{"id":"ASB-A-177238342","details":"In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-177238342","CVE-2021-0588"],"modified":"2026-04-17T15:55:28.020024Z","published":"2021-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-07-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/bbf60925044c9ea7613c4264dea20c6c12246118"}],"affected":[{"package":{"name":"platform/packages/apps/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-07-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2021-07-01","types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/apps/Bluetooth/+/7fe88ee4d21df9715d1326995ef9f1160945f8a7"],"vanir_signatures":[{"target":{"function":"processInboundMessage","file":"src/com/android/bluetooth/mapclient/MceStateMachine.java"},"signature_type":"Function","signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/7fe88ee4d21df9715d1326995ef9f1160945f8a7","digest":{"function_hash":"267014055218915562324544224807642477596","length":1589},"id":"ASB-A-177238342-21ed1dfc"},{"target":{"file":"src/com/android/bluetooth/mapclient/MceStateMachine.java"},"signature_type":"Line","signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/7fe88ee4d21df9715d1326995ef9f1160945f8a7","digest":{"threshold":0.9,"line_hashes":["204567973715472067066247483845272490480","4651904736654534218624381003266123619","175106579451678976287564149135052824973","50516183646675268844942920109146207064","239927787402054502068805163281703011302","118578066003825052603890285099994597954","280191191649882434054280314678359611874","17024649308917103928626280810893798588"]},"id":"ASB-A-177238342-b2941ee4"}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-177238342.json"}},{"package":{"name":"platform/packages/apps/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-07-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2021-07-01","types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/apps/Bluetooth/+/1053a248da167ab586e282fb8057fef2ef87b659"],"vanir_signatures":[{"target":{"file":"src/com/android/bluetooth/mapclient/MceStateMachine.java"},"signature_type":"Line","signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/1053a248da167ab586e282fb8057fef2ef87b659","digest":{"threshold":0.9,"line_hashes":["88242695581226210517726882826385907342","228351318621997576290397813409176551539","306990524383001794509029399546078534620","30870753740782282268746949493014393146","239927787402054502068805163281703011302","118578066003825052603890285099994597954","280191191649882434054280314678359611874","17024649308917103928626280810893798588"]},"id":"ASB-A-177238342-256d90e9"},{"target":{"function":"processInboundMessage","file":"src/com/android/bluetooth/mapclient/MceStateMachine.java"},"signature_type":"Function","signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/1053a248da167ab586e282fb8057fef2ef87b659","digest":{"function_hash":"262941306501579972416702905455252343848","length":1617},"id":"ASB-A-177238342-ede25644"}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-177238342.json"}}],"schema_version":"1.7.5"}