{"id":"ASB-A-193444889","details":"In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-193444889","CVE-2021-0706"],"modified":"2026-06-11T14:59:52.052110020Z","published":"2022-02-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-02-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2022-02-01"}]}],"versions":["10"],"ecosystem_specific":{"severity":"High","spl":"2022-02-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/55cd8952c051cf8aaac144c914e8f5997ae80363","https://android.googlesource.com/platform/frameworks/base/+/d7097b817bb5a661e4bbc22829f6dc0a6ddca27c"],"vanir_signatures":[{"signature_type":"Function","deprecated":false,"target":{"file":"packages/SystemUI/shared/src/com/android/systemui/shared/plugins/PluginManagerImpl.java","function":"startListening"},"digest":{"length":672,"function_hash":"81810139171775118323283179160047827034"},"id":"ASB-A-193444889-2f5dc331","source":"https://android.googlesource.com/platform/frameworks/base/+/d7097b817bb5a661e4bbc22829f6dc0a6ddca27c","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/55cd8952c051cf8aaac144c914e8f5997ae80363","deprecated":false,"target":{"file":"packages/SystemUI/shared/src/com/android/systemui/shared/plugins/PluginManagerImpl.java"},"digest":{"threshold":0.9,"line_hashes":["6682212024756171277007439054469407303","209711882029363377761582002638931067562","158320630735103290764627557418347516601","22445546701691648265156247826780286614","262505575621538340185066354316660139155","92667460322615852668817984762344654739","328977152029404174956875132302775369961"]},"id":"ASB-A-193444889-cc184cb3","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","deprecated":false,"target":{"file":"packages/SystemUI/shared/src/com/android/systemui/shared/plugins/PluginManagerImpl.java","function":"startListening"},"digest":{"length":516,"function_hash":"129524561234329392028963588651713576109"},"id":"ASB-A-193444889-efeb2a4e","source":"https://android.googlesource.com/platform/frameworks/base/+/55cd8952c051cf8aaac144c914e8f5997ae80363","signature_version":"v1"},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/d7097b817bb5a661e4bbc22829f6dc0a6ddca27c","target":{"file":"packages/SystemUI/shared/src/com/android/systemui/shared/plugins/PluginManagerImpl.java"},"digest":{"threshold":0.9,"line_hashes":["146850081227967692376201208466657996530","327750832339910177008813005609846834661","20104264724062620373090630752548946891","162502540726198638012524780869162641186"]},"id":"ASB-A-193444889-f9d60ddb","signature_type":"Line","signature_version":"v1"}],"types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-193444889.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2022-02-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","deprecated":false,"target":{"file":"packages/SystemUI/shared/src/com/android/systemui/shared/plugins/PluginManagerImpl.java","function":"startListening"},"digest":{"length":672,"function_hash":"81810139171775118323283179160047827034"},"id":"ASB-A-193444889-2ccaabda","source":"https://android.googlesource.com/platform/frameworks/base/+/1b13bc873c7682847cdfa904f754ebc327eb180b","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/90824714b5f065bbe5671f9808b986194290ae8e","deprecated":false,"target":{"file":"packages/SystemUI/shared/src/com/android/systemui/shared/plugins/PluginManagerImpl.java"},"digest":{"threshold":0.9,"line_hashes":["6682212024756171277007439054469407303","209711882029363377761582002638931067562","158320630735103290764627557418347516601","22445546701691648265156247826780286614","262505575621538340185066354316660139155","92667460322615852668817984762344654739","328977152029404174956875132302775369961"]},"id":"ASB-A-193444889-4b77a797","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","deprecated":false,"target":{"file":"packages/SystemUI/shared/src/com/android/systemui/shared/plugins/PluginManagerImpl.java","function":"startListening"},"digest":{"length":516,"function_hash":"129524561234329392028963588651713576109"},"id":"ASB-A-193444889-8c1e9cea","source":"https://android.googlesource.com/platform/frameworks/base/+/90824714b5f065bbe5671f9808b986194290ae8e","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/1b13bc873c7682847cdfa904f754ebc327eb180b","deprecated":false,"target":{"file":"packages/SystemUI/shared/src/com/android/systemui/shared/plugins/PluginManagerImpl.java"},"digest":{"threshold":0.9,"line_hashes":["146850081227967692376201208466657996530","327750832339910177008813005609846834661","20104264724062620373090630752548946891","162502540726198638012524780869162641186"]},"id":"ASB-A-193444889-e6197bc4","signature_type":"Line","signature_version":"v1"}],"spl":"2022-02-01","types":["DoS"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/90824714b5f065bbe5671f9808b986194290ae8e","https://android.googlesource.com/platform/frameworks/base/+/1b13bc873c7682847cdfa904f754ebc327eb180b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-193444889.json"}}],"schema_version":"1.7.5"}