{"id":"PUB-A-185591180","details":"In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-185591180","CVE-2021-0990"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/609ee4daf84fc3f03fd755d00bbbcb147c36e8b2"}],"affected":[{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-12-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/609ee4daf84fc3f03fd755d00bbbcb147c36e8b2"],"severity":"Moderate","spl":"2021-12-01","types":["ID"],"vanir_signatures":[{"target":{"file":"src/java/com/android/internal/telephony/PhoneSubInfoController.java","function":"getDeviceIdForPhone"},"deprecated":false,"digest":{"length":158,"function_hash":"6424489309282067156459634985673118629"},"id":"PUB-A-185591180-19fc1a35","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/609ee4daf84fc3f03fd755d00bbbcb147c36e8b2"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/609ee4daf84fc3f03fd755d00bbbcb147c36e8b2","target":{"file":"src/java/com/android/internal/telephony/PhoneSubInfoController.java","function":"PhoneSubInfoController"},"deprecated":false,"digest":{"function_hash":"71579472634874882228383951064971521907","length":185},"id":"PUB-A-185591180-223efe4b"},{"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/609ee4daf84fc3f03fd755d00bbbcb147c36e8b2","target":{"file":"src/java/com/android/internal/telephony/PhoneSubInfoController.java"},"deprecated":false,"digest":{"line_hashes":["84067920554724058080208581427638451823","64763701739082626701157182071348382251","118415992287012760099097902506508925232","337865308756615602851771570998137798783","173799309008287552169898918103899913045","225727805389540745002702060883669391539","6467185674504588406056128842841091520","135675323435875083297251727318492092246","313192147213762499061433677686545427514","259651047212586931390115272761950955660","168535894050719882976635999570117422156","71077005743032921591732858554605921531","228120485050455007615964241039145187138","101327814190287972021001041848427192485","108162976993487499083395632800836360890","254647663341093421584390562853542894129","295557106140758910883699469601367699372","186438156137967986928394176499969558001","275826747314710569680707781015982010426","117889899037607621142945168964730039932","328533871145797024870001758841375853784","161958095585538894555822560173007209969","27478874489596330323204651145345321940"],"threshold":0.9},"id":"PUB-A-185591180-32413a73","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-185591180.json"}}],"schema_version":"1.9.0"}