{"id":"ASB-A-163358811", "published":"2021-02-01T00:00:00Z", "modified":"2026-06-11T14:59:52.052110020Z", "aliases":["CVE-2021-0334", "A-163358811"], "details":"In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.0:0"}, {"fixed":"8.0:2021-02-01"}]}], "versions":["8.0"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["174371553732100889283254511614136005441", "13330894795705433851892047269793446799", "201994403411096622710607662506332749494", "134510787689246407431920260464135272370", "333301721987638033010754890503292933194", "334421543523570617777152532351159328443", "46504565387357307030054830023679990582", "211255316221032162905081300686009719926", "247284402298655770418265826111420868310", "272831955049442656560451445653716304708", "5834475539267677776199645141465132214", "119681882521869389982210889803274217724", "219116227868864441301067429919611919680", "33393003783262160847678859101194228440", "60363212111710427479805791938696258310", "188605675358477518837422141341530750606", "276088793410760290443735272149674200612", "339988031543743852047813282201495733879"], "threshold":0.9}, "id":"ASB-A-163358811-2b267d55", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4", "target":{"file":"core/java/com/android/internal/app/ResolverActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"298730487644032992607579790542590767991", "length":4170}, "id":"ASB-A-163358811-ba2b7484", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4", "target":{"file":"core/java/com/android/internal/app/ResolverActivity.java", "function":"onTargetSelected"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-02-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"298730487644032992607579790542590767991", "length":4170}, "id":"ASB-A-163358811-65fcabd5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4", "target":{"file":"core/java/com/android/internal/app/ResolverActivity.java", "function":"onTargetSelected"}}, {"deprecated":false, "digest":{"line_hashes":["174371553732100889283254511614136005441", "13330894795705433851892047269793446799", "201994403411096622710607662506332749494", "134510787689246407431920260464135272370", "333301721987638033010754890503292933194", "334421543523570617777152532351159328443", "46504565387357307030054830023679990582", "211255316221032162905081300686009719926", "247284402298655770418265826111420868310", "272831955049442656560451445653716304708", "5834475539267677776199645141465132214", "119681882521869389982210889803274217724", "219116227868864441301067429919611919680", "33393003783262160847678859101194228440", "60363212111710427479805791938696258310", "188605675358477518837422141341530750606", "276088793410760290443735272149674200612", "339988031543743852047813282201495733879"], "threshold":0.9}, "id":"ASB-A-163358811-cc0f08e1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4", "target":{"file":"core/java/com/android/internal/app/ResolverActivity.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-02-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"298730487644032992607579790542590767991", "length":4170}, "id":"ASB-A-163358811-20002b59", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4", "target":{"file":"core/java/com/android/internal/app/ResolverActivity.java", "function":"onTargetSelected"}}, {"deprecated":false, "digest":{"line_hashes":["174371553732100889283254511614136005441", "13330894795705433851892047269793446799", "201994403411096622710607662506332749494", "134510787689246407431920260464135272370", "333301721987638033010754890503292933194", "334421543523570617777152532351159328443", "46504565387357307030054830023679990582", "211255316221032162905081300686009719926", "247284402298655770418265826111420868310", "272831955049442656560451445653716304708", "5834475539267677776199645141465132214", "119681882521869389982210889803274217724", "219116227868864441301067429919611919680", "33393003783262160847678859101194228440", "60363212111710427479805791938696258310", "188605675358477518837422141341530750606", "276088793410760290443735272149674200612", "339988031543743852047813282201495733879"], "threshold":0.9}, "id":"ASB-A-163358811-8d8ef0dd", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4", "target":{"file":"core/java/com/android/internal/app/ResolverActivity.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-02-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["174371553732100889283254511614136005441", "13330894795705433851892047269793446799", "201994403411096622710607662506332749494", "134510787689246407431920260464135272370", "333301721987638033010754890503292933194", "334421543523570617777152532351159328443", "46504565387357307030054830023679990582", "211255316221032162905081300686009719926", "247284402298655770418265826111420868310", "272831955049442656560451445653716304708", "5834475539267677776199645141465132214", "119681882521869389982210889803274217724", "219116227868864441301067429919611919680", "33393003783262160847678859101194228440", "60363212111710427479805791938696258310", "188605675358477518837422141341530750606", "276088793410760290443735272149674200612", "339988031543743852047813282201495733879"], "threshold":0.9}, "id":"ASB-A-163358811-1a82efa1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4", "target":{"file":"core/java/com/android/internal/app/ResolverActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"298730487644032992607579790542590767991", "length":4170}, "id":"ASB-A-163358811-a39901d1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4", "target":{"file":"core/java/com/android/internal/app/ResolverActivity.java", "function":"onTargetSelected"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-02-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"298730487644032992607579790542590767991", "length":4170}, "id":"ASB-A-163358811-a72df64f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4", "target":{"file":"core/java/com/android/internal/app/ResolverActivity.java", "function":"onTargetSelected"}}, {"deprecated":false, "digest":{"line_hashes":["174371553732100889283254511614136005441", "13330894795705433851892047269793446799", "201994403411096622710607662506332749494", "134510787689246407431920260464135272370", "333301721987638033010754890503292933194", "334421543523570617777152532351159328443", "46504565387357307030054830023679990582", "211255316221032162905081300686009719926", "247284402298655770418265826111420868310", "272831955049442656560451445653716304708", "5834475539267677776199645141465132214", "119681882521869389982210889803274217724", "219116227868864441301067429919611919680", "33393003783262160847678859101194228440", "60363212111710427479805791938696258310", "188605675358477518837422141341530750606", "276088793410760290443735272149674200612", "339988031543743852047813282201495733879"], "threshold":0.9}, "id":"ASB-A-163358811-b4d67a45", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4", "target":{"file":"core/java/com/android/internal/app/ResolverActivity.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-02-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/251dfbee7fb5986c7e93362556ea556785e4d0e4"}]}