{"id":"ASB-A-171221302", "published":"2021-02-01T00:00:00Z", "modified":"2026-06-19T15:21:58.810540849Z", "aliases":["CVE-2021-0314", "A-171221302"], "details":"In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.0:0"}, {"fixed":"8.0:2021-02-01"}]}], "versions":["8.0"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"40410502518686685314548652191135045008", "length":3379}, "id":"ASB-A-171221302-6808e78e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08", "target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UninstallerActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["339452049797380972267273120943251287489", "271094028257776096844352744391651480068", "45929723073850113898938742121001615962", "309644852408225531912342484092467992334", "197654040358525845117565211078035345878", "297569614034252644632300537033970598346"], "threshold":0.9}, "id":"ASB-A-171221302-83540243", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08", "target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UninstallerActivity.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-02-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["339452049797380972267273120943251287489", "271094028257776096844352744391651480068", "45929723073850113898938742121001615962", "309644852408225531912342484092467992334", "197654040358525845117565211078035345878", "297569614034252644632300537033970598346"], "threshold":0.9}, "id":"ASB-A-171221302-0e130137", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08", "target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UninstallerActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"40410502518686685314548652191135045008", "length":3379}, "id":"ASB-A-171221302-7335ed3a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08", "target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UninstallerActivity.java", "function":"onCreate"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-02-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["339452049797380972267273120943251287489", "271094028257776096844352744391651480068", "45929723073850113898938742121001615962", "309644852408225531912342484092467992334", "197654040358525845117565211078035345878", "297569614034252644632300537033970598346"], "threshold":0.9}, "id":"ASB-A-171221302-12d047b7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08", "target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UninstallerActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"40410502518686685314548652191135045008", "length":3379}, "id":"ASB-A-171221302-fb39e0e0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08", "target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UninstallerActivity.java", "function":"onCreate"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-02-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["339452049797380972267273120943251287489", "271094028257776096844352744391651480068", "45929723073850113898938742121001615962", "309644852408225531912342484092467992334", "197654040358525845117565211078035345878", "297569614034252644632300537033970598346"], "threshold":0.9}, "id":"ASB-A-171221302-0e85d4c6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08", "target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UninstallerActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"40410502518686685314548652191135045008", "length":3379}, "id":"ASB-A-171221302-3e6c9cb1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08", "target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UninstallerActivity.java", "function":"onCreate"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-02-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08"], "severity":"High", "spl":"2021-02-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"40410502518686685314548652191135045008", "length":3379}, "id":"ASB-A-171221302-29801a89", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08", "target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UninstallerActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["339452049797380972267273120943251287489", "271094028257776096844352744391651480068", "45929723073850113898938742121001615962", "309644852408225531912342484092467992334", "197654040358525845117565211078035345878", "297569614034252644632300537033970598346"], "threshold":0.9}, "id":"ASB-A-171221302-77008ee8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08", "target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UninstallerActivity.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-02-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/90cfe17643aa4ecbe7cbfb1c787217456f764e08"}]}