{"id":"ASB-A-175213041","details":"In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-175213041","CVE-2021-0590"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-07-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/63c67f0304d973f8f26e77b866eda2b1d34340d3"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/NetworkStack/+/94eb94069bfcee96196d5409beab86c4b1f0407b"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-07-01"}]}],"versions":["8.1"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"length":945,"function_hash":"165508312827839804167762173142521138558"},"id":"ASB-A-175213041-6348d280","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0684e7a64a2c449363b3a8f5f4a420acddf6bd51","target":{"file":"services/core/java/com/android/server/connectivity/NetworkMonitor.java","function":"isCaptivePortal"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/0684e7a64a2c449363b3a8f5f4a420acddf6bd51","target":{"file":"services/core/java/com/android/server/connectivity/NetworkMonitor.java"},"deprecated":false,"digest":{"line_hashes":["192091335874831379166521036876901787103","169197724653649282720509085289442417781","208004230486688587688003235902508120656","331116181087855749553934094340918570616","164059327325726142653643893080497723352","163298731485956074256439202637455418755","104021481237209726823821472304700347919","309651573845031740216600601282016230182","18292099599111069282723131625269438768","114411378861209136624198277456063278873","148687050897699507703943192290794641193","309723787818252513435864456047525328880","118350219967901465183170080686583047332","237783373439206868928465441828460602207","31221661206932818218530325429100349858","130860841047745996523248579716778943518","323721253882349926282172900186714788847","34617779458415832996737337783242461674","58682841875137890503776725597770572554","11386208596754376726140100039205061079","62334988756864537125747404957208578966","212586223882253544406511024569140260225","6233033292654131003635533959574939897","14460839856464729568315317276841922340","84479525627654952987573066210188021744","98251654510208559457940118302192837867","54272596277437255631680359552087494455","193520293365514018202188428102617295715","166878084698333511980090073209993622723","150521125515620422396852328346986606751","247045220510297215757573216165239116468","124872499951818814235655971926244106065","87919318007084312371260925270513343674","311539343714776749027774343276041067694","169927763702828149806186551575776024520","325159118864488882197808472027110405008","79507197577443479656314633021426971350","256456530971095428750582404174157526079","90644155851854034492922219112754666488","272085202680370618701032089401368109878","4276680953482795172216497840896135533","223789723286484361920516154476496219085","307866708329461282236221864982563397551","206758277613036292662329330279665668871","124430476736656116557858952578437089497","80411888260237180029939620460591828374","24083387269244775119985238728807344581","239828956657816914266999411159079724840","142758547864834631303034698211755447693","223853093871419938870806308379921674145","14402924284834788218379169342983038653","75087877813425580693979561577677972601","280281108911757262331842937786164717220","316975674180210961183681322261446309442","246658494821398651547684799653680613017","158773732225562412197097310231257745660","249531161423286343615435317259452521352","233078531075242106871546232714068381019","65579948478425408077703977711286587503","2744302963351029642407321290106428319","140317991689104724787106036352803746917","196639707504233265341262370676893658956","336702071664703573982583731160209146197","228311360675667255940741123935377832490","73261106590099199211957939545565349051","10778603883749505952319411396014415014","99560542930975127319925493217495536214","307216894294627524705006761160099609969","320007266579647637215294921391367390059","10225678754577988064903501991420786475","135158935940634340147811027299013913211","299910505499660051660457080880541677769","23016033153767443119132400713159596778","44439977790617997059742875613425569121","192675844819120326617134131109800499942","124315303859670534226475322592453873994","283336037210194391453403956355864355102","85742656558606474666347934816625219358","60706600581145589050699912855000670267","113779180403875389047605609855324596887","239649396787918723387922184928108089402","55822746623682030988382632998829406501","90968541475224089254562823830783319108","132930308015523481939121848232039794