{"id":"ASB-A-159624555","details":"In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-159624555","CVE-2021-0682"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/5f2616cce92192fdf529117a63c7946087ce9979"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/93f167b8f577027f5744dc8c03c8f4c256735eb8"],"severity":"High","spl":"2021-09-01","types":["ID"],"vanir_signatures":[{"digest":{"length":437,"function_hash":"75403572291900251402800288404936096474"},"id":"ASB-A-159624555-51c97bf8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/93f167b8f577027f5744dc8c03c8f4c256735eb8","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"sendAccessibilityEvent"},"deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["92498848191069466092222126922485971270","65041935603204192840723665464151945450","339674721772209413281979408130928599869","201608410934937031541543181524573951178","32163582248344005832108534133936724048","25965682776163692576899563424569715093","267708305245113452024208228160191879244","246014632333981967826004685269531913786","150523377781151915408209844388548707548","158686701729319315411122897789048614190","35581597285240808296277725000076282916","42231322040038733498808506484382845776","172484534436847483227282879811115012358","263205558041395604472807198803656677753","256892666641338777685044173271654975407","174940933925774713663290117590139296991","14740851157531722587355820869139065060","119143170322131313896848543823826318552","325502569584188076507953913947343808158","156082532344662398572145123716949750816","82703287650791591770710267788260531852","266704107741786978678594094864540290841","296507674053513201859659860164831146816","170426873783206624507271577176082369556","196256208067729569464098546055049612867","307940008054439690991819820968271580886","142790914983824335325714296563471263582","175844919543013441195734297147786783750","29889121688857335673035163703266516558","57363209687634864166073354590363805036","267430687161799427355071746949077206887","225648164962881739716022892581273451105","261786311612812442669683402564561374479","296197565612008786819207926844410431484","50603770596340394536140832293694891486","260387501309450439381361986826326613876"],"threshold":0.9},"id":"ASB-A-159624555-6e1e5486","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/93f167b8f577027f5744dc8c03c8f4c256735eb8"},{"target":{"function":"buzzBeepBlinkLocked","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"function_hash":"160142011874012977331377936901549308246","length":2319},"id":"ASB-A-159624555-c8f0361c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/93f167b8f577027f5744dc8c03c8f4c256735eb8"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/93f167b8f577027f5744dc8c03c8f4c256735eb8","target":{"function":"onBootPhase","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"function_hash":"190352307311690693956168260148758677339","length":558},"id":"ASB-A-159624555-e121e350","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-159624555.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-09-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"31215627447559021458081627794383742020","length":1198},"id":"ASB-A-159624555-2492068e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0caa60087fe6859ae0b2d96c59cc6643c06c17fc","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"onBootPhase"}},{"digest":{"line_hashes":["48744699434131953465242130325956471125","209179148642430074595816025921100442721","287759642462721839171715678043724351783","96501031133167593571244584695794902533","212179371336635971381397715158376386156","112233712386258365335114926834639048571","50214528746936815886182360473692021606","126109581854644738976045486305609977620","169279390404585177999594496235529362548","6396691220960814944426278550038312284","208879514335488209256613446029007994149","246014632333981967826004685269531913786","150523377781151915408209844388548707548","132494616344946002114161713088397275177","235209677611016730855426344193674978859","112600124039104890000373992658161005830","238377230647358381838615529342638142415","136921981610011995365740308689499969372","245909530202272826180671118821559391034","71512400644782231434735777560890646104","335279095730612211066811396096957415293","288080665962860764931388789900385168680","94436026648277766987464040648862843626","296722958804568823469489750611300921964","291002332634451589904760724822478533537","23018416963043446710462771359362716567","139528139007037105423577291416413587378","170426873783206624507271577176082369556","196256208067729569464098546055049612867","307940008054439690991819820968271580886","142790914983824335325714296563471263582","175844919543013441195734297147786783750","29889121688857335673035163703266516558","57363209687634864166073354590363805036","267430687161799427355071746949077206887","225648164962881739716022892581273451105","261786311612812442669683402564561374479","296197565612008786819207926844410431484","50603770596340394536140832293694891486","260387501309450439381361986826326613876"],"threshold":0.9},"id":"ASB-A-159624555-5cb9fe55","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0caa60087fe6859ae0b2d96c59cc6643c06c17fc","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"75403572291900251402800288404936096474","length":437},"id":"ASB-A-159624555-bd0041ef","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0caa60087fe6859ae0b2d96c59cc6643c06c17fc","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"sendAccessibilityEvent"}},{"deprecated":false,"digest":{"function_hash":"161464696418810758762591759412413888437","length":3318},"id":"ASB-A-159624555-df3208ec","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0caa60087fe6859ae0b2d96c59cc6643c06c17fc","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"buzzBeepBlinkLocked"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0caa60087fe6859ae0b2d96c59cc6643c06c17fc"],"severity":"High","spl":"2021-09-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-159624555.json"}}],"schema_version":"1.9.0"}