{"id":"ASB-A-172841550","details":"In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.","aliases":["A-172841550","CVE-2021-0391"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/169f089a26b322b297e8b224e3a7274bc18a986a"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-03-01"}]}],"versions":["8.1"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"file":"core/java/android/accounts/ChooseAccountActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["178359768545536217155368309597846025604","183806530238371095629457413808596688362","5700341369694652380894400123268701636","224382107640148875120939260169729141290","312878781065474030802867852517107064721","4140147898571390373091038897603107506","279634278991220379218199910692652348185","228285847718047407535281181317771200063","231008373837216149174120767247680962482","136021868930287926586881329362937979609","64027953446879163076880012589637219411","213786331953044204028955855579177818240","219072579963742925253988223863639130972"]},"id":"ASB-A-172841550-37308c25","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java"},"deprecated":false,"digest":{"line_hashes":["282000476218600853847168279466067212598","301130012248540230541322432552879113061","40806355365134196489332550806188172707","183696238338071455145703843867476514601","34109602997009970710246737092766793521","302609440196899580451458479499124385845","331891034949669426949378089469598408524","128336888518402923848391216647591119861"],"threshold":0.9},"id":"ASB-A-172841550-56351a4f","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-172841550-7b454609","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"function":"onCreate","file":"core/java/android/accounts/ChooseAccountActivity.java"},"deprecated":false,"digest":{"function_hash":"207624804220701369924702465345216722096","length":1869}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java","function":"onCreate"},"deprecated":false,"digest":{"length":1792,"function_hash":"244621459812270657650929719705734223593"},"id":"ASB-A-172841550-872ff582","signature_type":"Function"},{"target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java","function":"onCreate"},"deprecated":false,"digest":{"length":3223,"function_hash":"283414556461806429582274343976581777224"},"id":"ASB-A-172841550-8bd6880c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["4140147898571390373091038897603107506","279634278991220379218199910692652348185","74546233059789329768633873525495880689","3154508882205384628659795506021986670","40951327312221610315975909859363774457","202755157990852472814754154122068967221","309684986002671021758820318678301498666"]},"id":"ASB-A-172841550-9b92d03a"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2"],"severity":"High","spl":"2021-03-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172841550.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-03-01"}]}],"versions":["9"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"length":3223,"function_hash":"283414556461806429582274343976581777224"},"id":"ASB-A-172841550-2274fc4f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"function":"onCreate","file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"file":"core/java/android/accounts/ChooseAccountActivity.java","function":"onCreate"},"deprecated":false,"digest":{"length":1869,"function_hash":"207624804220701369924702465345216722096"},"id":"ASB-A-172841550-5bcacc4b"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["178359768545536217155368309597846025604","183806530238371095629457413808596688362","5700341369694652380894400123268701636","224382107640148875120939260169729141290","312878781065474030802867852517107064721","4140147898571390373091038897603107506","279634278991220379218199910692652348185","228285847718047407535281181317771200063","231008373837216149174120767247680962482","136021868930287926586881329362937979609","64027953446879163076880012589637219411","213786331953044204028955855579177818240","219072579963742925253988223863639130972"]},"id":"ASB-A-172841550-6371a1d6","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"file":"core/java/android/accounts/ChooseAccountActivity.java"}},{"deprecated":false,"digest":{"line_hashes":["282000476218600853847168279466067212598","301130012248540230541322432552879113061","40806355365134196489332550806188172707","183696238338071455145703843867476514601","34109602997009970710246737092766793521","302609440196899580451458479499124385845","331891034949669426949378089469598408524","128336888518402923848391216647591119861"],"threshold":0.9},"id":"ASB-A-172841550-7ffe6d8b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java"}},{"digest":{"line_hashes":["4140147898571390373091038897603107506","279634278991220379218199910692652348185","74546233059789329768633873525495880689","3154508882205384628659795506021986670","40951327312221610315975909859363774457","202755157990852472814754154122068967221","309684986002671021758820318678301498666"],"threshold":0.9},"id":"ASB-A-172841550-e4535032","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2","target":{"function":"onCreate","file":"core/java/android/accounts/ChooseAccountTypeActivity.java"},"deprecated":false,"digest":{"function_hash":"244621459812270657650929719705734223593","length":1792},"id":"ASB-A-172841550-ecd6870e","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2"],"severity":"High","spl":"2021-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172841550.