{"id":"ASB-A-209607104","details":"In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-209607104","CVE-2021-39797"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2022-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/c3ea2d31568121d012a0da7cbe8260f1304ca19f"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-04-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","target":{"function":"getMainActivityLaunchIntent","file":"core/java/android/content/pm/LauncherApps.java"},"deprecated":false,"digest":{"function_hash":"137248387484537822829252118485141517099","length":333},"id":"ASB-A-209607104-088ccb7a","signature_type":"Function"},{"digest":{"function_hash":"28162110024036208773396514272508563557","length":543},"id":"ASB-A-209607104-144b9735","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"getActivityLaunchIntent"},"deprecated":false},{"id":"ASB-A-209607104-50c3a0a7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","target":{"function":"injectCreatePendingIntent","file":"services/core/java/com/android/server/pm/LauncherAppsService.java"},"deprecated":false,"digest":{"function_hash":"316721006222484432174288414543312406339","length":209}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","target":{"file":"core/java/android/content/pm/LauncherApps.java","function":"getShortcutIntent"},"deprecated":false,"digest":{"length":419,"function_hash":"209368282351262600398357506955008752116"},"id":"ASB-A-209607104-6f24fd45"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"},"deprecated":false,"digest":{"line_hashes":["208657842323585617199440622118754555280","188543004290221367998040737249986687817","89268067444872410921236962549652080505","330160537554672763508440278627193783841","336203847567176194881074659462724657280","16014099923058085021415620949231701106","45156579175837308352023695108033224999","29497062090299132957836227691724338011"],"threshold":0.9},"id":"ASB-A-209607104-6fdff88d"},{"id":"ASB-A-209607104-73a66010","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","target":{"file":"core/java/android/content/pm/LauncherApps.java"},"deprecated":false,"digest":{"line_hashes":["323056489602489480626555281834963073386","120527124750163839005716455172243298742","174241891141466154865567032718734644680","124061312468540906288334305132361158070","130044595969274989620788393110112093113","269197518101157401882084573960619533219","221771215959718339465454391941265922746","323056489602489480626555281834963073386","54260101725757807824306946882002898312","48884956928022838782230178579222540489","243800009251414036841401877123628114651","168866404118292972998755613034021737919","290239591681633831098119702524040302558","313293555265765302587783741313800669602","304154884390663653896821965983558836315","238416410560095626289164229990428974207"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1"],"severity":"High","spl":"2022-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-209607104.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-04-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"core/java/android/content/pm/LauncherApps.java"},"deprecated":false,"digest":{"line_hashes":["323056489602489480626555281834963073386","120527124750163839005716455172243298742","174241891141466154865567032718734644680","124061312468540906288334305132361158070","130044595969274989620788393110112093113","269197518101157401882084573960619533219","221771215959718339465454391941265922746","323056489602489480626555281834963073386","54260101725757807824306946882002898312","48884956928022838782230178579222540489","243800009251414036841401877123628114651","168866404118292972998755613034021737919","290239591681633831098119702524040302558","313293555265765302587783741313800669602","304154884390663653896821965983558836315","238416410560095626289164229990428974207"],"threshold":0.9},"id":"ASB-A-209607104-0c659bdc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","target":{"file":"core/java/android/content/pm/LauncherApps.java","function":"getShortcutIntent"},"deprecated":false,"digest":{"length":419,"function_hash":"209368282351262600398357506955008752116"},"id":"ASB-A-209607104-2b2acd31"},{"digest":{"length":333,"function_hash":"137248387484537822829252118485141517099"},"id":"ASB-A-209607104-46f94d6f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","target":{"file":"core/java/android/content/pm/LauncherApps.java","function":"getMainActivityLaunchIntent"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"injectCreatePendingIntent"},"deprecated":false,"digest":{"function_hash":"316721006222484432174288414543312406339","length":209},"id":"ASB-A-209607104-9650a596","signature_type":"Function","signature_version":"v1"},{"target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"getActivityLaunchIntent"},"deprecated":false,"digest":{"length":543,"function_hash":"28162110024036208773396514272508563557"},"id":"ASB-A-209607104-cb9c298e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"},"deprecated":false,"digest":{"line_hashes":["208657842323585617199440622118754555280","188543004290221367998040737249986687817","89268067444872410921236962549652080505","330160537554672763508440278627193783841","336203847567176194881074659462724657280","16014099923058085021415620949231701106","45156579175837308352023695108033224999","29497062090299132957836227691724338011"],"threshold":0.9},"id":"ASB-A-209607104-efd4dfb3","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1"],"severity":"High","spl":"2022-04-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-209607104.json"}}],"schema_version":"1.9.0"}