335","176877175788592867406947224942916504492","249670476456149730636383951367794733108","318490320609252345465545722481549607651","201115877398602347745145759456890043933","68721144443180292168120125665098578882","114312524595321849816330426155766549260","293949540968280903538352693917672011553","53269493975263036937840712408954927514","260253245832933644495325604882506999827","273529686992785943320602329565546976451","320650024328577708438415725596021175006","41377532252121520615103829248460588040","76302729051913502900507051750879628529","276590637687047541168331805472945007360","322004006236794079198776585171439081328","190874842086485932969180928476765972870","259765638724667099152772797065401304363","314797922369052973154212619230984933084","321026775177101004932984670301510828149","310935023113853475861155466455956243882","116142608575638995126587177657302806501","236581811040424500319328817149135643801","99306225805098596665013190223984061214","70641284307619532936371391836093321814"],"threshold":0.9},"id":"ASB-A-175213041-eccab534","signature_type":"Line","signature_version":"v1"},{"target":{"function":"sendNetworkConditionsBroadcast","file":"services/core/java/com/android/server/connectivity/NetworkMonitor.java"},"deprecated":false,"digest":{"function_hash":"334239069931811394713936510697991205122","length":2179},"id":"ASB-A-175213041-f2293515","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0684e7a64a2c449363b3a8f5f4a420acddf6bd51"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0684e7a64a2c449363b3a8f5f4a420acddf6bd51"],"severity":"High","spl":"2021-07-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-175213041.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-07-01"}]}],"versions":["9"],"ecosystem_specific":{"severity":"High","spl":"2021-07-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e97d1f548455e76e4faa7884a5b0fab48e47ca5c","target":{"file":"services/core/java/com/android/server/connectivity/NetworkMonitor.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["192091335874831379166521036876901787103","169197724653649282720509085289442417781","208004230486688587688003235902508120656","331116181087855749553934094340918570616","164059327325726142653643893080497723352","163298731485956074256439202637455418755","104021481237209726823821472304700347919","309651573845031740216600601282016230182","18292099599111069282723131625269438768","114411378861209136624198277456063278873","148687050897699507703943192290794641193","309723787818252513435864456047525328880","118350219967901465183170080686583047332","237783373439206868928465441828460602207","31221661206932818218530325429100349858","130860841047745996523248579716778943518","323721253882349926282172900186714788847","34617779458415832996737337783242461674","58682841875137890503776725597770572554","146728689379254164956257250973304813247","58078422125318828296143668599924168871","127447034926684864298220364339391091132","135165145879953311782879588661180576822","238489283617217334160480507799905221349","99662766610354708736209197012910335849","325159118864488882197808472027110405008","79507197577443479656314633021426971350","256456530971095428750582404174157526079","90644155851854034492922219112754666488","272085202680370618701032089401368109878","4276680953482795172216497840896135533","223789723286484361920516154476496219085","307866708329461282236221864982563397551","199965275151884961818028728877012896339","133094830660243204620886427508746843803","282967597672587657562664882627840317471","325504364679429866145028850309683927731","92381710153284680043630170402987922680","285413695588279684132301332500209428838","332560663317211831837709508656087807536","53814407712561477842062434912505797704","83137659062499099820971312708404103054","271559532268223703561341792474199260793","339685504615361596829369165790554709742","280281108911757262331842937786164717220","97815823094256315131153407988551900104","318131442652403214757809480999797805680","101332142990611494767141990918551117357","258747487049984891430510051317511860315","153334250727412832343419941018785346038","202525753736513498153146110149628000989","202055076118403333741932512861348353847","65579948478425408077703977711286587503","2744302963351029642407321290106428319","140317991689104724787106036352803746917","216898176606819937201667649798332614853","207785580963667357597867686612925151014","251966791559083048612714226144100630250","146343278486768864444127972592679900523","308956784436997656239435751356082408651","10778603883