{"id":"PUB-A-175124820","details":"In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-175124820","CVE-2021-0552"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/9ba74049fc08851003da788c7af1337f1a83eb54"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-06-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"length":274,"function_hash":"210496306192639960723116053846144368727"},"id":"PUB-A-175124820-42615242","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9ba74049fc08851003da788c7af1337f1a83eb54","target":{"function":"getSliderInputAction","file":"src/com/android/settings/media/MediaOutputSlice.java"}},{"id":"PUB-A-175124820-5e81f13b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9ba74049fc08851003da788c7af1337f1a83eb54","target":{"file":"src/com/android/settings/media/MediaOutputSlice.java","function":"getPairNewRow"},"deprecated":false,"digest":{"length":913,"function_hash":"181107643945068238162963593637967414890"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9ba74049fc08851003da788c7af1337f1a83eb54","target":{"function":"getEndItemSliceAction","file":"src/com/android/settings/media/MediaOutputSlice.java"},"deprecated":false,"digest":{"function_hash":"219384503197950172534817677697464263876","length":610},"id":"PUB-A-175124820-8f472655"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9ba74049fc08851003da788c7af1337f1a83eb54","target":{"file":"src/com/android/settings/media/MediaOutputSlice.java","function":"getBroadcastIntent"},"deprecated":false,"digest":{"function_hash":"56214683197785766745222595778289115982","length":346},"id":"PUB-A-175124820-d88bfda6"},{"digest":{"line_hashes":["165490027837973646917733888248695843958","186629553339691462250368696542306884969","305243697408184002234860274206450803297","120254681865690051463191302080502600523","27249023416434243492533118254043592929","69154282040816798030245794075179614114","229862724663953022526494243882367367291","439351680332820786600996745246563638","214175394237650729643408899854281500066","289571767854637862412267100400611501057","334189720034427882216182485715198527225","81682038290986788813928202317796720611","293738024943733621189044111451696048060","17738363601502774878679571764669466249","316443905399653349289426465388623181412","200681277773085253058884621270693719608"],"threshold":0.9},"id":"PUB-A-175124820-e8a6c1f1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9ba74049fc08851003da788c7af1337f1a83eb54","target":{"file":"src/com/android/settings/media/MediaOutputSlice.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/9ba74049fc08851003da788c7af1337f1a83eb54"],"severity":"Moderate","spl":"2021-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-175124820.json"}}],"schema_version":"1.9.0"}