In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of the user's contacts with User execution privileges needed. User interaction is not needed for exploitation.
{
"types": [
"ID"
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"
],
"spl": "2021-01-01",
"vanir_signatures": [
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"signature_version": "v1",
"digest": {
"line_hashes": [
"172814152372971379604738369757960834824",
"276525397767147043961175588095650851955",
"653221487668372770577636779567614600",
"255097094575033678142722364645314315376",
"276999817505378290176111121896543922996",
"159088413308253743070575739752472227361",
"254691839537898685258196601681284906938",
"143435069698733465833622016909119801805",
"323571418124605274469497222629110476524",
"225001216039861746181979068129394574496",
"82382823808481889034091260075755123870",
"193562449742014061248069017114086543239",
"163952503613277355541151714250417807324",
"210562462640571290471343425607503975414",
"268563039876452948139642820172944052978",
"21155185772828919658729573693511646516",
"176470184966161345834246594496847711920",
"212638004904577046618457710750247042868",
"72366058261745304201725421282453264588",
"241128501526546534231805247352840910809",
"8441467631010747820365646517591411980",
"278583015521016519772770083557964669469",
"333415768923001303629626907853980968709",
"331156345207030069487658911139749664201",
"250608853271198906804507182020017152640"
],
"threshold": 0.9
},
"id": "ASB-A-162738636-1305fcbb",
"signature_type": "Line"
},
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createEditAction"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"signature_version": "v1",
"digest": {
"function_hash": "244252906286592539083050450883158953571",
"length": 1296.0
},
"id": "ASB-A-162738636-18a79c60",
"signature_type": "Function"
},
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createShareAction"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"digest": {
"function_hash": "324305078217090273298162499824054072935",
"length": 1631.0
},
"id": "ASB-A-162738636-24bcc28e"
},
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createDeleteAction"
},
"signature_type": "Function",
"digest": {
"function_hash": "113674538978786862364512969242086919950",
"length": 708.0
},
"id": "ASB-A-162738636-b453b720",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"
},
{
"id": "ASB-A-162738636-d5c2c573",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "buildSmartActions"
},
"signature_type": "Function",
"digest": {
"function_hash": "110650449270536247486706417310390274052",
"length": 809.0
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"deprecated": false
}
]
}
{
"types": [
"ID"
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"
],
"spl": "2021-01-01",
"vanir_signatures": [
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createEditAction"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"digest": {
"function_hash": "244252906286592539083050450883158953571",
"length": 1296.0
},
"id": "ASB-A-162738636-2900581a"
},
{
"id": "ASB-A-162738636-4ba44e82",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "buildSmartActions"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"deprecated": false,
"digest": {
"function_hash": "110650449270536247486706417310390274052",
"length": 809.0
}
},
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"172814152372971379604738369757960834824",
"276525397767147043961175588095650851955",
"653221487668372770577636779567614600",
"255097094575033678142722364645314315376",
"276999817505378290176111121896543922996",
"159088413308253743070575739752472227361",
"254691839537898685258196601681284906938",
"143435069698733465833622016909119801805",
"323571418124605274469497222629110476524",
"225001216039861746181979068129394574496",
"82382823808481889034091260075755123870",
"193562449742014061248069017114086543239",
"163952503613277355541151714250417807324",
"210562462640571290471343425607503975414",
"268563039876452948139642820172944052978",
"21155185772828919658729573693511646516",
"176470184966161345834246594496847711920",
"212638004904577046618457710750247042868",
"72366058261745304201725421282453264588",
"241128501526546534231805247352840910809",
"8441467631010747820365646517591411980",
"278583015521016519772770083557964669469",
"333415768923001303629626907853980968709",
"331156345207030069487658911139749664201",
"250608853271198906804507182020017152640"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"id": "ASB-A-162738636-53a3329a"
},
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createShareAction"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"digest": {
"function_hash": "324305078217090273298162499824054072935",
"length": 1631.0
},
"id": "ASB-A-162738636-5a534668"
},
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createDeleteAction"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"signature_version": "v1",
"digest": {
"function_hash": "113674538978786862364512969242086919950",
"length": 708.0
},
"id": "ASB-A-162738636-7045fd2a",
