{"id":"ASB-A-143559931","details":"In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.","aliases":["A-143559931","CVE-2021-0954"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-12-01"}]}],"versions":["10"],"ecosystem_specific":{"severity":"High","spl":"2021-12-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"16801245604475508070394842503843383299","length":320},"id":"ASB-A-143559931-2c7cec93","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9bd0b2f9d067b917399c56f979ffc6a3e5a3860b","target":{"file":"core/java/com/android/internal/app/ResolverActivity.java","function":"onStop"}},{"digest":{"line_hashes":["177220730112562362975481177243944126788","316882834124858129675433101246921810016","231927513902354843655354166144287077118","99136575364451425205665976481226677084","78394746494317996597008007733940275779","246288416312934876901705751763189094889","312147092849622341844593337551332555717","47431250032964379252844522180322325121","235280558912958067013798381908610794370","149538627761328644360586179420645645861","302094335562652228694424274081590939127","271710277708292450602872488059474037478","37302441978418217021315186937300840365"],"threshold":0.9},"id":"ASB-A-143559931-dadc7d95","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9bd0b2f9d067b917399c56f979ffc6a3e5a3860b","target":{"file":"core/java/com/android/internal/app/ResolverActivity.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9bd0b2f9d067b917399c56f979ffc6a3e5a3860b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-143559931.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-12-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-12-01","types":["EoP"],"vanir_signatures":[{"target":{"function":"onStop","file":"core/java/com/android/internal/app/ResolverActivity.java"},"deprecated":false,"digest":{"length":513,"function_hash":"38272188515421580659518387826528323524"},"id":"ASB-A-143559931-04a4d8be","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/978809e428bf44be1f9a86d1284aa61103b6f1cf"},{"target":{"file":"core/java/com/android/internal/app/ResolverActivity.java","function":"onStart"},"deprecated":false,"digest":{"function_hash":"88241085435229882507438695390087493891","length":171},"id":"ASB-A-143559931-9a3710a9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/978809e428bf44be1f9a86d1284aa61103b6f1cf"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/978809e428bf44be1f9a86d1284aa61103b6f1cf","target":{"file":"core/java/com/android/internal/app/ResolverActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["3736309124304128800522875318419199755","249972676102972917997781457939573722604","835901836683609606547081771568234249","79249505377464030980742917383562096806","231927513902354843655354166144287077118","99136575364451425205665976481226677084","78394746494317996597008007733940275779","246288416312934876901705751763189094889","210245297293372535021467376282403572175","58043491323002696992405922306187614610","194135404117672918838722418416411749564","217789918901420698290343034740227962148","11506008236632799329301604970979863557","294969520337585549056746446486149671345","224437871614645284116344319445284762728","93887958247139041406027751750292654676","149538627761328644360586179420645645861","302094335562652228694424274081590939127","141729849074845958785237468684576940701","272219284389140227449533747056249406585"]},"id":"ASB-A-143559931-d10f7f7a","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/978809e428bf44be1f9a86d1284aa61103b6f1cf"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-143559931.json"}}],"schema_version":"1.9.0"}