In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java",
"function": "getAllSubInfoList"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/b3a41396db555adf14ae4b4e91c6026f2e51d41b",
"deprecated": false,
"digest": {
"function_hash": "311225801311827479367414607961953610736",
"length": 726.0
},
"id": "ASB-A-183612370-13849cec",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/0f869d07572d1dea8384dfc9a59291f6f751f687",
"deprecated": false,
"digest": {
"line_hashes": [
"237645042633456655476983098235105792832",
"161685745506069371654195531660645732298",
"223533056098292700511532299063932245319",
"253481828144548062621945773350065985105"
],
"threshold": 0.9
},
"id": "ASB-A-183612370-31f4140b",
"signature_type": "Line"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java",
"function": "getAllSubInfoList"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/0f869d07572d1dea8384dfc9a59291f6f751f687",
"deprecated": false,
"digest": {
"function_hash": "65747392710822020374918465473157514799",
"length": 576.0
},
"id": "ASB-A-183612370-4a09ae1b",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/bb73fd02340e8764e236006012f77fd5245d549c",
"deprecated": false,
"digest": {
"line_hashes": [
"121065630433032119511665483551995230266",
"248199077134062676251498125742683059126",
"177621527171753042824360158416163500703",
"311583316165233374897657837728734745494",
"282320073410114787387077492972079434232",
"237645042633456655476983098235105792832",
"333904249359511689120521615786903690195",
"104367181497691630965178638998525489788",
"18284756703240988750277940749423637077",
"301967035633595617237854849305262255705",
"268276217245033454643574829816740390891",
"241650588421666204512621057665397987388",
"3701186561235064138239552292291678938",
"82297805640942605012241181312576576305",
"169262225819410605879750222058442508434",
"199272531784359615581500507359775470196",
"205775857027624973715955252298804766328",
"281285480602034854964864225789306182943",
"30502042529417987390383720163181860060",
"203297023859920754618558150367276810946"
],
"threshold": 0.9
},
"id": "ASB-A-183612370-53667e1c",
"signature_type": "Line"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/b3a41396db555adf14ae4b4e91c6026f2e51d41b",
"deprecated": false,
"digest": {
"line_hashes": [
"182248059881760941650069635244389702210",
"217827158372726386654095201258671973781",
"47249179978306793543373668361587582906",
"277951052537958039603812033448097596102",
"116527187582697532596495262073117257513",
"94735259932340389470232450068365296957",
"111916330817004077780153820710174060877",
"104367181497691630965178638998525489788",
"18284756703240988750277940749423637077",
"301967035633595617237854849305262255705",
"220870443804663184541891417406333843625",
"236093241235910376966040980449884259534",
"252867860805818443660628309286803216822",
"192257041645766610013570786228974219599"
],
"threshold": 0.9
},
"id": "ASB-A-183612370-a119ddb0",
"signature_type": "Line"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java",
"function": "getSubscriptionsInGroup"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/b3a41396db555adf14ae4b4e91c6026f2e51d41b",
"deprecated": false,
"digest": {
"function_hash": "77584987028475787638819503361256447358",
"length": 741.0
},
"id": "ASB-A-183612370-e78da7b9",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java",
"function": "getAllSubInfoList"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/bb73fd02340e8764e236006012f77fd5245d549c",
"deprecated": false,
"digest": {
"function_hash": "123588745050901043597866146322392684583",
"length": 733.0
},
"id": "ASB-A-183612370-ecb5d04a",
"signature_type": "Function"
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0f869d07572d1dea8384dfc9a59291f6f751f687",
"https://android.googlesource.com/platform/frameworks/opt/telephony/+/bb73fd02340e8764e236006012f77fd5245d549c",
"https://android.googlesource.com/platform/frameworks/opt/telephony/+/b3a41396db555adf14ae4b4e91c6026f2e51d41b"
],
"spl": "2022-01-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/02bb0cc34bd940cebf71902b1d2aef5e7ed5e580",
"deprecated": false,
"digest": {
"line_hashes": [
"40819495170921106098253306595825799225",
"248199077134062676251498125742683059126",
"177621527171753042824360158416163500703",
"311583316165233374897657837728734745494",
"282320073410114787387077492972079434232",
"237645042633456655476983098235105792832",
"333904249359511689120521615786903690195",
"104367181497691630965178638998525489788",
"276868691367679165808555983200649434761",
"247292223194789526410770777945941784592",
"222586301505171800773419185163764685535",
"117749153219250772146338232395801876648",
"3701186561235064138239552292291678938",
"82297805640942605012241181312576576305",
"169262225819410605879750222058442508434",
"199272531784359615581500507359775470196",
"205775857027624973715955252298804766328",
"281285480602034854964864225789306182943",
"284577979198998037042809343824309142432",
