In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/c72848f9fe37892b4c2250724d9546b5c52202d0"
],
"severity": "High",
"spl": "2021-11-01",
"vanir_signatures": [
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-1cc712ee",
"digest": {
"length": 207.0,
"function_hash": "228822319030108736310659750415149070227"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c72848f9fe37892b4c2250724d9546b5c52202d0",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java",
"function": "buildSnoozeRapidIntent"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-40fd5f08",
"digest": {
"length": 3460.0,
"function_hash": "308795455009090898768743631479338903576"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c72848f9fe37892b4c2250724d9546b5c52202d0",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java",
"function": "enqueueNotification"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-a112b484",
"digest": {
"length": 209.0,
"function_hash": "181047512440939180761129267055724316407"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c72848f9fe37892b4c2250724d9546b5c52202d0",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java",
"function": "buildSnoozeWarningIntent"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-b130f5cd",
"digest": {
"line_hashes": [
"197486083835313723063459599522557929439",
"228371645920238108197771046126683832227",
"10561157079251115973211487777521016671",
"243869423055735467903858586972293087201",
"201436209267199891499779947287270546337",
"134999108671535320762615249066904993799",
"287094322899624225691230539638475445030",
"83861102652212397903997062396757106065",
"318323193807562158911902208851041100143",
"214563927873521596646947763448025196268",
"156357252931792195422078993941300952027",
"81890604936207167187352023838441483374",
"256460062588113408347772373985438756747",
"65237409555033504555755567032464318878",
"131075342921930499578946947011593518218",
"270622869997771636760537760630577929226",
"293147571900542864877042266531996769574",
"281750614400514593679804410917793321861",
"330595051668306795483286682801130565513",
"65237409555033504555755567032464318878",
"190092756070643132430535769309683089845"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c72848f9fe37892b4c2250724d9546b5c52202d0",
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java"
}
}
],
"types": [
"ID"
]
}
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/29eb352baad77de762ce68cae74b3247b9127352"
],
"severity": "High",
"spl": "2021-11-01",
"vanir_signatures": [
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-146da1e6",
"digest": {
"line_hashes": [
"284745294888199334927578512023594325621",
"28349699320866538194599079367014689347",
"10561157079251115973211487777521016671",
"243869423055735467903858586972293087201",
"201436209267199891499779947287270546337",
"134999108671535320762615249066904993799",
"287094322899624225691230539638475445030",
"83861102652212397903997062396757106065",
"318323193807562158911902208851041100143",
"214563927873521596646947763448025196268",
"156357252931792195422078993941300952027",
"81890604936207167187352023838441483374",
"256460062588113408347772373985438756747",
"65237409555033504555755567032464318878",
"131075342921930499578946947011593518218",
"270622869997771636760537760630577929226",
"293147571900542864877042266531996769574",
"281750614400514593679804410917793321861",
"330595051668306795483286682801130565513",
"65237409555033504555755567032464318878",
"190092756070643132430535769309683089845"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/29eb352baad77de762ce68cae74b3247b9127352",
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-44ce2f32",
"digest": {
"length": 4198.0,
"function_hash": "83670758810654470201436267871809252340"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/29eb352baad77de762ce68cae74b3247b9127352",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java",
"function": "enqueueNotification"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-a120edcf",
"digest": {
"length": 209.0,
"function_hash": "181047512440939180761129267055724316407"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/29eb352baad77de762ce68cae74b3247b9127352",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java",
"function": "buildSnoozeWarningIntent"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-cb565a2c",
"digest": {
"length": 207.0,
"function_hash": "228822319030108736310659750415149070227"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/29eb352baad77de762ce68cae74b3247b9127352",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java",
"function": "buildSnoozeRapidIntent"
}
}
],
"types": [
"ID"
]
}
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/e329730572f3bd492127054a12a4a064dbe3baa9"
],
"severity": "High",
"spl": "2021-11-01",
"vanir_signatures": [
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-0eee125a",
"digest": {
"line_hashes": [
"284745294888199334927578512023594325621",
"28349699320866538194599079367014689347",
"10561157079251115973211487777521016671",
"243869423055735467903858586972293087201",
"201436209267199891499779947287270546337",
"134999108671535320762615249066904993799",
"287094322899624225691230539638475445030",
"83861102652212397903997062396757106065",
"318323193807562158911902208851041100143",
"214563927873521596646947763448025196268",
"156357252931792195422078993941300952027",
"81890604936207167187352023838441483374",
"256460062588113408347772373985438756747",
"65237409555033504555755567032464318878",
"131075342921930499578946947011593518218",
"270622869997771636760537760630577929226",
"293147571900542864877042266531996769574",
"281750614400514593679804410917793321861",
"330595051668306795483286682801130565513",
"65237409555033504555755567032464318878",
"190092756070643132430535769309683089845"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e329730572f3bd492127054a12a4a064dbe3baa9",
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-36eaee62",
"digest": {
"length": 4254.0,
"function_hash": "183534572551297391803046501677394025899"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e329730572f3bd492127054a12a4a064dbe3baa9",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java",
"function": "enqueueNotification"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-fcdc9923",
"digest": {
"length": 207.0,
"function_hash": "228822319030108736310659750415149070227"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e329730572f3bd492127054a12a4a064dbe3baa9",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java",
"function": "buildSnoozeRapidIntent"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-177931370-fd25eb50",
"digest": {
"length": 209.0,
"function_hash": "181047512440939180761129267055724316407"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e329730572f3bd492127054a12a4a064dbe3baa9",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/net/NetworkPolicyManagerService.java",
"function": "buildSnoozeWarningIntent"
}
}
],
"types": [
"ID"
]
}