{"id":"ASB-A-155648771","details":"In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. This could lead to local escalation of privilege allowing a malicious app to silently gain access to a dangerous permission with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-155648771","CVE-2021-0307"],"modified":"2026-05-19T16:54:37.272608834Z","published":"2021-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/cts/+/a8a90255d43845e307b6d133c710b802dbece622"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/a9f825922e1870575aeab11a2035903c217233c9"}],"affected":[{"package":{"name":"platform/cts","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-01-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/cts/+/a8a90255d43845e307b6d133c710b802dbece622"],"severity":"High","spl":"2021-01-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-155648771.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-01-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a9f825922e1870575aeab11a2035903c217233c9"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["42944500549505635161036987220393129218","32374468865149567811517005251175270874","182416145722170882610837408393988471387","73133442436564090363183519967048906082"]},"id":"ASB-A-155648771-4acbd12e","source":"https://android.googlesource.com/platform/frameworks/base/+/a9f825922e1870575aeab11a2035903c217233c9","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"},"signature_version":"v1","signature_type":"Line"},{"deprecated":false,"signature_version":"v1","id":"ASB-A-155648771-ea459bf9","source":"https://android.googlesource.com/platform/frameworks/base/+/a9f825922e1870575aeab11a2035903c217233c9","signature_type":"Function","digest":{"function_hash":"260801340390853921484827258252259891230","length":1646},"target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java","function":"updatePermissionSourcePackage"}}],"severity":"High","spl":"2021-01-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-155648771.json"}},{"package":{"name":"platform/cts","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-01-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/cts/+/a8a90255d43845e307b6d133c710b802dbece622"],"severity":"High","spl":"2021-01-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-155648771.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-01-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a9f825922e1870575aeab11a2035903c217233c9"],"spl":"2021-01-01","severity":"High","vanir_signatures":[{"deprecated":false,"signature_type":"Function","id":"ASB-A-155648771-9979c947","source":"https://android.googlesource.com/platform/frameworks/base/+/a9f825922e1870575aeab11a2035903c217233c9","digest":{"function_hash":"260801340390853921484827258252259891230","length":1646},"signature_version":"v1","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java","function":"updatePermissionSourcePackage"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["42944500549505635161036987220393129218","32374468865149567811517005251175270874","182416145722170882610837408393988471387","73133442436564090363183519967048906082"]},"id":"ASB-A-155648771-dcfd25c1","source":"https://android.googlesource.com/platform/frameworks/base/+/a9f825922e1870575aeab11a2035903c217233c9","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"},"signature_version":"v1","signature_type":"Line"}],"types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-155648771.json"}}],"schema_version":"1.7.5"}