{"id":"ASB-A-175614289","details":"In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-175614289","CVE-2021-0599"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-07-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/1c08e32233fef339af2cfdcd1b801af42bd49615"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-07-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2021-07-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["155140798746955026211922233343569436904","40679412187670084343085350279336058230","319361658088727101539218216098082093863","238337608107298172025037589602738868900"]},"id":"ASB-A-175614289-2205c988","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7dfcfe85ae1225547ffb9e369d15c7952847d1bf","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"id":"ASB-A-175614289-4900edc5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7dfcfe85ae1225547ffb9e369d15c7952847d1bf","target":{"function":"scheduleTimeoutLocked","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"length":599,"function_hash":"4679512688626466174133925212477317438"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7dfcfe85ae1225547ffb9e369d15c7952847d1bf"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-175614289.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-07-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"id":"ASB-A-175614289-516df413","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4056976f1e7556873696e0a23ad612659669ebad","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["155140798746955026211922233343569436904","40679412187670084343085350279336058230","319361658088727101539218216098082093863","238337608107298172025037589602738868900"],"threshold":0.9}},{"id":"ASB-A-175614289-ef2973a8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4056976f1e7556873696e0a23ad612659669ebad","target":{"function":"scheduleTimeoutLocked","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"function_hash":"102344930994049120752323747863630688565","length":600}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4056976f1e7556873696e0a23ad612659669ebad"],"severity":"High","spl":"2021-07-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-175614289.json"}}],"schema_version":"1.9.0"}