
}