{"id":"PUB-A-188219307","details":"In setPackageStoppedState of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-188219307","CVE-2021-1011"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/44a4529285f514c7cdbe0777004e853503399c35"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-12-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/44a4529285f514c7cdbe0777004e853503399c35"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/44a4529285f514c7cdbe0777004e853503399c35","deprecated":false,"id":"PUB-A-188219307-1d76d343","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_version":"v1","digest":{"line_hashes":["248288502745360145587113369201883597818","187885695649267500458876508762431505118","38589098222459545645273185752692080543","27864417869734041734459830048141805275","228716167390115108442825133253058457212","81606005663576324338806360943246686445","234995863242779510340217155127190747015","27360440478332239752968029852954548306","142110162820807955582942616221204034457"],"threshold":0.9},"signature_type":"Line"},{"digest":{"line_hashes":["205076840782117860855025683080164841036","263564451018149687351407217020230214682","135298803417011739828131412056636791105","3813877246876349088123451405682226763","250121116697882860832109887673071951151","305804676621850979729295448782132000401","226393296350702719899928476069089365351","95099956319131499057726802266540084687","20987026784971052941912524032048547787","337260685222169544542613997715352069205","278825004740674325862848292872795454616","262396198905564093725787048195908252614","180818649611551091240992966375228620958","152482317248299455791791819544251416763","33421342791544445829693411101614268423"],"threshold":0.9},"target":{"file":"services/core/java/com/android/server/pm/Settings.java"},"id":"PUB-A-188219307-40262ae6","deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/44a4529285f514c7cdbe0777004e853503399c35","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/44a4529285f514c7cdbe0777004e853503399c35","deprecated":false,"id":"PUB-A-188219307-8c1c84b9","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"setPackageStoppedState"},"signature_version":"v1","digest":{"function_hash":"94775138723964750065483615781259111986","length":918},"signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/44a4529285f514c7cdbe0777004e853503399c35","deprecated":false,"id":"PUB-A-188219307-f93e69c1","target":{"file":"services/core/java/com/android/server/pm/Settings.java","function":"setPackageStoppedStateLPw"},"signature_version":"v1","digest":{"function_hash":"59669115405938965986268615046622644303","length":971},"signature_type":"Function"}],"types":["ID"],"spl":"2021-12-01","severity":"Moderate"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-188219307.json"}}],"schema_version":"1.7.5"}