"284570642018323591525340789674794594852"
],
"threshold": 0.9
},
"id": "ASB-A-183612370-200a92a6",
"signature_type": "Line"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java",
"function": "getAllSubInfoList"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/02bb0cc34bd940cebf71902b1d2aef5e7ed5e580",
"deprecated": false,
"digest": {
"function_hash": "244258578017540274006311166143142683638",
"length": 763.0
},
"id": "ASB-A-183612370-33fd2e86",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java",
"function": "getAllSubInfoList"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/f24c432620af8a772fdf09ba960573e78f2a99cf",
"deprecated": false,
"digest": {
"function_hash": "33780052866281126754428462863244595231",
"length": 598.0
},
"id": "ASB-A-183612370-66105f69",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/f24c432620af8a772fdf09ba960573e78f2a99cf",
"deprecated": false,
"digest": {
"line_hashes": [
"237645042633456655476983098235105792832",
"161685745506069371654195531660645732298",
"223533056098292700511532299063932245319",
"253481828144548062621945773350065985105"
],
"threshold": 0.9
},
"id": "ASB-A-183612370-702d7ee0",
"signature_type": "Line"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/9845ef56ff9a397041026af9034f1c17d4e65d97",
"deprecated": false,
"digest": {
"line_hashes": [
"203282800089544126152022816391438076365",
"150621743023351046977762609547037409305",
"179342019887304039241415118833028586597",
"37229891675766843702265130152570196619",
"116527187582697532596495262073117257513",
"94735259932340389470232450068365296957",
"111916330817004077780153820710174060877",
"104367181497691630965178638998525489788",
"276868691367679165808555983200649434761",
"247292223194789526410770777945941784592",
"38665205100974562141689129458118528688",
"267684676798983866768868497901958249615",
"322141498066991034902750313785209393022",
"78228312469680846354939517436003781878",
"230978498040815208121905026111110892965",
"17797929794514106857018304278155382200"
],
"threshold": 0.9
},
"id": "ASB-A-183612370-b4aefd06",
"signature_type": "Line"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java",
"function": "getAllSubInfoList"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/9845ef56ff9a397041026af9034f1c17d4e65d97",
"deprecated": false,
"digest": {
"function_hash": "334603253601477635748303972801993761310",
"length": 756.0
},
"id": "ASB-A-183612370-e73a9cbf",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java",
"function": "getSubscriptionsInGroup"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/9845ef56ff9a397041026af9034f1c17d4e65d97",
"deprecated": false,
"digest": {
"function_hash": "40229817654369586745804545750714304498",
"length": 770.0
},
"id": "ASB-A-183612370-f8d59318",
"signature_type": "Function"
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/telephony/+/f24c432620af8a772fdf09ba960573e78f2a99cf",
"https://android.googlesource.com/platform/frameworks/opt/telephony/+/02bb0cc34bd940cebf71902b1d2aef5e7ed5e580",
"https://android.googlesource.com/platform/frameworks/opt/telephony/+/9845ef56ff9a397041026af9034f1c17d4e65d97"
],
"spl": "2022-01-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java",
"function": "getAllSubInfoList"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cc9c44782b7adce7b2f0dc5ad73f886d3e6bbf39",
"deprecated": false,
"digest": {
"function_hash": "334603253601477635748303972801993761310",
"length": 756.0
},
"id": "ASB-A-183612370-4d47f801",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java",
"function": "getSubscriptionsInGroup"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cc9c44782b7adce7b2f0dc5ad73f886d3e6bbf39",
"deprecated": false,
"digest": {
"function_hash": "40229817654369586745804545750714304498",
"length": 770.0
},
"id": "ASB-A-183612370-718d273f",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "src/java/com/android/internal/telephony/SubscriptionController.java"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cc9c44782b7adce7b2f0dc5ad73f886d3e6bbf39",
"deprecated": false,
"digest": {
"line_hashes": [
"203282800089544126152022816391438076365",
"150621743023351046977762609547037409305",
"179342019887304039241415118833028586597",
"37229891675766843702265130152570196619",
"116527187582697532596495262073117257513",
"94735259932340389470232450068365296957",
"111916330817004077780153820710174060877",
"104367181497691630965178638998525489788",
"276868691367679165808555983200649434761",
"247292223194789526410770777945941784592",
"38665205100974562141689129458118528688",
"267684676798983866768868497901958249615",
"322141498066991034902750313785209393022",
"78228312469680846354939517436003781878",
"230978498040815208121905026111110892965",
"17797929794514106857018304278155382200"
],
"threshold": 0.9
},
"id": "ASB-A-183612370-bd5f3590",
"signature_type": "Line"
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/telephony/+/cc9c44782b7adce7b2f0dc5ad73f886d3e6bbf39"
],
"spl": "2022-01-01",
"severity": "High"
}