ASB-A-208817618

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-208817618.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-208817618

Aliases

A-208817618
CVE-2021-39709

Published

2022-03-01T00:00:00Z

Modified

2024-08-07T19:29:12.467985Z

Summary

PendingIntent hijack vulnerability in SipAccountRegistry.java

Details

In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/services/Telephony

Package

Name: platform/packages/services/Telephony

Affected ranges

Type: ECOSYSTEM
Events: Introduced

12:0

Fixed

12:2022-03-01

Affected versions

Other

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "158291700363671997969282619796746425099",
                    "23548204413418677961654620975875192303",
                    "241457207066407836534831236518584812194",
                    "25099840396617722435600275852974823298"
                ]
            },
            "id": "ASB-A-208817618-0bca6ed5",
            "source": "https://android.googlesource.com/platform/packages/services/Telephony/+/7c9b65a4de4540a50a16781e9f55857544453bc2",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "sip/src/com/android/services/telephony/sip/SipAccountRegistry.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1155.0,
                "function_hash": "95864006194366619773422277154323815003"
            },
            "id": "ASB-A-208817618-6c5b1f33",
            "source": "https://android.googlesource.com/platform/packages/services/Telephony/+/7c9b65a4de4540a50a16781e9f55857544453bc2",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "sip/src/com/android/services/telephony/sip/SipAccountRegistry.java",
                "function": "sendSipAccountsRemovedNotification"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/services/Telephony/+/7c9b65a4de4540a50a16781e9f55857544453bc2"
    ],
    "spl": "2022-03-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}