ASB-A-174661955

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-174661955.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-174661955
Aliases
  • A-174661955
  • CVE-2021-0521
Published
2021-06-01T00:00:00Z
Modified
2026-06-17T15:23:34.405473849Z
Summary
[none]
Details

In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of cross-user permissions with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2021-06-01

Affected versions

8.*
8.1

Ecosystem specific 

{
    "types": [
        "ID"
    ],
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/cca5bf9282d37e132f2c4ba80ced5e6c074e8889"
    ],
    "spl": "2021-06-01",
    "vanir_signatures": [
        {
            "deprecated": false,
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageManagerService.java"
            },
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/cca5bf9282d37e132f2c4ba80ced5e6c074e8889",
            "digest": {
                "line_hashes": [
                    "199711827891027318696610838834130616648",
                    "138947170883316907437510034753088326807",
                    "294500128474038364446721308433295141733",
                    "263303962000383874338358230469893704254"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-174661955-7161894a"
        },
        {
            "deprecated": false,
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageManagerService.java",
                "function": "getAllPackages"
            },
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/cca5bf9282d37e132f2c4ba80ced5e6c074e8889",
            "digest": {
                "function_hash": "202947986550377717574352750756989068473",
                "length": 817.0
            },
            "id": "ASB-A-174661955-ee38f3b9"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-174661955.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2021-06-01

Affected versions

Other
9

Ecosystem specific 

{
    "types": [
        "ID"
    ],
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/264dea63b026d1f3e5217db632d3665fdbb3ffae"
    ],
    "spl": "2021-06-01",
    "vanir_signatures": [
        {
            "deprecated": false,
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageManagerService.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/264dea63b026d1f3e5217db632d3665fdbb3ffae",
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "199711827891027318696610838834130616648",
                    "138947170883316907437510034753088326807",
                    "294500128474038364446721308433295141733",
                    "263303962000383874338358230469893704254"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-174661955-76d1c69c",
            "signature_type": "Line"
        },
        {
            "deprecated": false,
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageManagerService.java",
                "function": "getAllPackages"
            },
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/264dea63b026d1f3e5217db632d3665fdbb3ffae",
            "digest": {
                "function_hash": "202947986550377717574352750756989068473",
                "length": 817.0
            },
            "id": "ASB-A-174661955-acf349c6"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-174661955.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2021-06-01

Affected versions

Other
10

Ecosystem specific 

{
    "types": [
        "ID"
    ],
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/83cc106ca0907f977d12fbf1a75f4090038fdccc"
    ],
    "spl": "2021-06-01",
    "vanir_signatures": [
        {
            "deprecated": false,
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageManagerService.java",
                "function": "getAllPackages"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/83cc106ca0907f977d12fbf1a75f4090038fdccc",
            "digest": {
                "function_hash": "339890323062072521443264037110834275984",
                "length": 811.0
            },
            "id": "ASB-A-174661955-9b748fe7",
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "deprecated": false,
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageManagerService.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/83cc106ca0907f977d12fbf1a75f4090038fdccc",
            "digest": {
                "line_hashes": [
                    "71341430926861086361325213125141907397",
                    "199711827891027318696610838834130616648",
                    "138947170883316907437510034753088326807",
                    "294500128474038364446721308433295141733"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-174661955-c32e842a",
            "signature_type": "Line",
            "signature_version": "v1"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-174661955.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-06-01

Affected versions

Other
11

Ecosystem specific 

{
    "types": [
        "ID"
    ],
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/9b694ef4d45ca54bcc4b7de6940f5608047a1a16"
    ],
    "spl": "2021-06-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-174661955-6fa3c378",
            "target": {
                "file": "core/java/android/os/Process.java"
            },
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9b694ef4d45ca54bcc4b7de6940f5608047a1a16",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "64325443264029058411496765489288783420",
                    "189794376678823856560689191942896471742",
                    "61517342722270344720550994277124951614"
                ],
                "threshold": 0.9
            }
        },
        {
            "deprecated": false,
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageManagerService.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9b694ef4d45ca54bcc4b7de6940f5608047a1a16",
            "digest": {
                "line_hashes": [
                    "71341430926861086361325213125141907397",
                    "199711827891027318696610838834130616648",
                    "138947170883316907437510034753088326807",
                    "50912303726426136706469972040810759692"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-174661955-9c405518",
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "deprecated": false,
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageManagerService.java",
                "function": "getAllPackages"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9b694ef4d45ca54bcc4b7de6940f5608047a1a16",
            "digest": {
                "function_hash": "114098694210717843319894783306117084955",
                "length": 778.0
            },
            "id": "ASB-A-174661955-cde6c335",
            "signature_type": "Function",
            "signature_version": "v1"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-174661955.json"