{"id":"PUB-A-193801134","details":"In requestRouteToHostAddress  of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-193801134","CVE-2021-0994"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/b2c286816d35877ffe22e70f5bc1c03c6d03b214"}],"affected":[{"package":{"name":"platform/packages/modules/Connectivity","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-12-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"id":"PUB-A-193801134-731290f9","digest":{"line_hashes":["314799369627835642921827884396392181379","9030396507336448212934982012430864371","211211637072040028664152410553025331110","101724637114009651002447169703361275422","229345486118179885689352253295393278836","311731141835569413312801846668454551622","324190697714092880881121812681882346648"],"threshold":0.9},"signature_version":"v1","signature_type":"Line","deprecated":false,"target":{"file":"service/src/com/android/server/ConnectivityService.java"},"source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/b2c286816d35877ffe22e70f5bc1c03c6d03b214"},{"id":"PUB-A-193801134-d910352b","digest":{"function_hash":"68085344819532462762135832814978335987","length":1579},"signature_version":"v1","signature_type":"Function","deprecated":false,"target":{"function":"requestRouteToHostAddress","file":"service/src/com/android/server/ConnectivityService.java"},"source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/b2c286816d35877ffe22e70f5bc1c03c6d03b214"}],"types":["ID"],"severity":"Moderate","spl":"2021-12-01","fixes":["https://android.googlesource.com/platform/packages/modules/Connectivity/+/b2c286816d35877ffe22e70f5bc1c03c6d03b214"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-193801134.json"}}],"schema_version":"1.7.5"}