749505952319411396014415014","99560542930975127319925493217495536214","307216894294627524705006761160099609969","320007266579647637215294921391367390059","10225678754577988064903501991420786475","135158935940634340147811027299013913211","299910505499660051660457080880541677769","23016033153767443119132400713159596778","44439977790617997059742875613425569121","192675844819120326617134131109800499942","142200271227144404877789269717624624302","107195121064539093357329572958537778948","322493279491030604050122649263359515182","337471080493040620638807332735770981783","62504530440977010484790869888745306853","248512464475573890147584734309026077013","33841053609547746143740943281131601348","54780532444411145340746757127437274702","301697350383053522881565031491944196736","159123148094714003202515566358081431975","56796802135634026935095934905564520667","225014035708581856861705845972135353428","205663317571748457866931632158049399609","68721144443180292168120125665098578882","114312524595321849816330426155766549260","293949540968280903538352693917672011553","53269493975263036937840712408954927514","260253245832933644495325604882506999827","273529686992785943320602329565546976451","320650024328577708438415725596021175006","190650001971231758528669896624351052399","86714931146749678402911500152525532283","135831745045449150056245704920089868431","123285209470450544520530122276522341967","75508718829656749977413608295737040373","103336997192612836489146876530068034772","70496923309171624713164128460934717256","171028256325424663894844327864774997191","35534033691236543463753242975373641189","103363641607758956414065719732689412085","195266955478039457419488431266846182044","225287476383452930148659666231477159985","65419587226743886342695946983496838584","309565979714686735264093882205566670932","315086115696383356696543632015329056529","8331157939997106407743799446496640594","228480441384833796888806675116095874278","146479654963852694182304395825660736809"]},"id":"ASB-A-175213041-0f30a511"},{"id":"ASB-A-175213041-1e03912f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e97d1f548455e76e4faa7884a5b0fab48e47ca5c","target":{"file":"services/core/java/com/android/server/connectivity/NetworkMonitor.java","function":"isCaptivePortal"},"deprecated":false,"digest":{"length":945,"function_hash":"165508312827839804167762173142521138558"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e97d1f548455e76e4faa7884a5b0fab48e47ca5c","target":{"function":"getWifiScansAlwaysAvailableDisabled","file":"services/core/java/com/android/server/connectivity/NetworkMonitor.java"},"deprecated":false,"digest":{"function_hash":"217258966775035245819698159421317002344","length":123},"id":"ASB-A-175213041-1f55b58d","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"136814156978411865273025610000844043456","length":2410},"id":"ASB-A-175213041-b60fc3e8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e97d1f548455e76e4faa7884a5b0fab48e47ca5c","target":{"file":"services/core/java/com/android/server/connectivity/NetworkMonitor.java","function":"sendNetworkConditionsBroadcast"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e97d1f548455e76e4faa7884a5b0fab48e47ca5c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-175213041.json"}},{"package":{"name":"platform/packages/modules/NetworkStack","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-07-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2021-07-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-175213041-1c90e118","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/NetworkStack/+/f5459e4d185c57a420c5e644fcaab956e1d23986","target":{"file":"src/com/android/server/connectivity/NetworkMonitor.java","function":"isCaptivePortal"},"deprecated":false,"digest":{"length":1260,"function_hash":"163363048998655280737148593168271331769"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/NetworkStack/+/f5459e4d185c57a420c5e644fcaab956e1d23986","target":{"file":"src/com/android/server/connectivity/NetworkMonitor.java"},"deprecated":false,"digest":{"line_hashes":["259460928253666909353614842504266805433","95546564076599476553034734875260874537","141893370094138324095693630703648910543","178190043672319339911622477718128862838","241422300273404112010409552445155309554","93128901979927969621714879543334533910","165609425826834717074450947754973005341","49738192369111408658402142709806545757","113956723544902779140320640668233729374","192681021192952023244992054288759304634","93009082751397301251252160799821283646","337248943830145992463