{"id":"ASB-A-172841550", "published":"2021-03-01T00:00:00Z", "modified":"2026-06-18T15:04:46.258745422Z", "aliases":["CVE-2021-0391", "A-172841550"], "details":"In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-03-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2"], "severity":"High", "spl":"2021-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["178359768545536217155368309597846025604", "183806530238371095629457413808596688362", "5700341369694652380894400123268701636", "224382107640148875120939260169729141290", "312878781065474030802867852517107064721", "4140147898571390373091038897603107506", "279634278991220379218199910692652348185", "228285847718047407535281181317771200063", "231008373837216149174120767247680962482", "136021868930287926586881329362937979609", "64027953446879163076880012589637219411", "213786331953044204028955855579177818240", "219072579963742925253988223863639130972"], "threshold":0.9}, "id":"ASB-A-172841550-37308c25", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseAccountActivity.java"}}, {"deprecated":false, "digest":{"line_hashes":["282000476218600853847168279466067212598", "301130012248540230541322432552879113061", "40806355365134196489332550806188172707", "183696238338071455145703843867476514601", "34109602997009970710246737092766793521", "302609440196899580451458479499124385845", "331891034949669426949378089469598408524", "128336888518402923848391216647591119861"], "threshold":0.9}, "id":"ASB-A-172841550-56351a4f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"207624804220701369924702465345216722096", "length":1869}, "id":"ASB-A-172841550-7b454609", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseAccountActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"244621459812270657650929719705734223593", "length":1792}, "id":"ASB-A-172841550-872ff582", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"283414556461806429582274343976581777224", "length":3223}, "id":"ASB-A-172841550-8bd6880c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["4140147898571390373091038897603107506", "279634278991220379218199910692652348185", "74546233059789329768633873525495880689", "3154508882205384628659795506021986670", "40951327312221610315975909859363774457", "202755157990852472814754154122068967221", "309684986002671021758820318678301498666"], "threshold":0.9}, "id":"ASB-A-172841550-9b92d03a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-03-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2"], "severity":"High", "spl":"2021-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"283414556461806429582274343976581777224", "length":3223}, "id":"ASB-A-172841550-2274fc4f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"207624804220701369924702465345216722096", "length":1869}, "id":"ASB-A-172841550-5bcacc4b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseAccountActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["178359768545536217155368309597846025604", "183806530238371095629457413808596688362", "5700341369694652380894400123268701636", "224382107640148875120939260169729141290", "312878781065474030802867852517107064721", "4140147898571390373091038897603107506", "279634278991220379218199910692652348185", "228285847718047407535281181317771200063", "231008373837216149174120767247680962482", "136021868930287926586881329362937979609", "64027953446879163076880012589637219411", "213786331953044204028955855579177818240", "219072579963742925253988223863639130972"], "threshold":0.9}, "id":"ASB-A-172841550-6371a1d6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseAccountActivity.java"}}, {"deprecated":false, "digest":{"line_hashes":["282000476218600853847168279466067212598", "301130012248540230541322432552879113061", "40806355365134196489332550806188172707", "183696238338071455145703843867476514601", "34109602997009970710246737092766793521", "302609440196899580451458479499124385845", "331891034949669426949378089469598408524", "128336888518402923848391216647591119861"], "threshold":0.9}, "id":"ASB-A-172841550-7ffe6d8b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java"}}, {"deprecated":false, "digest":{"line_hashes":["4140147898571390373091038897603107506", "279634278991220379218199910692652348185", "74546233059789329768633873525495880689", "3154508882205384628659795506021986670", "40951327312221610315975909859363774457", "202755157990852472814754154122068967221", "309684986002671021758820318678301498666"], "threshold":0.9}, "id":"ASB-A-172841550-e4535032", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"244621459812270657650929719705734223593", "length":1792}, "id":"ASB-A-172841550-ecd6870e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fedbadf57eeeb82813d8fd43aade685659b909c2", "target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java", "function":"onCreate"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-03-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086"], "severity":"High", "spl":"2021-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["200457836423934089536685332323233631299", "26535511759143710878878621249215939996", "299407338395464618455