{"id":"ASB-A-179975048","details":"In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-179975048","CVE-2021-0505"],"modified":"2026-04-17T15:55:28.020024Z","published":"2021-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/735a216da31d8440d23fed4355521013ead630f3"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-06-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["EoP"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/735a216da31d8440d23fed4355521013ead630f3"],"vanir_signatures":[{"digest":{"length":654,"function_hash":"146225740222064097662007404564289576779"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/735a216da31d8440d23fed4355521013ead630f3","signature_type":"Function","target":{"file":"src/com/android/settings/vpn2/AppPreference.java","function":"AppPreference"},"deprecated":false,"signature_version":"v1","id":"ASB-A-179975048-14f838f6"},{"digest":{"length":841,"function_hash":"22640489919609325713882732711375333994"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/735a216da31d8440d23fed4355521013ead630f3","signature_type":"Function","target":{"file":"src/com/android/settings/vpn2/AppDialogFragment.java","function":"onCreateDialog"},"deprecated":false,"signature_version":"v1","id":"ASB-A-179975048-283c6318"},{"digest":{"length":153,"function_hash":"316657508535414830937588975580022303780"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/735a216da31d8440d23fed4355521013ead630f3","signature_type":"Function","target":{"file":"src/com/android/settings/vpn2/AppDialogFragment.java","function":"isUiRestricted"},"deprecated":false,"signature_version":"v1","id":"ASB-A-179975048-3d66d37c"},{"digest":{"line_hashes":["179604578433728933944084188878803616491","263743711992373708320236093901191021133","287168401872317820949163726977133431194","173153611441286560131249985183257108818","305612703754808051371553259038407704326","145021250932861504369977775800655861474","130235695407336455772521288742420236139","197321295494038043825052379967726541196","302125649659669665514286164651550337398","230524531461541342565570221741183478871","295571902962163619747048479510285221828","151062334198934241055795868962791755594"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/735a216da31d8440d23fed4355521013ead630f3","signature_type":"Line","target":{"file":"src/com/android/settings/vpn2/AppPreference.java"},"deprecated":false,"signature_version":"v1","id":"ASB-A-179975048-47459096"},{"digest":{"line_hashes":["203672420802591882195033062432345984370","245769591005352220015596537011892043671","316219622028360940670670761146118990568","45655343949508074561588778196001568865","105842248601038760606503281218505655029","319288495519586171905692575195650412644","5931153598307458158961870516245997700","199484865335580362943087483925432877804","186978618808013905031115306140254805796","84928599281655998255880937823807919609","69586483132882604361887274493005422476","96794901227541202364131161774691071416","215644479940076039302157223118511383794","261325344041457971308431415421971501552","109932388579657962600053503098445552067","68338111561984741143906437224467332970","289235851255458248170792750859670189515","159367935496363242023982217070173173458","197613153472692313592428033679223268706"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/735a216da31d8440d23fed4355521013ead630f3","signature_type":"Line","target":{"file":"src/com/android/settings/vpn2/AppDialogFragment.java"},"deprecated":false,"signature_version":"v1","id":"ASB-A-179975048-7f5cda4b"},{"digest":{"length":120,"function_hash":"335915459027265714425714265626005612958"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/735a216da31d8440d23fed4355521013ead630f3","signature_type":"Function","target":{"file":"src/com/android/settings/vpn2/AppDialogFragment.java","function":"onCreate"},"deprecated":false,"signature_version":"v1","id":"ASB-A-179975048-8ab1bd67"}],"spl":"2021-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-179975048.json"}}],"schema_version":"1.7.5"}