{"id":"ASB-A-171221090","details":"In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-171221090","CVE-2021-0433"],"modified":"2026-09-14T15:29:34.961045646Z","published":"2021-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/75419418cfd2f47439d0f65418f4a771cc58d14b"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/8e4928820e972a00342c00cf67e8795a094e6e68"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-04-01"}]}],"versions":["8.1"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9cbc2c3d36d35afc152373443078324b94162d13","target":{"file":"packages/CompanionDeviceManager/src/com/android/companiondevicemanager/DeviceChooserActivity.java"},"deprecated":false,"digest":{"line_hashes":["314083665189274489445234553684849085148","154192349569499426929416480131978550112","315948163936451196152670850328502606646","193187494024751179663213999477786420556","259913899965721040735513937298522650968","214351656543565372760704845579509707376"],"threshold":0.9},"id":"ASB-A-171221090-6358bf10","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9cbc2c3d36d35afc152373443078324b94162d13","target":{"file":"packages/CompanionDeviceManager/src/com/android/companiondevicemanager/DeviceChooserActivity.java","function":"onCreate"},"deprecated":false,"digest":{"function_hash":"4743461229872362214825002377195338920","length":1382},"id":"ASB-A-171221090-93d47064","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9cbc2c3d36d35afc152373443078324b94162d13","https://android.googlesource.com/platform/frameworks/base/+/6a5777dd5020378507b97511925a0369f8f408b4"],"severity":"High","spl":"2021-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-171221090.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-04-01"}]}],"versions":["9"],"ecosystem_specific":{"severity":"High","spl":"2021-04-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-171221090-ad35894b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/068221bbba52ccf652e20f4a42037d9ee05a29c9","target":{"function":"onCreate","file":"packages/CompanionDeviceManager/src/com/android/companiondevicemanager/DeviceChooserActivity.java"},"deprecated":false,"digest":{"length":1436,"function_hash":"284767279328267718341840890876750675319"}},{"digest":{"threshold":0.9,"line_hashes":["314083665189274489445234553684849085148","154192349569499426929416480131978550112","315948163936451196152670850328502606646","193187494024751179663213999477786420556","259913899965721040735513937298522650968","214351656543565372760704845579509707376"]},"id":"ASB-A-171221090-d16a8f2f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/068221bbba52ccf652e20f4a42037d9ee05a29c9","target":{"file":"packages/CompanionDeviceManager/src/com/android/companiondevicemanager/DeviceChooserActivity.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/068221bbba52ccf652e20f4a42037d9ee05a29c9","https://android.googlesource.com/platform/frameworks/base/+/486773ff4567bbfd63f7f57dc9cb1f0ffb8a6c12"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-171221090.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-04-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2d5a635fec95667d96ba9dd1007d393299018cb2","https://android.googlesource.com/platform/frameworks/base/+/30e9d28c22e7c21ab8e06ba54d2df665fba9ed5e"],"severity":"High","spl":"2021-04-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["314083665189274489445234553684849085148","154192349569499426929416480131978550112","315948163936451196152670850328502606646","193187494024751179663213999477786420556","259913899965721040735513937298522650968"],"threshold":0.9},"id":"ASB-A-171221090-d05ac596","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2d5a635fec95667d96ba9dd1007d393299018cb2","target":{"file":"packages/CompanionDeviceManager/src/com/android/companiondevicemanager/DeviceChooserActivity.java"},"deprecated":false},{"digest":{"length":1436,"function_hash":"284767279328267718341840890876750675319"},"id":"ASB-A-171221090-e256bd26","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2d5a635fec95667d96ba9dd1007d393299018cb2","target":{"function":"onCreate","file":"packages/CompanionDeviceManager/src/com/android/companiondevicemanager/DeviceChooserActivity.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-171221090.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-04-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d7f514abbe0bee01003ef694a67abfaa30667b4d","https://android.googlesource.com/platform/frameworks/base/+/f717d7195fa8654a7c9e4e28bbe473f8513eef64"],"severity":"High","spl":"2021-04-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d7f514abbe0bee01003ef694a67abfaa30667b4d","target":{"file":"packages/CompanionDeviceManager/src/com/android/companiondevicemanager/DeviceChooserActivity.java"},"deprecated":false,"digest":{"line_hashes":["314083665189274489445234553684849085148","154192349569499426929416480131978550112","315948163936451196152670850328502606646","193187494024751179663213999477786420556","259913899965721040735513937298522650968"],"threshold":0.9},"id":"ASB-A-171221090-b8ed302a","signature_type":"Line"},{"id":"ASB-A-171221090-b9f1680f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d7f514abbe0bee01003ef694a67abfaa30667b4d","target":{"file":"packages/CompanionDeviceManager/src/com/android/companiondevicemanager/DeviceChooserActivity.java","function":"onCreate"},"deprecated":false,"digest":{"length":1436,"function_hash":"284767279328267718341840890876750675319"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-171221090.json"}}],"schema_version":"1.9.0"}