844182558403117308","142282211886261784065207829168209570488","76805085622041013661201864332382897136","322027718754788981863677918114799435","109240908817288602496474982885881491935","217723339842886126055609038554023672902","289640860809317518638847756671132573040","71829132413930982997198343805698130983","283227173179108060910006912038697397734","79507197577443479656314633021426971350","256456530971095428750582404174157526079","284309149558973674485567113610693280861","16125578755014322492778956262045960779","78422443241678129340448556232162660037","223789723286484361920516154476496219085","307866708329461282236221864982563397551","153730025773383879176779253564804273003","159923707427333470759430925971456556228","183658308635017532616293739094991876553","175183400195678515983690260232069585353","53630552794009183222468758530551576666","190061077544263874065063023604916280769","162767140796072719054373853868871043390","272117059837550882466362833464999339386","466056350025865401349920103084668178","60777195830264432778118165448178807506","296731771263130753674134442574250278393","268826732950543612392728735891625834401","81979323264895470026116102315845363084","231015604903901012005313122691142332218","202055076118403333741932512861348353847","65579948478425408077703977711286587503","303247706141465765825077280496062581919","293991599291740606478261991071746581886","51655203409827968345672129058455576799","167767145239205861278540850114348824266","140207330330466338545610888762825245974","184880022727315014572909341208246468784","154186159200432888370964638080619911329","244529310255583147006004626417262576961","41208052262922769909072903171225788576","226061622587894579431928748768383081489","297120461942086768172734790863942442203","209121879071899420505249629103138605856","104998457231899561853015549759010210996","81353779628657095981953433824030154915","74677591224923502616684309197347351417","152485981334893573814457049065688197885","287507296689345661421011171149755381378","119517156590086970363944622715518590776","324656359763318599012224965663738054179","111339217336873218938734226993651983871","315890083025414868597309577246518187050","145403829637981580457885046467429176610","326624464960519922974417488895549750459","133815576753871243940144764715549166663","293335934773771416493530851415576808862","281944972703180930775988093477572998066","190883577679083837304551865965808374669","320116751745612829241709149759449662324","123164168557187591061837084159390944083","80952855680565193675157995585571638559","18999558611288988615836265019075373368","131476679385716040397895192509549722531","336533828879567546757892669107079071881","236927748766337799366715708282261194062","275510864232348118354515180570313067682"],"threshold":0.9},"id":"ASB-A-175213041-2518c1e9","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/NetworkStack/+/f5459e4d185c57a420c5e644fcaab956e1d23986","target":{"file":"src/com/android/server/connectivity/NetworkMonitor.java","function":"sendNetworkConditionsBroadcast"},"deprecated":false,"digest":{"length":1711,"function_hash":"7497907704312144196956409558618194917"},"id":"ASB-A-175213041-87bdde6f","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/modules/NetworkStack/+/f5459e4d185c57a420c5e644fcaab956e1d23986"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-175213041.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-07-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c737926795a8cedab091cf01c30914a1bf844da1"],"severity":"High","spl":"2021-07-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-175213041.json"}},{"package":{"name":"platform/packages/modules/NetworkStack","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-07-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/NetworkStack/+/0dc33442b74703f7700ba78b05d3c5ec30c07055"],"severity":"High","spl":"2021-07-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/NetworkStack/+/0dc33442b74703f7700ba78b05d3c5ec30c07055","target":{"file":"src/com/android/server/connectivity/NetworkMonitor.java","function":"sendNetworkConditionsBroadcast"},"deprecated":false,"digest":{"function_hash":"314477498811911948244415368060482511656","length":1643},"id":"ASB-A-175213041-2acc0890","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/NetworkStack/+/0dc33442b74703f7700ba78b05d3c5ec30c07055","target":{"file":"src/com/android/server/connectivity/NetworkMonitor.java","function":"isCaptivePortal"},"deprecated":false,"digest":{"function_hash":"119717714988036512191417221136349