{"id":"PUB-A-177931355","details":"In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-177931355","CVE-2021-0572"],"modified":"2026-04-08T15:00:25.631816Z","published":"2021-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/2cd616165c6de4d523637cd84eb0c7490415beb6"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-06-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"13955884187775680452074247685830298299","length":1140},"id":"PUB-A-177931355-530f30a5","target":{"function":"createNoCredentialsPermissionNotification","file":"services/core/java/com/android/server/accounts/AccountManagerService.java"},"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2cd616165c6de4d523637cd84eb0c7490415beb6","signature_type":"Function"},{"digest":{"function_hash":"245953299183076540288114581199226225348","length":1223},"id":"PUB-A-177931355-de5d347c","target":{"function":"doNotification","file":"services/core/java/com/android/server/accounts/AccountManagerService.java"},"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2cd616165c6de4d523637cd84eb0c7490415beb6","signature_type":"Function"},{"digest":{"line_hashes":["299383651173671348817543944941812103312","256989136395354121258640567185123162473","196639853982148962795096014224859608594","269835483600688645271061730841538456826","254814283906023037685745410800905479751","336598113711868789328123905093133525669","114574420740669496987600946882937790505","12084265700894750695441376242007765274"],"threshold":0.9},"id":"PUB-A-177931355-f7759722","target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java"},"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2cd616165c6de4d523637cd84eb0c7490415beb6","signature_type":"Line"}],"types":["ID"],"severity":"Moderate","fixes":["https://android.googlesource.com/platform/frameworks/base/+/2cd616165c6de4d523637cd84eb0c7490415beb6"],"spl":"2021-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-177931355.json"}}],"schema_version":"1.7.5"}