In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/251176e7748794928132121ac4f4390a55f34320"
],
"severity": "Moderate",
"spl": "2021-12-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "25839808463527860694172384588210268622",
"length": 438
},
"id": "PUB-A-192247339-c739558e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/251176e7748794928132121ac4f4390a55f34320",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "hasGrantedPolicy"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"278540051461643046588832744851325989598",
"53560492051083007155866591539277770373",
"35761485490160325391943810166402359359",
"118216105468481680974465064182699631391"
],
"threshold": 0.9
},
"id": "PUB-A-192247339-d5fbc804",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/251176e7748794928132121ac4f4390a55f34320",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
}
]
}