{"id":"ASB-A-168319670", "published":"2021-01-01T00:00:00Z", "modified":"2026-06-12T15:08:17.296522730Z", "aliases":["CVE-2021-0317", "A-168319670"], "details":"In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.0:0"}, {"fixed":"8.0:2021-01-01"}]}], "versions":["8.0"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47"], "severity":"High", "spl":"2021-01-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"159669981910848186740133655022903054465", "length":2873}, "id":"ASB-A-168319670-431f8199", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47", "target":{"file":"services/core/java/com/android/server/pm/permission/BasePermission.java", "function":"createOrUpdate"}}, {"deprecated":false, "digest":{"line_hashes":["300558797478455665228977041073332740161", "229089149346645259548452564495478783989", "158516251953092459809047713070131326523", "23878212559383681882692447600667961378", "309214319754859876925951608291378068273", "38034053912912518898345619210675635579", "106001563314996809083498962546828590825", "102279475340615476629214848145454800846"], "threshold":0.9}, "id":"ASB-A-168319670-b8307471", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47", "target":{"file":"services/core/java/com/android/server/pm/permission/BasePermission.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-01-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47"], "severity":"High", "spl":"2021-01-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"159669981910848186740133655022903054465", "length":2873}, "id":"ASB-A-168319670-4471fe7c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47", "target":{"file":"services/core/java/com/android/server/pm/permission/BasePermission.java", "function":"createOrUpdate"}}, {"deprecated":false, "digest":{"line_hashes":["300558797478455665228977041073332740161", "229089149346645259548452564495478783989", "158516251953092459809047713070131326523", "23878212559383681882692447600667961378", "309214319754859876925951608291378068273", "38034053912912518898345619210675635579", "106001563314996809083498962546828590825", "102279475340615476629214848145454800846"], "threshold":0.9}, "id":"ASB-A-168319670-91caa67f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47", "target":{"file":"services/core/java/com/android/server/pm/permission/BasePermission.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-01-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47"], "severity":"High", "spl":"2021-01-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"159669981910848186740133655022903054465", "length":2873}, "id":"ASB-A-168319670-412e37a2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47", "target":{"file":"services/core/java/com/android/server/pm/permission/BasePermission.java", "function":"createOrUpdate"}}, {"deprecated":false, "digest":{"line_hashes":["300558797478455665228977041073332740161", "229089149346645259548452564495478783989", "158516251953092459809047713070131326523", "23878212559383681882692447600667961378", "309214319754859876925951608291378068273", "38034053912912518898345619210675635579", "106001563314996809083498962546828590825", "102279475340615476629214848145454800846"], "threshold":0.9}, "id":"ASB-A-168319670-85f3cf20", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47", "target":{"file":"services/core/java/com/android/server/pm/permission/BasePermission.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-01-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47"], "severity":"High", "spl":"2021-01-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["300558797478455665228977041073332740161", "229089149346645259548452564495478783989", "158516251953092459809047713070131326523", "23878212559383681882692447600667961378", "309214319754859876925951608291378068273", "38034053912912518898345619210675635579", "106001563314996809083498962546828590825", "102279475340615476629214848145454800846"], "threshold":0.9}, "id":"ASB-A-168319670-7092be5b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47", "target":{"file":"services/core/java/com/android/server/pm/permission/BasePermission.java"}}, {"deprecated":false, "digest":{"function_hash":"159669981910848186740133655022903054465", "length":2873}, "id":"ASB-A-168319670-d0b18bcf", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47", "target":{"file":"services/core/java/com/android/server/pm/permission/BasePermission.java", "function":"createOrUpdate"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-01-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47"], "severity":"High", "spl":"2021-01-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["300558797478455665228977041073332740161", "229089149346645259548452564495478783989", "158516251953092459809047713070131326523", "23878212559383681882692447600667961378", "309214319754859876925951608291378068273", "38034053912912518898345619210675635579", "106001563314996809083498962546828590825", "102279475340615476629214848145454800846"], "threshold":0.9}, "id":"ASB-A-168319670-06ed3e21", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47", "target":{"file":"services/core/java/com/android/server/pm/permission/BasePermission.java"}}, {"deprecated":false, "digest":{"function_hash":"159669981910848186740133655022903054465", "length":2873}, "id":"ASB-A-168319670-a229c7b8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47", "target":{"file":"services/core/java/com/android/server/pm/permission/BasePermission.java", "function":"createOrUpdate"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-01-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/c4ce178c261e6a2dc1aa4c1e1d570f0efd980e47"}]}