{"id":"ASB-A-158219161", "published":"2021-02-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2021-0336", "A-158219161"], "details":"In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.0:0"}, {"fixed":"8.0:2021-02-01"}]}], "versions":["8.0"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["74645274398598483034025413723469293981", "160557484114296298603609612894208182302", "188846484198463092366458891630091667255", "227878806990682516032852430723126131138"], "threshold":0.9}, "id":"ASB-A-158219161-b5f7c870", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f", "target":{"file":"src/com/android/settings/bluetooth/BluetoothPermissionRequest.java"}}, {"deprecated":false, "digest":{"function_hash":"254086298093462912306453533651217985879", "length":4407}, "id":"ASB-A-158219161-bcb9c86d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f", "target":{"file":"src/com/android/settings/bluetooth/BluetoothPermissionRequest.java", "function":"onReceive"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-02-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["74645274398598483034025413723469293981", "160557484114296298603609612894208182302", "188846484198463092366458891630091667255", "227878806990682516032852430723126131138"], "threshold":0.9}, "id":"ASB-A-158219161-5d90ab4b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f", "target":{"file":"src/com/android/settings/bluetooth/BluetoothPermissionRequest.java"}}, {"deprecated":false, "digest":{"function_hash":"254086298093462912306453533651217985879", "length":4407}, "id":"ASB-A-158219161-c1e14807", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f", "target":{"file":"src/com/android/settings/bluetooth/BluetoothPermissionRequest.java", "function":"onReceive"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-02-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"254086298093462912306453533651217985879", "length":4407}, "id":"ASB-A-158219161-7583202e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f", "target":{"file":"src/com/android/settings/bluetooth/BluetoothPermissionRequest.java", "function":"onReceive"}}, {"deprecated":false, "digest":{"line_hashes":["74645274398598483034025413723469293981", "160557484114296298603609612894208182302", "188846484198463092366458891630091667255", "227878806990682516032852430723126131138"], "threshold":0.9}, "id":"ASB-A-158219161-cfb48251", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f", "target":{"file":"src/com/android/settings/bluetooth/BluetoothPermissionRequest.java"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-02-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["74645274398598483034025413723469293981", "160557484114296298603609612894208182302", "188846484198463092366458891630091667255", "227878806990682516032852430723126131138"], "threshold":0.9}, "id":"ASB-A-158219161-2e174cc7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f", "target":{"file":"src/com/android/settings/bluetooth/BluetoothPermissionRequest.java"}}, {"deprecated":false, "digest":{"function_hash":"254086298093462912306453533651217985879", "length":4407}, "id":"ASB-A-158219161-3235404b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f", "target":{"file":"src/com/android/settings/bluetooth/BluetoothPermissionRequest.java", "function":"onReceive"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-02-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"254086298093462912306453533651217985879", "length":4407}, "id":"ASB-A-158219161-4d9dfbae", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f", "target":{"file":"src/com/android/settings/bluetooth/BluetoothPermissionRequest.java", "function":"onReceive"}}, {"deprecated":false, "digest":{"line_hashes":["74645274398598483034025413723469293981", "160557484114296298603609612894208182302", "188846484198463092366458891630091667255", "227878806990682516032852430723126131138"], "threshold":0.9}, "id":"ASB-A-158219161-7431f4dd", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f", "target":{"file":"src/com/android/settings/bluetooth/BluetoothPermissionRequest.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-02-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Settings/+/f065b8743377f62d6d0dc99da24ac034314dae1f"}]}