{"id":"ASB-A-185235454","details":"In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-185235454","CVE-2021-0641"],"modified":"2026-05-25T16:46:24.913870386Z","published":"2021-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/3987dc05c4cbf727d73c2e847692856df9aee6d2"}],"affected":[{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-08-01"}]}],"versions":["8.1"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-185235454-088a1593","digest":{"line_hashes":["322179152667443566213635062152586210488","302154512749291372025215128589189914285","79769725206224791662607660065147568683","157305871852941368301729444261912684793","44712258134504983053774453234221765831","140395474102336232780420469452333842497","67982921254483870507642281109402768204","300238249256955079666881244971898924305","165298622424173680646359658852840888207","114271158995927676688427381791986637864","50708410894798798326959356230949396476","200419992510259407468683780180144744000"],"threshold":0.9},"target":{"file":"src/java/com/android/internal/telephony/SubscriptionController.java"},"signature_version":"v1","deprecated":false,"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/1996daaf750f417e27888a0fb8656330371241fc"},{"digest":{"function_hash":"194429974815737595204872300169648639657","length":884},"deprecated":false,"target":{"file":"src/java/com/android/internal/telephony/SubscriptionController.java","function":"getAvailableSubscriptionInfoList"},"signature_version":"v1","signature_type":"Function","id":"ASB-A-185235454-fc86d38f","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/1996daaf750f417e27888a0fb8656330371241fc"}],"spl":"2021-08-01","types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/1996daaf750f417e27888a0fb8656330371241fc"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-185235454.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-08-01"}]}],"versions":["9"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"src/java/com/android/internal/telephony/SubscriptionController.java","function":"getAvailableSubscriptionInfoList"},"signature_version":"v1","digest":{"function_hash":"10834130118716387980513045232405040831","length":966},"id":"ASB-A-185235454-21ff6665","signature_type":"Function","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/2d01df99deba66fbdac7ca1a678a955c64c5318f"},{"target":{"file":"src/java/com/android/internal/telephony/SubscriptionController.java"},"signature_version":"v1","digest":{"line_hashes":["322179152667443566213635062152586210488","302154512749291372025215128589189914285","79769725206224791662607660065147568683","157305871852941368301729444261912684793","44712258134504983053774453234221765831","140395474102336232780420469452333842497","67982921254483870507642281109402768204","317179960651733581027699211625528187844","137001379270367974367826692771061504278","207722426495214467888271829540402290979","186101170189287384730125460759207797391","263819795159073480990744039293080800974","248760339125170916730817611748457394144","200419992510259407468683780180144744000"],"threshold":0.9},"id":"ASB-A-185235454-bef4f3db","signature_type":"Line","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/2d01df99deba66fbdac7ca1a678a955c64c5318f"}],"spl":"2021-08-01","types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/2d01df99deba66fbdac7ca1a678a955c64c5318f"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-185235454.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-08-01"}]}],"versions":["10"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","digest":{"function_hash":"295565763983439835740416590784161204844","length":995},"target":{"file":"src/java/com/android/internal/telephony/SubscriptionController.java","function":"getAvailableSubscriptionInfoList"},"id":"ASB-A-185235454-2b01d40c","deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/dd0a8f8c5332e9ebcc983951e01ec3c7983188c7"},{"deprecated":false,"signature_version":"v1","target":{"file":"src/java/com/android/internal/telephony/SubscriptionController.java"},"id":"ASB-A-185235454-a1ed1c38","signature_type":"Line","digest":{"line_hashes":["308083939548892577897224080200540255444","214562141067841948983412341100333928522","160738874635641536349344562415977389651","44861382247902900182343580197047170298","317179960651733581027699211625528187844","137001379270367974367826692771061504278","207722426495214467888271829540402290979","186101170189287384730125460759207797391","263819795159073480990744039293080800974","248760339125170916730817611748457394144","200419992510259407468683780180144744000"],"threshold":0.9},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/dd0a8f8c5332e9ebcc983951e01ec3c7983188c7"}],"spl":"2021-08-01","types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/dd0a8f8c5332e9ebcc983951e01ec3c7983188c7"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-185235454.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-08-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"src/java/com/android/internal/telephony/SubscriptionController.java","function":"getAvailableSubscriptionInfoList"},"signature_version":"v1","digest":{"function_hash":"94819161903269189739373646259786815365","length":1149},"id":"ASB-A-185235454-37f617b1","signature_type":"Function","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/9f741b9a3f871cde331f0c0f06abaa42e74f87f8"},{"target":{"file":"src/java/com/android/internal/telephony/SubscriptionController.java"},"signature_version":"v1","digest":{"line_hashes":["308083939548892577897224080200540255444","214562141067841948983412341100333928522","160738874635641536349344562415977389651","44861382247902900182343580197047170298","291210842795300834745212578741290321273","3057374561742708349612180504265935563","272211894748714570887657777387157996278","171993590426064100538565987468376097400","208078310247559336231525144375592506295","252760015762893403940434711916388917966","200419992510259407468683780180144744000"],"threshold":0.9},"id":"ASB-A-185235454-f541d2b3","signature_type":"Line","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/9f741b9a3f871cde331f0c0f06abaa42e74f87f8"}],"spl":"2021-08-01","types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/9f741b9a3f871cde331f0c0f06abaa42e74f87f8"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-185235454.json"}}],"schema_version":"1.7.5"}