ASB-A-181962311

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-181962311.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-181962311
Aliases
Published
2021-06-01T00:00:00Z
Modified
2026-03-14T08:46:00.134079Z
Summary
[none]
Details

In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2021-06-01

Affected versions

8.*
8.1

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/8a9fafb37d089789b2017676942da2da001ac47d"
    ],
    "spl": "2021-06-01",
    "vanir_signatures": [
        {
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/8a9fafb37d089789b2017676942da2da001ac47d",
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-181962311-387bd507",
            "digest": {
                "length": 916.0,
                "function_hash": "205185686415413105272215436771915477739"
            },
            "signature_type": "Function",
            "target": {
                "file": "src/com/android/settings/ActivityPicker.java",
                "function": "onCreate"
            }
        },
        {
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/8a9fafb37d089789b2017676942da2da001ac47d",
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-181962311-7f7b39d6",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "13917053636421386471929265823444253584",
                    "80829123100825695380556064374738997322",
                    "292289074368362542279077340109773786528",
                    "185945154138790307882385540569992421939",
                    "234118073180999875281221007551057574324"
                ]
            },
            "signature_type": "Line",
            "target": {
                "file": "src/com/android/settings/ActivityPicker.java"
            }
        }
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-181962311.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2021-06-01

Affected versions

Other
9

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/636e70fbf2b9ef789e96add206fd7fcc816f61b6"
    ],
    "spl": "2021-06-01",
    "vanir_signatures": [
        {
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/636e70fbf2b9ef789e96add206fd7fcc816f61b6",
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-181962311-51b95827",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "13917053636421386471929265823444253584",
                    "80829123100825695380556064374738997322",
                    "292289074368362542279077340109773786528",
                    "185945154138790307882385540569992421939",
                    "234118073180999875281221007551057574324"
                ]
            },
            "signature_type": "Line",
            "target": {
                "file": "src/com/android/settings/ActivityPicker.java"
            }
        },
        {
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/636e70fbf2b9ef789e96add206fd7fcc816f61b6",
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-181962311-5b6a6766",
            "digest": {
                "length": 916.0,
                "function_hash": "205185686415413105272215436771915477739"
            },
            "signature_type": "Function",
            "target": {
                "file": "src/com/android/settings/ActivityPicker.java",
                "function": "onCreate"
            }
        }
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-181962311.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2021-06-01

Affected versions

Other
10

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/eac0ba87d0bfc700ab2e565ff673175f460147c6"
    ],
    "spl": "2021-06-01",
    "vanir_signatures": [
        {
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/eac0ba87d0bfc700ab2e565ff673175f460147c6",
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-181962311-11181a47",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "13917053636421386471929265823444253584",
                    "80829123100825695380556064374738997322",
                    "292289074368362542279077340109773786528",
                    "185945154138790307882385540569992421939",
                    "234118073180999875281221007551057574324"
                ]
            },
            "signature_type": "Line",
            "target": {
                "file": "src/com/android/settings/ActivityPicker.java"
            }
        },
        {
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/eac0ba87d0bfc700ab2e565ff673175f460147c6",
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-181962311-a8d34e6b",
            "digest": {
                "length": 916.0,
                "function_hash": "205185686415413105272215436771915477739"
            },
            "signature_type": "Function",
            "target": {
                "file": "src/com/android/settings/ActivityPicker.java",
                "function": "onCreate"
            }
        }
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-181962311.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-06-01

Affected versions

Other
11

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/2445ba01cd194a07a79b93ee45e2e9fff35ca9a7"
    ],
    "spl": "2021-06-01",
    "vanir_signatures": [
        {
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/2445ba01cd194a07a79b93ee45e2e9fff35ca9a7",
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-181962311-041dc308",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "13917053636421386471929265823444253584",
                    "80829123100825695380556064374738997322",
                    "292289074368362542279077340109773786528",
                    "185945154138790307882385540569992421939",
                    "234118073180999875281221007551057574324"
                ]
            },
            "signature_type": "Line",
            "target": {
                "file": "src/com/android/settings/ActivityPicker.java"
            }
        },
        {
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/2445ba01cd194a07a79b93ee45e2e9fff35ca9a7",
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-181962311-eebc833e",
            "digest": {
                "length": 916.0,
                "function_hash": "205185686415413105272215436771915477739"
            },
            "signature_type": "Function",
            "target": {
                "file": "src/com/android/settings/ActivityPicker.java",
                "function": "onCreate"
            }
        }
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-181962311.json"