{"id":"ASB-A-209607104","details":"In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-209607104","CVE-2021-39797"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2022-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/c3ea2d31568121d012a0da7cbe8260f1304ca19f"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-04-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-209607104-088ccb7a","target":{"file":"core/java/android/content/pm/LauncherApps.java","function":"getMainActivityLaunchIntent"},"digest":{"length":333,"function_hash":"137248387484537822829252118485141517099"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-209607104-144b9735","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"getActivityLaunchIntent"},"digest":{"length":543,"function_hash":"28162110024036208773396514272508563557"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-209607104-50c3a0a7","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"injectCreatePendingIntent"},"digest":{"length":209,"function_hash":"316721006222484432174288414543312406339"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","deprecated":false,"signature_type":"Function","signature_version":"v1","id":"ASB-A-209607104-6f24fd45","target":{"file":"core/java/android/content/pm/LauncherApps.java","function":"getShortcutIntent"},"digest":{"length":419,"function_hash":"209368282351262600398357506955008752116"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-209607104-6fdff88d","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"},"digest":{"threshold":0.9,"line_hashes":["208657842323585617199440622118754555280","188543004290221367998040737249986687817","89268067444872410921236962549652080505","330160537554672763508440278627193783841","336203847567176194881074659462724657280","16014099923058085021415620949231701106","45156579175837308352023695108033224999","29497062090299132957836227691724338011"]}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-209607104-73a66010","target":{"file":"core/java/android/content/pm/LauncherApps.java"},"digest":{"threshold":0.9,"line_hashes":["323056489602489480626555281834963073386","120527124750163839005716455172243298742","174241891141466154865567032718734644680","124061312468540906288334305132361158070","130044595969274989620788393110112093113","269197518101157401882084573960619533219","221771215959718339465454391941265922746","323056489602489480626555281834963073386","54260101725757807824306946882002898312","48884956928022838782230178579222540489","243800009251414036841401877123628114651","168866404118292972998755613034021737919","290239591681633831098119702524040302558","313293555265765302587783741313800669602","304154884390663653896821965983558836315","238416410560095626289164229990428974207"]}}],"spl":"2022-04-01","types":["EoP"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-209607104.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-04-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2022-04-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","deprecated":false,"signature_type":"Line","signature_version":"v1","id":"ASB-A-209607104-0c659bdc","target":{"file":"core/java/android/content/pm/LauncherApps.java"},"digest":{"threshold":0.9,"line_hashes":["323056489602489480626555281834963073386","120527124750163839005716455172243298742","174241891141466154865567032718734644680","124061312468540906288334305132361158070","130044595969274989620788393110112093113","269197518101157401882084573960619533219","221771215959718339465454391941265922746","323056489602489480626555281834963073386","54260101725757807824306946882002898312","48884956928022838782230178579222540489","243800009251414036841401877123628114651","168866404118292972998755613034021737919","290239591681633831098119702524040302558","313293555265765302587783741313800669602","304154884390663653896821965983558836315","238416410560095626289164229990428974207"]}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-209607104-2b2acd31","target":{"file":"core/java/android/content/pm/LauncherApps.java","function":"getShortcutIntent"},"digest":{"length":419,"function_hash":"209368282351262600398357506955008752116"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-209607104-46f94d6f","target":{"file":"core/java/android/content/pm/LauncherApps.java","function":"getMainActivityLaunchIntent"},"digest":{"length":333,"function_hash":"137248387484537822829252118485141517099"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-209607104-9650a596","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"injectCreatePendingIntent"},"digest":{"length":209,"function_hash":"316721006222484432174288414543312406339"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","deprecated":false,"signature_type":"Function","signature_version":"v1","id":"ASB-A-209607104-cb9c298e","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"getActivityLaunchIntent"},"digest":{"length":543,"function_hash":"28162110024036208773396514272508563557"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e41e04bb8cb930c079597bc0008540461c57ffe1","deprecated":false,"signature_type":"Line","signature_version":"v1","id":"ASB-A-209607104-efd4dfb3","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"},"digest":{"threshold":0.9,"line_hashes":["208657842323585617199440622118754555280","188543004290221367998040737249986687817","89268067444872410921236962549652080505","330160537554672763508440278627193783841","336203847567176194881074659462724657280","16014099923058085021415620949231701106","45156579175837308352023695108033224999","29497062090299132957836227691724338011"]}}],"types":["EoP"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-209607104.json"}}],"schema_version":"1.7.5"}