ASB-A-163358811

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-163358811.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-163358811
Aliases
  • A-163358811
  • CVE-2021-0334
Published
2021-02-01T00:00:00Z
Modified
2026-06-10T14:58:40.911641763Z
Summary
[none]
Details

In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.0:0
Fixed
8.0:2021-02-01

Affected versions

8.*
8.0

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2021-02-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-163358811-2b267d55",
            "target": {
                "file": "core/java/com/android/internal/app/ResolverActivity.java"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "174371553732100889283254511614136005441",
                    "13330894795705433851892047269793446799",
                    "201994403411096622710607662506332749494",
                    "134510787689246407431920260464135272370",
                    "333301721987638033010754890503292933194",
                    "334421543523570617777152532351159328443",
                    "46504565387357307030054830023679990582",
                    "211255316221032162905081300686009719926",
                    "247284402298655770418265826111420868310",
                    "272831955049442656560451445653716304708",
                    "5834475539267677776199645141465132214",
                    "119681882521869389982210889803274217724",
                    "219116227868864441301067429919611919680",
                    "33393003783262160847678859101194228440",
                    "60363212111710427479805791938696258310",
                    "188605675358477518837422141341530750606",
                    "276088793410760290443735272149674200612",
                    "339988031543743852047813282201495733879"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4",
            "signature_version": "v1"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "core/java/com/android/internal/app/ResolverActivity.java",
                "function": "onTargetSelected"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "298730487644032992607579790542590767991",
                "length": 4170.0
            },
            "id": "ASB-A-163358811-ba2b7484",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-163358811.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2021-02-01

Affected versions

8.*
8.1

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2021-02-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-163358811-65fcabd5",
            "target": {
                "file": "core/java/com/android/internal/app/ResolverActivity.java",
                "function": "onTargetSelected"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "298730487644032992607579790542590767991",
                "length": 4170.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4",
            "signature_version": "v1"
        },
        {
            "id": "ASB-A-163358811-cc0f08e1",
            "target": {
                "file": "core/java/com/android/internal/app/ResolverActivity.java"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "174371553732100889283254511614136005441",
                    "13330894795705433851892047269793446799",
                    "201994403411096622710607662506332749494",
                    "134510787689246407431920260464135272370",
                    "333301721987638033010754890503292933194",
                    "334421543523570617777152532351159328443",
                    "46504565387357307030054830023679990582",
                    "211255316221032162905081300686009719926",
                    "247284402298655770418265826111420868310",
                    "272831955049442656560451445653716304708",
                    "5834475539267677776199645141465132214",
                    "119681882521869389982210889803274217724",
                    "219116227868864441301067429919611919680",
                    "33393003783262160847678859101194228440",
                    "60363212111710427479805791938696258310",
                    "188605675358477518837422141341530750606",
                    "276088793410760290443735272149674200612",
                    "339988031543743852047813282201495733879"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-163358811.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2021-02-01

Affected versions

Other
9

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2021-02-01",
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "target": {
                "file": "core/java/com/android/internal/app/ResolverActivity.java",
                "function": "onTargetSelected"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "298730487644032992607579790542590767991",
                "length": 4170.0
            },
            "id": "ASB-A-163358811-20002b59",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4",
            "signature_version": "v1"
        },
        {
            "id": "ASB-A-163358811-8d8ef0dd",
            "target": {
                "file": "core/java/com/android/internal/app/ResolverActivity.java"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "174371553732100889283254511614136005441",
                    "13330894795705433851892047269793446799",
                    "201994403411096622710607662506332749494",
                    "134510787689246407431920260464135272370",
                    "333301721987638033010754890503292933194",
                    "334421543523570617777152532351159328443",
                    "46504565387357307030054830023679990582",
                    "211255316221032162905081300686009719926",
                    "247284402298655770418265826111420868310",
                    "272831955049442656560451445653716304708",
                    "5834475539267677776199645141465132214",
                    "119681882521869389982210889803274217724",
                    "219116227868864441301067429919611919680",
                    "33393003783262160847678859101194228440",
                    "60363212111710427479805791938696258310",
                    "188605675358477518837422141341530750606",
                    "276088793410760290443735272149674200612",
                    "339988031543743852047813282201495733879"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-163358811.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2021-02-01

Affected versions

Other
10

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2021-02-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-163358811-1a82efa1",
            "target": {
                "file": "core/java/com/android/internal/app/ResolverActivity.java"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "174371553732100889283254511614136005441",
                    "13330894795705433851892047269793446799",
                    "201994403411096622710607662506332749494",
                    "134510787689246407431920260464135272370",
                    "333301721987638033010754890503292933194",
                    "334421543523570617777152532351159328443",
                    "46504565387357307030054830023679990582",
                    "211255316221032162905081300686009719926",
                    "247284402298655770418265826111420868310",
                    "272831955049442656560451445653716304708",
                    "5834475539267677776199645141465132214",
                    "119681882521869389982210889803274217724",
                    "219116227868864441301067429919611919680",
                    "33393003783262160847678859101194228440",
                    "60363212111710427479805791938696258310",
                    "188605675358477518837422141341530750606",
                    "276088793410760290443735272149674200612",
                    "339988031543743852047813282201495733879"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4",
            "signature_version": "v1"
        },
        {
            "id": "ASB-A-163358811-a39901d1",
            "target": {
                "file": "core/java/com/android/internal/app/ResolverActivity.java",
                "function": "onTargetSelected"
            },
            "digest": {
                "function_hash": "298730487644032992607579790542590767991",
                "length": 4170.0
            },
            "signature_type": "Function",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-163358811.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-02-01

Affected versions

Other
11

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2021-02-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-163358811-a72df64f",
            "target": {
                "file": "core/java/com/android/internal/app/ResolverActivity.java",
                "function": "onTargetSelected"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "298730487644032992607579790542590767991",
                "length": 4170.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4",
            "signature_version": "v1"
        },
        {
            "id": "ASB-A-163358811-b4d67a45",
            "target": {
                "file": "core/java/com/android/internal/app/ResolverActivity.java"
            },
            "deprecated": false,
            "signature_type": "Line",
            "digest": {
                "line_hashes": [
                    "174371553732100889283254511614136005441",
                    "13330894795705433851892047269793446799",
                    "201994403411096622710607662506332749494",
                    "134510787689246407431920260464135272370",
                    "333301721987638033010754890503292933194",
                    "334421543523570617777152532351159328443",
                    "46504565387357307030054830023679990582",
                    "211255316221032162905081300686009719926",
                    "247284402298655770418265826111420868310",
                    "272831955049442656560451445653716304708",
                    "5834475539267677776199645141465132214",
                    "119681882521869389982210889803274217724",
                    "219116227868864441301067429919611919680",
                    "33393003783262160847678859101194228440",
                    "60363212111710427479805791938696258310",
                    "188605675358477518837422141341530750606",
                    "276088793410760290443735272149674200612",
                    "339988031543743852047813282201495733879"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-163358811.json"