ASB-A-178825358

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-178825358.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-178825358
Aliases
  • A-178825358
  • CVE-2021-0444
Published
2021-04-01T00:00:00Z
Modified
2024-08-07T19:29:59.770141Z
Summary
Android Contacts - Granting access to arbitrary content providers leads to expanded access
Details

In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android / platform/packages/apps/Contacts

Package

Name
platform/packages/apps/Contacts

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2021-04-01

Affected versions

8.*

8.1

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 288.0,
                "function_hash": "159371420014942396403050186739044013318"
            },
            "id": "ASB-A-178825358-47f7dcdc",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContact"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 774.0,
                "function_hash": "311755631475428335247053096977776939348"
            },
            "id": "ASB-A-178825358-6d3f25c9",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/quickcontact/QuickContactActivity.java",
                "function": "onActivityResult"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "29365743690095436116035910426004384681",
                    "248153419878083777489925353281781237821",
                    "338213729626767697559176296913147585825",
                    "81704783892045214501138446201965108387"
                ]
            },
            "id": "ASB-A-178825358-94fe613f",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "22237428926174014830969948776489499039",
                    "222433763452713413645502744421477528484",
                    "237799215702974302459419176970850696854",
                    "249202089332442014519245444425867216119",
                    "99358731625073202202248885635475701564",
                    "311212974029261427756239830472466338861",
                    "208148859901352770179186704174416180759",
                    "136366542135245285086604888586447098932",
                    "77292896923319988675646724550218902859",
                    "205507660814157486812817375384885986611",
                    "40778162712943993812527488243684196963",
                    "44528628381245122399359546834263222127",
                    "120892549873414972715780886559555343842",
                    "138909659181169984041828300175633922729",
                    "171053158414925326625314336350264402725",
                    "93155544689909178405178574550238387594",
                    "166876672002561956685357027912500719161",
                    "118544635469916353755715886732733681967",
                    "283631128690369748727888147171261318861"
                ]
            },
            "id": "ASB-A-178825358-af141001",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 105.0,
                "function_hash": "19995906043034311077628849478822950858"
            },
            "id": "ASB-A-178825358-c7e07c3f",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContact"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 121.0,
                "function_hash": "158389822995361825500072866711643727870"
            },
            "id": "ASB-A-178825358-f9ac5539",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContactForResult"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00"
    ],
    "spl": "2021-04-01",
    "severity": "High",
    "types": [
        "ID"
    ]
}

Android / platform/packages/apps/Contacts

Package

Name
platform/packages/apps/Contacts

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2021-04-01

Affected versions

Other

9

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 288.0,
                "function_hash": "159371420014942396403050186739044013318"
            },
            "id": "ASB-A-178825358-1591ebe5",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContact"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 121.0,
                "function_hash": "158389822995361825500072866711643727870"
            },
            "id": "ASB-A-178825358-1be17f5f",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContactForResult"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 105.0,
                "function_hash": "19995906043034311077628849478822950858"
            },
            "id": "ASB-A-178825358-6053f2a6",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContact"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "22237428926174014830969948776489499039",
                    "222433763452713413645502744421477528484",
                    "237799215702974302459419176970850696854",
                    "249202089332442014519245444425867216119",
                    "99358731625073202202248885635475701564",
                    "311212974029261427756239830472466338861",
                    "208148859901352770179186704174416180759",
                    "136366542135245285086604888586447098932",
                    "77292896923319988675646724550218902859",
                    "205507660814157486812817375384885986611",
                    "40778162712943993812527488243684196963",
                    "44528628381245122399359546834263222127",
                    "120892549873414972715780886559555343842",
                    "138909659181169984041828300175633922729",
                    "171053158414925326625314336350264402725",
                    "93155544689909178405178574550238387594",
                    "166876672002561956685357027912500719161",
                    "118544635469916353755715886732733681967",
                    "283631128690369748727888147171261318861"
                ]
            },
            "id": "ASB-A-178825358-7b6e5e08",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 774.0,
                "function_hash": "311755631475428335247053096977776939348"
            },
            "id": "ASB-A-178825358-aca3a21e",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/quickcontact/QuickContactActivity.java",
                "function": "onActivityResult"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "29365743690095436116035910426004384681",
                    "248153419878083777489925353281781237821",
                    "338213729626767697559176296913147585825",
                    "81704783892045214501138446201965108387"
                ]
            },
            "id": "ASB-A-178825358-ce8cadec",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00"
    ],
    "spl": "2021-04-01",
    "severity": "High",
    "types": [
        "ID"
    ]
}

