{"id":"PUB-A-190403923","details":"In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-190403923","CVE-2021-0985"],"modified":"2026-09-21T16:00:45.521740994Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Calendar/+/ae487ada1969c32e7bbd32d8a83fc587506cd51c"}],"affected":[{"package":{"name":"platform/packages/apps/Calendar","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-12-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2021-12-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Calendar/+/ae487ada1969c32e7bbd32d8a83fc587506cd51c","target":{"file":"src/com/android/calendar/alerts/AlertReceiver.java","function":"closeNotificationShade"},"deprecated":false,"digest":{"function_hash":"108617513870138025136260894798723387824","length":125},"id":"PUB-A-190403923-1c794392","signature_type":"Function"},{"id":"PUB-A-190403923-41073d3e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Calendar/+/ae487ada1969c32e7bbd32d8a83fc587506cd51c","target":{"function":"onReceive","file":"src/com/android/calendar/alerts/AlertReceiver.java"},"deprecated":false,"digest":{"function_hash":"93356585002155740390245538472246922660","length":208}},{"id":"PUB-A-190403923-5b10c57e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Calendar/+/ae487ada1969c32e7bbd32d8a83fc587506cd51c","target":{"file":"src/com/android/calendar/alerts/AlertReceiver.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["300617179344378637534527336095936374568","180678488712927927906112762742832389511","143164644377627368423907901371003681387","271827929067176684688928617079353341344","106114471733513251642808885011820723129","295015509283110613549894267130139925544","208427662785872013839685999483419916928","142511458237997025435444913586429282833","197174280565475402059731278978296818377"]}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Calendar/+/ae487ada1969c32e7bbd32d8a83fc587506cd51c"],"severity":"Moderate"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-190403923.json"}}],"schema_version":"1.9.0"}