PUB-A-197749180

See a problem?
Import Source
https://storage.googleapis.com/android-osv/PUB-A-197749180.json
JSON Data
https://api.osv.dev/v1/vulns/PUB-A-197749180
Aliases
  • A-197749180
  • CVE-2021-1004
Published
2021-12-01T00:00:00Z
Modified
2024-11-06T12:16:03.231308Z
Summary
[none]
Details

In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/modules/Wifi

Package

Name
platform/packages/modules/Wifi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2021-12-01

Affected versions

Other

12

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 1880.0,
                "function_hash": "334648985680967749890802445307058064647"
            },
            "id": "PUB-A-197749180-3f2dbe3d",
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/bd8881739d3a318cad4e2bef60b03547dd14715c",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "service/java/com/android/server/wifi/WifiServiceImpl.java",
                "function": "getConfiguredNetworks"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "242625264923287647758179166497465093176",
                    "44977527038889901187066130860769944062",
                    "101914245691445740562944914213089121830",
                    "97051022933864093902631334303086124073"
                ]
            },
            "id": "PUB-A-197749180-8dbf5092",
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/bd8881739d3a318cad4e2bef60b03547dd14715c",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "service/java/com/android/server/wifi/WifiServiceImpl.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Wifi/+/bd8881739d3a318cad4e2bef60b03547dd14715c"
    ],
    "spl": "2021-12-01",
    "severity": "Moderate",
    "types": [
        "EoP"
    ]
}