In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"length": 774.0,
"function_hash": "311755631475428335247053096977776939348"
},
"id": "ASB-A-178825358-1c54ba01",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "onActivityResult",
"file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"22237428926174014830969948776489499039",
"222433763452713413645502744421477528484",
"237799215702974302459419176970850696854",
"249202089332442014519245444425867216119",
"99358731625073202202248885635475701564",
"311212974029261427756239830472466338861",
"208148859901352770179186704174416180759",
"136366542135245285086604888586447098932",
"77292896923319988675646724550218902859",
"205507660814157486812817375384885986611",
"40778162712943993812527488243684196963",
"44528628381245122399359546834263222127",
"120892549873414972715780886559555343842",
"138909659181169984041828300175633922729",
"171053158414925326625314336350264402725",
"93155544689909178405178574550238387594",
"166876672002561956685357027912500719161",
"118544635469916353755715886732733681967",
"283631128690369748727888147171261318861"
]
},
"id": "ASB-A-178825358-28479cf5",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"29365743690095436116035910426004384681",
"248153419878083777489925353281781237821",
"338213729626767697559176296913147585825",
"81704783892045214501138446201965108387"
]
},
"id": "ASB-A-178825358-6e9c8626",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
}
},
{
"digest": {
"length": 288.0,
"function_hash": "159371420014942396403050186739044013318"
},
"id": "ASB-A-178825358-83873ff4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "startQuickContact",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
},
{
"digest": {
"length": 121.0,
"function_hash": "158389822995361825500072866711643727870"
},
"id": "ASB-A-178825358-b8432239",
"deprecated": false,
"target": {
"function": "startQuickContactForResult",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 105.0,
"function_hash": "19995906043034311077628849478822950858"
},
"id": "ASB-A-178825358-d74033aa",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "startQuickContact",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00"
],
"types": [
"ID"
],
"spl": "2021-04-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 121.0,
"function_hash": "158389822995361825500072866711643727870"
},
"id": "ASB-A-178825358-01609467",
"deprecated": false,
"target": {
"function": "startQuickContactForResult",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"29365743690095436116035910426004384681",
"248153419878083777489925353281781237821",
"338213729626767697559176296913147585825",
"81704783892045214501138446201965108387"
]
},
"id": "ASB-A-178825358-302ea5a2",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
}
},
{
"digest": {
"length": 105.0,
"function_hash": "19995906043034311077628849478822950858"
},
"id": "ASB-A-178825358-37852ae0",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "startQuickContact",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
},
{
"digest": {
"length": 288.0,
"function_hash": "159371420014942396403050186739044013318"
},
"id": "ASB-A-178825358-46a9c9bc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "startQuickContact",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
},
{
"digest": {
"length": 774.0,
"function_hash": "311755631475428335247053096977776939348"
},
"id": "ASB-A-178825358-6d39e62a",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "onActivityResult",
"file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"22237428926174014830969948776489499039",
"222433763452713413645502744421477528484",
"237799215702974302459419176970850696854",
"249202089332442014519245444425867216119",
"99358731625073202202248885635475701564",
"311212974029261427756239830472466338861",
"208148859901352770179186704174416180759",
"136366542135245285086604888586447098932",
"77292896923319988675646724550218902859",
"205507660814157486812817375384885986611",
"40778162712943993812527488243684196963",
"44528628381245122399359546834263222127",
"120892549873414972715780886559555343842",
"138909659181169984041828300175633922729",
"171053158414925326625314336350264402725",
"93155544689909178405178574550238387594",
"166876672002561956685357027912500719161",
"118544635469916353755715886732733681967",
"283631128690369748727888147171261318861"
]
},
"id": "ASB-A-178825358-b74857d7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00"
],
"types": [
"ID"
],
"spl": "2021-04-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 105.0,
"function_hash": "19995906043034311077628849478822950858"
},
"id": "ASB-A-178825358-2e330685",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "startQuickContact",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
},
{
"digest": {
"length": 121.0,
"function_hash": "158389822995361825500072866711643727870"
},
"id": "ASB-A-178825358-31ee1eb1",
"deprecated": false,
"target": {
"function": "startQuickContactForResult",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 288.0,
"function_hash": "159371420014942396403050186739044013318"
},
"id": "ASB-A-178825358-41ccbfc4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "startQuickContact",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
},
{
"digest": {
"length": 774.0,
"function_hash": "311755631475428335247053096977776939348"
},
"id": "ASB-A-178825358-4dfdac01",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "onActivityResult",
"file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"22237428926174014830969948776489499039",
"222433763452713413645502744421477528484",
"237799215702974302459419176970850696854",
"249202089332442014519245444425867216119",
"99358731625073202202248885635475701564",
"311212974029261427756239830472466338861",
"208148859901352770179186704174416180759",
"136366542135245285086604888586447098932",
"77292896923319988675646724550218902859",
"205507660814157486812817375384885986611",
"40778162712943993812527488243684196963",
"44528628381245122399359546834263222127",
"120892549873414972715780886559555343842",
"138909659181169984041828300175633922729",
"171053158414925326625314336350264402725",
"93155544689909178405178574550238387594",
"166876672002561956685357027912500719161",
"118544635469916353755715886732733681967",
"283631128690369748727888147171261318861"
]
},
"id": "ASB-A-178825358-61e9edb4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"29365743690095436116035910426004384681",
"248153419878083777489925353281781237821",
"338213729626767697559176296913147585825",
"81704783892045214501138446201965108387"
]
},
"id": "ASB-A-178825358-d5428304",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00"
],
"types": [
"ID"
],
"spl": "2021-04-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 105.0,
"function_hash": "19995906043034311077628849478822950858"
},
"id": "ASB-A-178825358-0c088eb6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "startQuickContact",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"29365743690095436116035910426004384681",
"248153419878083777489925353281781237821",
"338213729626767697559176296913147585825",
"81704783892045214501138446201965108387"
]
},
"id": "ASB-A-178825358-36043c86",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
}
},
{
"digest": {
"length": 774.0,
"function_hash": "311755631475428335247053096977776939348"
},
"id": "ASB-A-178825358-9288dd68",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "onActivityResult",
"file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
}
},
{
"digest": {
"length": 288.0,
"function_hash": "159371420014942396403050186739044013318"
},
"id": "ASB-A-178825358-bae768a6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"function": "startQuickContact",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
},
{
"digest": {
"length": 121.0,
"function_hash": "158389822995361825500072866711643727870"
},
"id": "ASB-A-178825358-d80adcb0",
"deprecated": false,
"target": {
"function": "startQuickContactForResult",
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"22237428926174014830969948776489499039",
"222433763452713413645502744421477528484",
"237799215702974302459419176970850696854",
"249202089332442014519245444425867216119",
"99358731625073202202248885635475701564",
"311212974029261427756239830472466338861",
"208148859901352770179186704174416180759",
"136366542135245285086604888586447098932",
"77292896923319988675646724550218902859",
"205507660814157486812817375384885986611",
"40778162712943993812527488243684196963",
"44528628381245122399359546834263222127",
"120892549873414972715780886559555343842",
"138909659181169984041828300175633922729",
"171053158414925326625314336350264402725",
"93155544689909178405178574550238387594",
"166876672002561956685357027912500719161",
"118544635469916353755715886732733681967",
"283631128690369748727888147171261318861"
]
},
"id": "ASB-A-178825358-eb962834",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
"target": {
"file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00"
],
"types": [
"ID"
],
"spl": "2021-04-01",
"severity": "High"
}