273590","length":1562},"id":"ASB-A-175213041-338ac65b"},{"digest":{"function_hash":"104709707658299582423607066383556445549","length":181},"id":"ASB-A-175213041-7de23d3a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/NetworkStack/+/0dc33442b74703f7700ba78b05d3c5ec30c07055","target":{"function":"sendNetworkConditionsBroadcast","file":"src/com/android/server/connectivity/NetworkMonitor.java"},"deprecated":false},{"target":{"file":"src/com/android/server/connectivity/NetworkMonitor.java"},"deprecated":false,"digest":{"line_hashes":["259460928253666909353614842504266805433","95546564076599476553034734875260874537","141893370094138324095693630703648910543","178190043672319339911622477718128862838","241422300273404112010409552445155309554","93128901979927969621714879543334533910","165609425826834717074450947754973005341","49738192369111408658402142709806545757","113956723544902779140320640668233729374","192681021192952023244992054288759304634","281109343482405723136607951172941659338","68037271624890765603340247055565555530","33846696973523158983059843083083073316","63293175354954020178448010491133181984","14760273554238300492547980254151809681","111194763835601693721260422945837425702","13499963383331095595465417777646775165","189280219279763946393892136739918449404","133216563092643325374726647531090330380","265272832829259180374274227851621128066","96293232879778514066089520777025619554","217723339842886126055609038554023672902","289640860809317518638847756671132573040","71829132413930982997198343805698130983","283227173179108060910006912038697397734","79507197577443479656314633021426971350","256456530971095428750582404174157526079","284309149558973674485567113610693280861","16125578755014322492778956262045960779","78422443241678129340448556232162660037","223789723286484361920516154476496219085","307866708329461282236221864982563397551","153730025773383879176779253564804273003","159923707427333470759430925971456556228","183658308635017532616293739094991876553","175183400195678515983690260232069585353","53630552794009183222468758530551576666","190061077544263874065063023604916280769","162767140796072719054373853868871043390","272117059837550882466362833464999339386","466056350025865401349920103084668178","60777195830264432778118165448178807506","296731771263130753674134442574250278393","268826732950543612392728735891625834401","81979323264895470026116102315845363084","231015604903901012005313122691142332218","202055076118403333741932512861348353847","65579948478425408077703977711286587503","303247706141465765825077280496062581919","293991599291740606478261991071746581886","51655203409827968345672129058455576799","167767145239205861278540850114348824266","140207330330466338545610888762825245974","184880022727315014572909341208246468784","154186159200432888370964638080619911329","244529310255583147006004626417262576961","41208052262922769909072903171225788576","226061622587894579431928748768383081489","297120461942086768172734790863942442203","209121879071899420505249629103138605856","104998457231899561853015549759010210996","81353779628657095981953433824030154915","74677591224923502616684309197347351417","152485981334893573814457049065688197885","287507296689345661421011171149755381378","119517156590086970363944622715518590776","324656359763318599012224965663738054179","111339217336873218938734226993651983871","315890083025414868597309577246518187050","145403829637981580457885046467429176610","326624464960519922974417488895549750459","133815576753871243940144764715549166663","293335934773771416493530851415576808862","281944972703180930775988093477572998066","190883577679083837304551865965808374669","320116751745612829241709149759449662324","123164168557187591061837084159390944083","85539986367096723830406645949688649366","3553576002371249800595338139675603375","163410690258765388073369827898389274589","339245663754008011693730982938711136281","275510864232348118354515180570313067682","24357103837920390705093348229978513385","42723185802797566057578505767137867508","148922106302509918353276518496296731127","44176067400208984101769450820350672679","277514005657562277686142466504424217756","226097582765298261306446524434132256386","310269971780831826955884409750823598543","68995888095312493634032545461619899811"],"threshold":0.9},"id":"ASB-A-175213041-a4264982","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/NetworkStack/+/0dc33442b74703f7700ba78b05d3c5ec30c07055"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-175213041.json"}}],"schema_version":"1.9.0"}