965411335284229449", "178359768545536217155368309597846025604", "183806530238371095629457413808596688362", "5700341369694652380894400123268701636", "224382107640148875120939260169729141290", "312878781065474030802867852517107064721", "4140147898571390373091038897603107506", "279634278991220379218199910692652348185", "228285847718047407535281181317771200063", "231008373837216149174120767247680962482", "136021868930287926586881329362937979609", "64027953446879163076880012589637219411", "213786331953044204028955855579177818240", "219072579963742925253988223863639130972"], "threshold":0.9}, "id":"ASB-A-172841550-05268c13", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseAccountActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"244621459812270657650929719705734223593", "length":1792}, "id":"ASB-A-172841550-607dbc74", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["4140147898571390373091038897603107506", "279634278991220379218199910692652348185", "74546233059789329768633873525495880689", "3154508882205384628659795506021986670", "40951327312221610315975909859363774457", "202755157990852472814754154122068967221", "309684986002671021758820318678301498666"], "threshold":0.9}, "id":"ASB-A-172841550-cf7d3616", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"300099533195188535265057815411891254940", "length":3231}, "id":"ASB-A-172841550-d3b2011e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["338756025168672841503944107873105376071", "80165988263966893077074478006064266377", "301130012248540230541322432552879113061", "287419706935573716614855437391569370395", "35498394937681637763408142158138900005", "40806355365134196489332550806188172707", "183696238338071455145703843867476514601", "34109602997009970710246737092766793521", "302609440196899580451458479499124385845", "331891034949669426949378089469598408524", "128336888518402923848391216647591119861"], "threshold":0.9}, "id":"ASB-A-172841550-dcff1475", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"58421124205205013095236493481565110791", "length":1877}, "id":"ASB-A-172841550-e5d4b407", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseAccountActivity.java", "function":"onCreate"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-03-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086"], "severity":"High", "spl":"2021-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["4140147898571390373091038897603107506", "279634278991220379218199910692652348185", "74546233059789329768633873525495880689", "3154508882205384628659795506021986670", "40951327312221610315975909859363774457", "202755157990852472814754154122068967221", "309684986002671021758820318678301498666"], "threshold":0.9}, "id":"ASB-A-172841550-2fbcc844", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java"}}, {"deprecated":false, "digest":{"line_hashes":["200457836423934089536685332323233631299", "26535511759143710878878621249215939996", "299407338395464618455965411335284229449", "178359768545536217155368309597846025604", "183806530238371095629457413808596688362", "5700341369694652380894400123268701636", "224382107640148875120939260169729141290", "312878781065474030802867852517107064721", "4140147898571390373091038897603107506", "279634278991220379218199910692652348185", "228285847718047407535281181317771200063", "231008373837216149174120767247680962482", "136021868930287926586881329362937979609", "64027953446879163076880012589637219411", "213786331953044204028955855579177818240", "219072579963742925253988223863639130972"], "threshold":0.9}, "id":"ASB-A-172841550-4e3e6540", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseAccountActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"300099533195188535265057815411891254940", "length":3231}, "id":"ASB-A-172841550-9a6d15e6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"244621459812270657650929719705734223593", "length":1792}, "id":"ASB-A-172841550-9bf975b8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseAccountTypeActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["338756025168672841503944107873105376071", "80165988263966893077074478006064266377", "301130012248540230541322432552879113061", "287419706935573716614855437391569370395", "35498394937681637763408142158138900005", "40806355365134196489332550806188172707", "183696238338071455145703843867476514601", "34109602997009970710246737092766793521", "302609440196899580451458479499124385845", "331891034949669426949378089469598408524", "128336888518402923848391216647591119861"], "threshold":0.9}, "id":"ASB-A-172841550-bd42d3b0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseTypeAndAccountActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"58421124205205013095236493481565110791", "length":1877}, "id":"ASB-A-172841550-bf8a02ea", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ff42dd2d264cd89acdf45cf403147a870a14086", "target":{"file":"core/java/android/accounts/ChooseAccountActivity.java", "function":"onCreate"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-03-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/169f089a26b322b297e8b224e3a7274bc18a986a"}]}