{"id":"PUB-A-189857801","details":"In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-189857801","CVE-2021-1010"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/5228b4cf3a55e2abfc833f23f6ed683d5ef35bb8"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-12-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2021-12-01","severity":"Moderate","types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5228b4cf3a55e2abfc833f23f6ed683d5ef35bb8"],"vanir_signatures":[{"signature_type":"Function","id":"PUB-A-189857801-60efad0e","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"getSigningKeySet"},"digest":{"length":869,"function_hash":"132584928615221730268150791750476423550"},"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/5228b4cf3a55e2abfc833f23f6ed683d5ef35bb8","signature_version":"v1"},{"signature_type":"Line","id":"PUB-A-189857801-6f6d12c7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"digest":{"threshold":0.9,"line_hashes":["269872727543979060273050115687526126547","236636862371516801432910501098450022312","231262560110106771437992143478379125344","244768083747770656005397341329372162045","13406896532638826383005944769576071522","34486164087355723149574297097066475362","249833021071024907082647275849633242455","20735436386915824579006483356741752492","19158146158145962835957127313103159540","213738950766423406319545604270963899843"]},"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/5228b4cf3a55e2abfc833f23f6ed683d5ef35bb8","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-189857801.json"}}],"schema_version":"1.7.5"}