In updateNotification of BeamTransferManager.java, there is a missing permission check. This could lead to local information disclosure of paired Bluetooth addresses with no additional execution privileges needed. User interaction is needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Nfc/+/6d372148e7e907552cd9cc121afcf415c50f645a"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"145900801250718968624990074717654147521",
"151743929853960091316428473263392994839",
"217177286525536470315642999573608940835",
"202190341104927962005410082613683753289"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/6d372148e7e907552cd9cc121afcf415c50f645a",
"target": {
"file": "src/com/android/nfc/beam/BeamTransferManager.java"
},
"id": "PUB-A-168712890-4ce839b4"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 444.0,
"function_hash": "74758063415640172838399745803873282125"
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/Nfc/+/6d372148e7e907552cd9cc121afcf415c50f645a",
"target": {
"file": "src/com/android/nfc/beam/BeamTransferManager.java",
"function": "buildCancelIntent"
},
"id": "PUB-A-168712890-dc2f4374"
}
],
"spl": "2021-06-01",
"severity": "Moderate"
}