In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "length": 726.0, "function_hash": "311225801311827479367414607961953610736" }, "target": { "function": "getAllSubInfoList", "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Function", "id": "ASB-A-183612370-13849cec", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/b3a41396db555adf14ae4b4e91c6026f2e51d41b", "deprecated": false }, { "digest": { "line_hashes": [ "237645042633456655476983098235105792832", "161685745506069371654195531660645732298", "223533056098292700511532299063932245319", "253481828144548062621945773350065985105" ], "threshold": 0.9 }, "target": { "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Line", "id": "ASB-A-183612370-31f4140b", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/0f869d07572d1dea8384dfc9a59291f6f751f687", "deprecated": false }, { "digest": { "length": 576.0, "function_hash": "65747392710822020374918465473157514799" }, "target": { "function": "getAllSubInfoList", "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Function", "id": "ASB-A-183612370-4a09ae1b", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/0f869d07572d1dea8384dfc9a59291f6f751f687", "deprecated": false }, { "digest": { "line_hashes": [ "121065630433032119511665483551995230266", "248199077134062676251498125742683059126", "177621527171753042824360158416163500703", "311583316165233374897657837728734745494", "282320073410114787387077492972079434232", "237645042633456655476983098235105792832", "333904249359511689120521615786903690195", "104367181497691630965178638998525489788", "18284756703240988750277940749423637077", "301967035633595617237854849305262255705", "268276217245033454643574829816740390891", "241650588421666204512621057665397987388", "3701186561235064138239552292291678938", "82297805640942605012241181312576576305", "169262225819410605879750222058442508434", "199272531784359615581500507359775470196", "205775857027624973715955252298804766328", "281285480602034854964864225789306182943", "30502042529417987390383720163181860060", "203297023859920754618558150367276810946" ], "threshold": 0.9 }, "target": { "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Line", "id": "ASB-A-183612370-53667e1c", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/bb73fd02340e8764e236006012f77fd5245d549c", "deprecated": false }, { "digest": { "line_hashes": [ "182248059881760941650069635244389702210", "217827158372726386654095201258671973781", "47249179978306793543373668361587582906", "277951052537958039603812033448097596102", "116527187582697532596495262073117257513", "94735259932340389470232450068365296957", "111916330817004077780153820710174060877", "104367181497691630965178638998525489788", "18284756703240988750277940749423637077", "301967035633595617237854849305262255705", "220870443804663184541891417406333843625", "236093241235910376966040980449884259534", "252867860805818443660628309286803216822", "192257041645766610013570786228974219599" ], "threshold": 0.9 }, "target": { "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Line", "id": "ASB-A-183612370-a119ddb0", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/b3a41396db555adf14ae4b4e91c6026f2e51d41b", "deprecated": false }, { "digest": { "length": 741.0, "function_hash": "77584987028475787638819503361256447358" }, "target": { "function": "getSubscriptionsInGroup", "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Function", "id": "ASB-A-183612370-e78da7b9", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/b3a41396db555adf14ae4b4e91c6026f2e51d41b", "deprecated": false }, { "digest": { "length": 733.0, "function_hash": "123588745050901043597866146322392684583" }, "target": { "function": "getAllSubInfoList", "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Function", "id": "ASB-A-183612370-ecb5d04a", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/bb73fd02340e8764e236006012f77fd5245d549c", "deprecated": false } ], "fixes": [ "https://android.googlesource.com/platform/frameworks/opt/telephony/+/0f869d07572d1dea8384dfc9a59291f6f751f687", "https://android.googlesource.com/platform/frameworks/opt/telephony/+/bb73fd02340e8764e236006012f77fd5245d549c", "https://android.googlesource.com/platform/frameworks/opt/telephony/+/b3a41396db555adf14ae4b4e91c6026f2e51d41b" ], "severity": "High", "types": [ "ID" ], "spl": "2022-01-01" }
{ "vanir_signatures": [ { "digest": { "line_hashes": [ "40819495170921106098253306595825799225", "248199077134062676251498125742683059126", "177621527171753042824360158416163500703", "311583316165233374897657837728734745494", "282320073410114787387077492972079434232", "237645042633456655476983098235105792832", "333904249359511689120521615786903690195", "104367181497691630965178638998525489788", "276868691367679165808555983200649434761", "247292223194789526410770777945941784592", "222586301505171800773419185163764685535", "117749153219250772146338232395801876648", "3701186561235064138239552292291678938", "82297805640942605012241181312576576305", "169262225819410605879750222058442508434", "199272531784359615581500507359775470196", "205775857027624973715955252298804766328", "281285480602034854964864225789306182943", "284577979198998037042809343824309142432", "284570642018323591525340789674794594852" ], "threshold": 0.9 }, "target": { "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Line", "id": "ASB-A-183612370-200a92a6", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/02bb0cc34bd940cebf71902b1d2aef5e7ed5e580", "deprecated": false }, { "digest": { "length": 763.0, "function_hash": "244258578017540274006311166143142683638" }, "target": { "function": "getAllSubInfoList", "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Function", "id": "ASB-A-183612370-33fd2e86", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/02bb0cc34bd940cebf71902b1d2aef5e7ed5e580", "deprecated": false }, { "digest": { "length": 598.0, "function_hash": "33780052866281126754428462863244595231" }, "target": { "function": "getAllSubInfoList", "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Function", "id": "ASB-A-183612370-66105f69", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/f24c432620af8a772fdf09ba960573e78f2a99cf", "deprecated": false }, { "digest": { "line_hashes": [ "237645042633456655476983098235105792832", "161685745506069371654195531660645732298", "223533056098292700511532299063932245319", "253481828144548062621945773350065985105" ], "threshold": 0.9 }, "target": { "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Line", "id": "ASB-A-183612370-702d7ee0", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/f24c432620af8a772fdf09ba960573e78f2a99cf", "deprecated": false }, { "digest": { "line_hashes": [ "203282800089544126152022816391438076365", "150621743023351046977762609547037409305", "179342019887304039241415118833028586597", "37229891675766843702265130152570196619", "116527187582697532596495262073117257513", "94735259932340389470232450068365296957", "111916330817004077780153820710174060877", "104367181497691630965178638998525489788", "276868691367679165808555983200649434761", "247292223194789526410770777945941784592", "38665205100974562141689129458118528688", "267684676798983866768868497901958249615", "322141498066991034902750313785209393022", "78228312469680846354939517436003781878", "230978498040815208121905026111110892965", "17797929794514106857018304278155382200" ], "threshold": 0.9 }, "target": { "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Line", "id": "ASB-A-183612370-b4aefd06", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/9845ef56ff9a397041026af9034f1c17d4e65d97", "deprecated": false }, { "digest": { "length": 756.0, "function_hash": "334603253601477635748303972801993761310" }, "target": { "function": "getAllSubInfoList", "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Function", "id": "ASB-A-183612370-e73a9cbf", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/9845ef56ff9a397041026af9034f1c17d4e65d97", "deprecated": false }, { "digest": { "length": 770.0, "function_hash": "40229817654369586745804545750714304498" }, "target": { "function": "getSubscriptionsInGroup", "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Function", "id": "ASB-A-183612370-f8d59318", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/9845ef56ff9a397041026af9034f1c17d4e65d97", "deprecated": false } ], "fixes": [ "https://android.googlesource.com/platform/frameworks/opt/telephony/+/f24c432620af8a772fdf09ba960573e78f2a99cf", "https://android.googlesource.com/platform/frameworks/opt/telephony/+/02bb0cc34bd940cebf71902b1d2aef5e7ed5e580", "https://android.googlesource.com/platform/frameworks/opt/telephony/+/9845ef56ff9a397041026af9034f1c17d4e65d97" ], "severity": "High", "types": [ "ID" ], "spl": "2022-01-01" }
{ "vanir_signatures": [ { "digest": { "length": 756.0, "function_hash": "334603253601477635748303972801993761310" }, "target": { "function": "getAllSubInfoList", "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Function", "id": "ASB-A-183612370-4d47f801", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cc9c44782b7adce7b2f0dc5ad73f886d3e6bbf39", "deprecated": false }, { "digest": { "length": 770.0, "function_hash": "40229817654369586745804545750714304498" }, "target": { "function": "getSubscriptionsInGroup", "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Function", "id": "ASB-A-183612370-718d273f", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cc9c44782b7adce7b2f0dc5ad73f886d3e6bbf39", "deprecated": false }, { "digest": { "line_hashes": [ "203282800089544126152022816391438076365", "150621743023351046977762609547037409305", "179342019887304039241415118833028586597", "37229891675766843702265130152570196619", "116527187582697532596495262073117257513", "94735259932340389470232450068365296957", "111916330817004077780153820710174060877", "104367181497691630965178638998525489788", "276868691367679165808555983200649434761", "247292223194789526410770777945941784592", "38665205100974562141689129458118528688", "267684676798983866768868497901958249615", "322141498066991034902750313785209393022", "78228312469680846354939517436003781878", "230978498040815208121905026111110892965", "17797929794514106857018304278155382200" ], "threshold": 0.9 }, "target": { "file": "src/java/com/android/internal/telephony/SubscriptionController.java" }, "signature_version": "v1", "signature_type": "Line", "id": "ASB-A-183612370-bd5f3590", "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cc9c44782b7adce7b2f0dc5ad73f886d3e6bbf39", "deprecated": false } ], "fixes": [ "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cc9c44782b7adce7b2f0dc5ad73f886d3e6bbf39" ], "severity": "High", "types": [ "ID" ], "spl": "2022-01-01" }