Android / platform/packages/apps/Contacts

Package

Name
platform/packages/apps/Contacts

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2021-04-01

Affected versions

Other

10

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 121.0,
                "function_hash": "158389822995361825500072866711643727870"
            },
            "id": "ASB-A-178825358-10ef852c",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContactForResult"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "29365743690095436116035910426004384681",
                    "248153419878083777489925353281781237821",
                    "338213729626767697559176296913147585825",
                    "81704783892045214501138446201965108387"
                ]
            },
            "id": "ASB-A-178825358-2345c80d",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 288.0,
                "function_hash": "159371420014942396403050186739044013318"
            },
            "id": "ASB-A-178825358-36d334cf",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContact"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 774.0,
                "function_hash": "311755631475428335247053096977776939348"
            },
            "id": "ASB-A-178825358-a5b3ee5e",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/quickcontact/QuickContactActivity.java",
                "function": "onActivityResult"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 105.0,
                "function_hash": "19995906043034311077628849478822950858"
            },
            "id": "ASB-A-178825358-d60fd6ea",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContact"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "22237428926174014830969948776489499039",
                    "222433763452713413645502744421477528484",
                    "237799215702974302459419176970850696854",
                    "249202089332442014519245444425867216119",
                    "99358731625073202202248885635475701564",
                    "311212974029261427756239830472466338861",
                    "208148859901352770179186704174416180759",
                    "136366542135245285086604888586447098932",
                    "77292896923319988675646724550218902859",
                    "205507660814157486812817375384885986611",
                    "40778162712943993812527488243684196963",
                    "44528628381245122399359546834263222127",
                    "120892549873414972715780886559555343842",
                    "138909659181169984041828300175633922729",
                    "171053158414925326625314336350264402725",
                    "93155544689909178405178574550238387594",
                    "166876672002561956685357027912500719161",
                    "118544635469916353755715886732733681967",
                    "283631128690369748727888147171261318861"
                ]
            },
            "id": "ASB-A-178825358-f0d911ca",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00"
    ],
    "spl": "2021-04-01",
    "severity": "High",
    "types": [
        "ID"
    ]
}

Android / platform/packages/apps/Contacts

Package

Name
platform/packages/apps/Contacts

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-04-01

Affected versions

Other

11

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "29365743690095436116035910426004384681",
                    "248153419878083777489925353281781237821",
                    "338213729626767697559176296913147585825",
                    "81704783892045214501138446201965108387"
                ]
            },
            "id": "ASB-A-178825358-06811525",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/quickcontact/QuickContactActivity.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 105.0,
                "function_hash": "19995906043034311077628849478822950858"
            },
            "id": "ASB-A-178825358-0e7a8935",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContact"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 774.0,
                "function_hash": "311755631475428335247053096977776939348"
            },
            "id": "ASB-A-178825358-2f052175",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/quickcontact/QuickContactActivity.java",
                "function": "onActivityResult"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "22237428926174014830969948776489499039",
                    "222433763452713413645502744421477528484",
                    "237799215702974302459419176970850696854",
                    "249202089332442014519245444425867216119",
                    "99358731625073202202248885635475701564",
                    "311212974029261427756239830472466338861",
                    "208148859901352770179186704174416180759",
                    "136366542135245285086604888586447098932",
                    "77292896923319988675646724550218902859",
                    "205507660814157486812817375384885986611",
                    "40778162712943993812527488243684196963",
                    "44528628381245122399359546834263222127",
                    "120892549873414972715780886559555343842",
                    "138909659181169984041828300175633922729",
                    "171053158414925326625314336350264402725",
                    "93155544689909178405178574550238387594",
                    "166876672002561956685357027912500719161",
                    "118544635469916353755715886732733681967",
                    "283631128690369748727888147171261318861"
                ]
            },
            "id": "ASB-A-178825358-42a4678e",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 121.0,
                "function_hash": "158389822995361825500072866711643727870"
            },
            "id": "ASB-A-178825358-4ed126dc",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContactForResult"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 288.0,
                "function_hash": "159371420014942396403050186739044013318"
            },
            "id": "ASB-A-178825358-eab9d541",
            "source": "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/contacts/util/ImplicitIntentsUtil.java",
                "function": "startQuickContact"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Contacts/+/cec9f9094baa5225ca2ce9a64c8fcd6af7000b00"
    ],
    "spl": "2021-04-01",
    "severity": "High",
    "types": [
        "ID"
    ]
}