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-03-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2021-03-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"file":"core/java/android/accounts/ChooseAccountActivity.java"},"deprecated":false,"digest":{"line_hashes":["200457836423934089536685332323233631299","26535511759143710878878621249215939996","299407338395464618455965411335284229449","178359768545536217155368309597846025604","183806530238371095629457413808596688362","5700341369694652380894400123268701636","224382107640148875120939260169729141290","312878781065474030802867852517107064721","4140147898571390373091038897603107506","279634278991220379218199910692652348185","228285847718047407535281181317771200063","231008373837216149174120767247680962482","136021868930287926586881329362937979609","64027953446879163076880012589637219411","213786331953044204028955855579177818240","219072579963742925253988223863639130972"],"threshold":0.9},"id":"ASB-A-172841550-05268c13","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"244621459812270657650929719705734223593","length":1792},"id":"ASB-A-172841550-607dbc74","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java","function":"onCreate"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["4140147898571390373091038897603107506","279634278991220379218199910692652348185","74546233059789329768633873525495880689","3154508882205384628659795506021986670","40951327312221610315975909859363774457","202755157990852472814754154122068967221","309684986002671021758820318678301498666"]},"id":"ASB-A-172841550-cf7d3616"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"function":"onCreate","file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java"},"deprecated":false,"digest":{"length":3231,"function_hash":"300099533195188535265057815411891254940"},"id":"ASB-A-172841550-d3b2011e"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java"},"deprecated":false,"digest":{"line_hashes":["338756025168672841503944107873105376071","80165988263966893077074478006064266377","301130012248540230541322432552879113061","287419706935573716614855437391569370395","35498394937681637763408142158138900005","40806355365134196489332550806188172707","183696238338071455145703843867476514601","34109602997009970710246737092766793521","302609440196899580451458479499124385845","331891034949669426949378089469598408524","128336888518402923848391216647591119861"],"threshold":0.9},"id":"ASB-A-172841550-dcff1475","signature_type":"Line"},{"id":"ASB-A-172841550-e5d4b407","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"file":"core/java/android/accounts/ChooseAccountActivity.java","function":"onCreate"},"deprecated":false,"digest":{"function_hash":"58421124205205013095236493481565110791","length":1877}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172841550.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-03-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["4140147898571390373091038897603107506","279634278991220379218199910692652348185","74546233059789329768633873525495880689","3154508882205384628659795506021986670","40951327312221610315975909859363774457","202755157990852472814754154122068967221","309684986002671021758820318678301498666"]},"id":"ASB-A-172841550-2fbcc844","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086"},{"deprecated":false,"digest":{"line_hashes":["200457836423934089536685332323233631299","26535511759143710878878621249215939996","299407338395464618455965411335284229449","178359768545536217155368309597846025604","183806530238371095629457413808596688362","5700341369694652380894400123268701636","224382107640148875120939260169729141290","312878781065474030802867852517107064721","4140147898571390373091038897603107506","279634278991220379218199910692652348185","228285847718047407535281181317771200063","231008373837216149174120767247680962482","136021868930287926586881329362937979609","64027953446879163076880012589637219411","213786331953044204028955855579177818240","219072579963742925253988223863639130972"],"threshold":0.9},"id":"ASB-A-172841550-4e3e6540","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"file":"core/java/android/accounts/ChooseAccountActivity.java"}},{"id":"ASB-A-172841550-9a6d15e6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java","function":"onCreate"},"deprecated":false,"digest":{"length":3231,"function_hash":"300099533195188535265057815411891254940"}},{"deprecated":false,"digest":{"length":1792,"function_hash":"244621459812270657650929719705734223593"},"id":"ASB-A-172841550-9bf975b8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java","function":"onCreate"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["338756025168672841503944107873105376071","80165988263966893077074478006064266377","301130012248540230541322432552879113061","287419706935573716614855437391569370395","35498394937681637763408142158138900005","40806355365134196489332550806188172707","183696238338071455145703843867476514601","34109602997009970710246737092766793521","302609440196899580451458479499124385845","331891034949669426949378089469598408524","128336888518402923848391216647591119861"]},"id":"ASB-A-172841550-bd42d3b0","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086","target":{"function":"onCreate","file":"core/java/android/accounts/ChooseAccountActivity.java"},"deprecated":false,"digest":{"function_hash":"58421124205205013095236493481565110791","length":1877},"id":"ASB-A-172841550-bf8a02ea","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086"],"severity":"High","spl":"2021-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172841550.json"}}],"schema_version":"1.9.0"}