In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"length": 3008.0,
"function_hash": "178407750091521648634944306888108002636"
},
"id": "ASB-A-179910660-0c5ae4b9",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"function": "generateFileInfo",
"file": "src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"73715718337394080343472948942606004781",
"254665715061141657485876048803351502301",
"33131000638129406676596668282962828131",
"114223513899024294082223181810903400424"
]
},
"id": "ASB-A-179910660-d002ce17",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"file": "src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"304686300155957396291570783300203657953",
"245958141740598192991011865562348803580",
"106234744393895743906968412382741354816"
]
},
"id": "ASB-A-179910660-d746fb93",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"file": "src/com/android/bluetooth/opp/BluetoothOppUtility.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499"
],
"types": [
"ID"
],
"spl": "2021-07-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"304686300155957396291570783300203657953",
"245958141740598192991011865562348803580",
"106234744393895743906968412382741354816"
]
},
"id": "ASB-A-179910660-2f03cc96",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"file": "src/com/android/bluetooth/opp/BluetoothOppUtility.java"
}
},
{
"digest": {
"length": 3008.0,
"function_hash": "178407750091521648634944306888108002636"
},
"id": "ASB-A-179910660-7a91cdde",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"function": "generateFileInfo",
"file": "src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"73715718337394080343472948942606004781",
"254665715061141657485876048803351502301",
"33131000638129406676596668282962828131",
"114223513899024294082223181810903400424"
]
},
"id": "ASB-A-179910660-cb3f7488",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"file": "src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499"
],
"types": [
"ID"
],
"spl": "2021-07-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"73715718337394080343472948942606004781",
"254665715061141657485876048803351502301",
"33131000638129406676596668282962828131",
"114223513899024294082223181810903400424"
]
},
"id": "ASB-A-179910660-228ad17b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"file": "src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
}
},
{
"digest": {
"length": 3008.0,
"function_hash": "178407750091521648634944306888108002636"
},
"id": "ASB-A-179910660-3308213d",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"function": "generateFileInfo",
"file": "src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"304686300155957396291570783300203657953",
"245958141740598192991011865562348803580",
"106234744393895743906968412382741354816"
]
},
"id": "ASB-A-179910660-9c911cf4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"file": "src/com/android/bluetooth/opp/BluetoothOppUtility.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499"
],
"types": [
"ID"
],
"spl": "2021-07-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 3008.0,
"function_hash": "178407750091521648634944306888108002636"
},
"id": "ASB-A-179910660-a49938f5",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"function": "generateFileInfo",
"file": "src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"73715718337394080343472948942606004781",
"254665715061141657485876048803351502301",
"33131000638129406676596668282962828131",
"114223513899024294082223181810903400424"
]
},
"id": "ASB-A-179910660-caad0a25",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"file": "src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"304686300155957396291570783300203657953",
"245958141740598192991011865562348803580",
"106234744393895743906968412382741354816"
]
},
"id": "ASB-A-179910660-d91ad719",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499",
"target": {
"file": "src/com/android/bluetooth/opp/BluetoothOppUtility.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/5fd89df71e29571cde91c4a899939496002b2499"
],
"types": [
"ID"
],
"spl": "2021-07-01",
"severity": "High"
}