{"id":"PUB-A-197749180","details":"In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-197749180","CVE-2021-1004"],"modified":"2026-05-01T15:24:27.653932Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Wifi/+/bd8881739d3a318cad4e2bef60b03547dd14715c"}],"affected":[{"package":{"name":"platform/packages/modules/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-12-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Wifi/+/bd8881739d3a318cad4e2bef60b03547dd14715c","https://android.googlesource.com/platform/packages/modules/Wifi/+/6e6650c76c25a1d0279ab16b9cd0d63b841906e2"],"vanir_signatures":[{"id":"PUB-A-197749180-3f2dbe3d","target":{"function":"getConfiguredNetworks","file":"service/java/com/android/server/wifi/WifiServiceImpl.java"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/bd8881739d3a318cad4e2bef60b03547dd14715c","signature_type":"Function","signature_version":"v1","digest":{"length":1880,"function_hash":"334648985680967749890802445307058064647"},"deprecated":false},{"id":"PUB-A-197749180-64544f15","target":{"function":"getConfiguredNetworks","file":"service/java/com/android/server/wifi/WifiServiceImpl.java"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/6e6650c76c25a1d0279ab16b9cd0d63b841906e2","signature_type":"Function","signature_version":"v1","digest":{"length":1930,"function_hash":"327847369796639015017293184543632006127"},"deprecated":false},{"id":"PUB-A-197749180-8dbf5092","target":{"file":"service/java/com/android/server/wifi/WifiServiceImpl.java"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/bd8881739d3a318cad4e2bef60b03547dd14715c","signature_type":"Line","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["242625264923287647758179166497465093176","44977527038889901187066130860769944062","101914245691445740562944914213089121830","97051022933864093902631334303086124073"]},"deprecated":false},{"id":"PUB-A-197749180-a61c95ca","target":{"file":"service/java/com/android/server/wifi/WifiServiceImpl.java"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/6e6650c76c25a1d0279ab16b9cd0d63b841906e2","signature_type":"Line","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["302969208553209795699394871896338548177","333781268783009854615046583021662604320","225547670772104569077788438763876594552","195658567196769855873735416827242643507","53516275232811418909982485714111762473","252039387123234998459734797382738281411","243913910916253974464286809172054759936","304739526116444971162023329891411992156","225486785194533299999449523517217262572","264390522332305475465630497058963559990","186473257942834545907138943477719439251","337149880851248060870007276554744594887","145220003403139650679431654571756770122","318410186178633709574502047328059998172","178901837964836214470079003488947459267","209985048356082248825299632260794314658","307553929703386064941037471466891004284","314677869122922379937794292893576028583","260422291903354433595950437439616714709","160009824145398759223771539058023412881","163234189747515439179273466715147244297"]},"deprecated":false}],"severity":"Moderate","types":["EoP"],"spl":"2021-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-197749180.json"}}],"schema_version":"1.7.5"}