"signature_type": "Function"
}
]
}
{
"types": [
"ID"
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"
],
"spl": "2021-01-01",
"vanir_signatures": [
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"digest": {
"line_hashes": [
"172814152372971379604738369757960834824",
"276525397767147043961175588095650851955",
"653221487668372770577636779567614600",
"255097094575033678142722364645314315376",
"276999817505378290176111121896543922996",
"159088413308253743070575739752472227361",
"254691839537898685258196601681284906938",
"143435069698733465833622016909119801805",
"323571418124605274469497222629110476524",
"225001216039861746181979068129394574496",
"82382823808481889034091260075755123870",
"193562449742014061248069017114086543239",
"163952503613277355541151714250417807324",
"210562462640571290471343425607503975414",
"268563039876452948139642820172944052978",
"21155185772828919658729573693511646516",
"176470184966161345834246594496847711920",
"212638004904577046618457710750247042868",
"72366058261745304201725421282453264588",
"241128501526546534231805247352840910809",
"8441467631010747820365646517591411980",
"278583015521016519772770083557964669469",
"333415768923001303629626907853980968709",
"331156345207030069487658911139749664201",
"250608853271198906804507182020017152640"
],
"threshold": 0.9
},
"id": "ASB-A-162738636-318472e6",
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "ASB-A-162738636-48d07a02",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createDeleteAction"
},
"signature_type": "Function",
"digest": {
"function_hash": "113674538978786862364512969242086919950",
"length": 708.0
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"deprecated": false
},
{
"id": "ASB-A-162738636-7cbf4370",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createEditAction"
},
"signature_type": "Function",
"digest": {
"function_hash": "244252906286592539083050450883158953571",
"length": 1296.0
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"deprecated": false
},
{
"id": "ASB-A-162738636-82f5a9df",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createShareAction"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"deprecated": false,
"digest": {
"function_hash": "324305078217090273298162499824054072935",
"length": 1631.0
}
},
{
"id": "ASB-A-162738636-cd56013d",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "buildSmartActions"
},
"signature_type": "Function",
"digest": {
"function_hash": "110650449270536247486706417310390274052",
"length": 809.0
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"deprecated": false
}
]
}
{
"types": [
"ID"
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"
],
"spl": "2021-01-01",
"vanir_signatures": [
{
"id": "ASB-A-162738636-08ddb67b",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createDeleteAction"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"deprecated": false,
"digest": {
"function_hash": "113674538978786862364512969242086919950",
"length": 708.0
}
},
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "buildSmartActions"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"digest": {
"function_hash": "110650449270536247486706417310390274052",
"length": 809.0
},
"id": "ASB-A-162738636-4579018a",
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createEditAction"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"signature_version": "v1",
"digest": {
"function_hash": "244252906286592539083050450883158953571",
"length": 1296.0
},
"id": "ASB-A-162738636-94b796dd",
"signature_type": "Function"
},
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java",
"function": "createShareAction"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"signature_version": "v1",
"digest": {
"function_hash": "324305078217090273298162499824054072935",
"length": 1631.0
},
"id": "ASB-A-162738636-9e9fff5e",
"signature_type": "Function"
},
{
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"172814152372971379604738369757960834824",
"276525397767147043961175588095650851955",
"653221487668372770577636779567614600",
"255097094575033678142722364645314315376",
"276999817505378290176111121896543922996",
"159088413308253743070575739752472227361",
"254691839537898685258196601681284906938",
"143435069698733465833622016909119801805",
"323571418124605274469497222629110476524",
"225001216039861746181979068129394574496",
"82382823808481889034091260075755123870",
"193562449742014061248069017114086543239",
"163952503613277355541151714250417807324",
"210562462640571290471343425607503975414",
"268563039876452948139642820172944052978",
"21155185772828919658729573693511646516",
"176470184966161345834246594496847711920",
"212638004904577046618457710750247042868",
"72366058261745304201725421282453264588",
"241128501526546534231805247352840910809",
"8441467631010747820365646517591411980",
"278583015521016519772770083557964669469",
"333415768923001303629626907853980968709",
"331156345207030069487658911139749664201",
"250608853271198906804507182020017152640"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297",
"id": "ASB-A-162738636-c2f3201c"
}
]
}