{"id":"PUB-A-183610267","details":"In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.","aliases":["A-183610267","CVE-2021-1016"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/fe59586648042e7e8e45362d4489989a938d0947"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-12-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"file":"packages/SystemUI/src/com/android/systemui/usb/UsbPermissionActivity.java"},"signature_type":"Line","id":"PUB-A-183610267-29983c6d","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["163532671664865422384218442337373839030","310103082694577466317846615954586161197","281521133877572510902589135737756547925","138804174498789341152941173329259920122","175494018964404855900479112542516289229","50698346722460284117743682877130884733","317074890106218256720470517531320743497"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/fe59586648042e7e8e45362d4489989a938d0947","deprecated":false},{"target":{"function":"onCreate","file":"packages/SystemUI/src/com/android/systemui/usb/UsbPermissionActivity.java"},"signature_type":"Function","id":"PUB-A-183610267-b3902a49","deprecated":false,"digest":{"length":2560,"function_hash":"39265625895105472026225187673510550227"},"source":"https://android.googlesource.com/platform/frameworks/base/+/fe59586648042e7e8e45362d4489989a938d0947","signature_version":"v1"}],"spl":"2021-12-01","severity":"Moderate","fixes":["https://android.googlesource.com/platform/frameworks/base/+/fe59586648042e7e8e45362d4489989a938d0947"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-183610267.json"}}],"schema_version":"1.7.5"}