In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/251176e7748794928132121ac4f4390a55f34320"
],
"severity": "Moderate",
"types": [
"ID"
],
"spl": "2021-12-01",
"vanir_signatures": [
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/251176e7748794928132121ac4f4390a55f34320",
"digest": {
"length": 438.0,
"function_hash": "25839808463527860694172384588210268622"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "hasGrantedPolicy"
},
"id": "PUB-A-192247339-c739558e"
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/251176e7748794928132121ac4f4390a55f34320",
"digest": {
"line_hashes": [
"278540051461643046588832744851325989598",
"53560492051083007155866591539277770373",
"35761485490160325391943810166402359359",
"118216105468481680974465064182699631391"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
},
"id": "PUB-A-192247339-d5fbc804"
}
]
}