{"id":"ASB-A-162738636","details":"In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of the user's contacts with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-162738636","CVE-2021-0304"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2021-01-01"}]}],"versions":["8.0"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"},"deprecated":false,"digest":{"line_hashes":["172814152372971379604738369757960834824","276525397767147043961175588095650851955","653221487668372770577636779567614600","255097094575033678142722364645314315376","276999817505378290176111121896543922996","159088413308253743070575739752472227361","254691839537898685258196601681284906938","143435069698733465833622016909119801805","323571418124605274469497222629110476524","225001216039861746181979068129394574496","82382823808481889034091260075755123870","193562449742014061248069017114086543239","163952503613277355541151714250417807324","210562462640571290471343425607503975414","268563039876452948139642820172944052978","21155185772828919658729573693511646516","176470184966161345834246594496847711920","212638004904577046618457710750247042868","72366058261745304201725421282453264588","241128501526546534231805247352840910809","8441467631010747820365646517591411980","278583015521016519772770083557964669469","333415768923001303629626907853980968709","331156345207030069487658911139749664201","250608853271198906804507182020017152640"],"threshold":0.9},"id":"ASB-A-162738636-1305fcbb","signature_type":"Line"},{"target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"createEditAction"},"deprecated":false,"digest":{"length":1296,"function_hash":"244252906286592539083050450883158953571"},"id":"ASB-A-162738636-18a79c60","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"},{"target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"createShareAction"},"deprecated":false,"digest":{"function_hash":"324305078217090273298162499824054072935","length":1631},"id":"ASB-A-162738636-24bcc28e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"},{"id":"ASB-A-162738636-b453b720","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"createDeleteAction"},"deprecated":false,"digest":{"function_hash":"113674538978786862364512969242086919950","length":708}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"buildSmartActions"},"deprecated":false,"digest":{"length":809,"function_hash":"110650449270536247486706417310390274052"},"id":"ASB-A-162738636-d5c2c573"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"],"severity":"High","spl":"2021-01-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-162738636.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-01-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"],"severity":"High","spl":"2021-01-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"function":"createEditAction","file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"},"deprecated":false,"digest":{"function_hash":"244252906286592539083050450883158953571","length":1296},"id":"ASB-A-162738636-2900581a","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"110650449270536247486706417310390274052","length":809},"id":"ASB-A-162738636-4ba44e82","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"buildSmartActions"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["172814152372971379604738369757960834824","276525397767147043961175588095650851955","653221487668372770577636779567614600","255097094575033678142722364645314315376","276999817505378290176111121896543922996","159088413308253743070575739752472227361","254691839537898685258196601681284906938","143435069698733465833622016909119801805","323571418124605274469497222629110476524","225001216039861746181979068129394574496","82382823808481889034091260075755123870","193562449742014061248069017114086543239","163952503613277355541151714250417807324","210562462640571290471343425607503975414","268563039876452948139642820172944052978","21155185772828919658729573693511646516","176470184966161345834246594496847711920","212638004904577046618457710750247042868","72366058261745304201725421282453264588","241128501526546534231805247352840910809","8441467631010747820365646517591411980","278583015521016519772770083557964669469","333415768923001303629626907853980968709","331156345207030069487658911139749664201","250608853271198906804507182020017152640"]},"id":"ASB-A-162738636-53a3329a"},{"target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"createShareAction"},"deprecated":false,"digest":{"length":1631,"function_hash":"324305078217090273298162499824054072935"},"id":"ASB-A-162738636-5a534668","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"},{"deprecated":false,"digest":{"function_hash":"113674538978786862364512969242086919950","length":708},"id":"ASB-A-162738636-7045fd2a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"createDeleteAction"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-162738636.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-01-01"}]}],"versions":["9"],"ecosystem_specific":{"severity":"High","spl":"2021-01-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["172814152372971379604738369757960834824","276525397767147043961175588095650851955","653221487668372770577636779567614600","255097094575033678142722364645314315376","276999817505378290176111121896543922996","159088413308253743070575739752472227361","254691839537898685258196601681284906938","143435069698733465833622016909119801805","323571418124605274469497222629110476524","225001216039861746181979068129394574496","82382823808481889034091260075755123870","193562449742014061248069017114086543239","163952503613277355541151714250417807324","210562462640571290471343425607503975414","268563039876452948139642820172944052978","21155185772828919658729573693511646516","176470184966161345834246594496847711920","212638004904577046618457710750247042868","72366058261745304201725421282453264588","241128501526546534231805247352840910809","8441467631010747820365646517591411980","278583015521016519772770083557964669469","333415768923001303629626907853980968709","331156345207030069487658911139749664201","250608853271198906804507182020017152640"]},"id":"ASB-A-162738636-318472e6","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"createDeleteAction"},"deprecated":false,"digest":{"function_hash":"113674538978786862364512969242086919950","length":708},"id":"ASB-A-162738636-48d07a02"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"createEditAction"},"deprecated":false,"digest":{"function_hash":"244252906286592539083050450883158953571","length":1296},"id":"ASB-A-162738636-7cbf4370"},{"digest":{"length":1631,"function_hash":"324305078217090273298162499824054072935"},"id":"ASB-A-162738636-82f5a9df","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"createShareAction"},"deprecated":false},{"target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"buildSmartActions"},"deprecated":false,"digest":{"length":809,"function_hash":"110650449270536247486706417310390274052"},"id":"ASB-A-162738636-cd56013d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-162738636.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-01-01"}]}],"versions":["10"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java","function":"createDeleteAction"},"deprecated":false,"digest":{"function_hash":"113674538978786862364512969242086919950","length":708},"id":"ASB-A-162738636-08ddb67b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"function":"buildSmartActions","file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"},"deprecated":false,"digest":{"length":809,"function_hash":"110650449270536247486706417310390274052"},"id":"ASB-A-162738636-4579018a","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"244252906286592539083050450883158953571","length":1296},"id":"ASB-A-162738636-94b796dd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"function":"createEditAction","file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"}},{"deprecated":false,"digest":{"length":1631,"function_hash":"324305078217090273298162499824054072935"},"id":"ASB-A-162738636-9e9fff5e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"function":"createShareAction","file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"}},{"id":"ASB-A-162738636-c2f3201c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/SaveImageInBackgroundTask.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["172814152372971379604738369757960834824","276525397767147043961175588095650851955","653221487668372770577636779567614600","255097094575033678142722364645314315376","276999817505378290176111121896543922996","159088413308253743070575739752472227361","254691839537898685258196601681284906938","143435069698733465833622016909119801805","323571418124605274469497222629110476524","225001216039861746181979068129394574496","82382823808481889034091260075755123870","193562449742014061248069017114086543239","163952503613277355541151714250417807324","210562462640571290471343425607503975414","268563039876452948139642820172944052978","21155185772828919658729573693511646516","176470184966161345834246594496847711920","212638004904577046618457710750247042868","72366058261745304201725421282453264588","241128501526546534231805247352840910809","8441467631010747820365646517591411980","278583015521016519772770083557964669469","333415768923001303629626907853980968709","331156345207030069487658911139749664201","250608853271198906804507182020017152640"]}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/165607099624e7a9e5d5e513c43060086d088297"],"severity":"High","spl":"2021-01-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-162738636.json"}}],"schema_version":"1.9.0"}