{"id":"ASB-A-175614289", "published":"2021-07-01T00:00:00Z", "modified":"2026-06-19T15:21:58.810540849Z", "aliases":["CVE-2021-0599", "A-175614289"], "details":"In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-07-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7dfcfe85ae1225547ffb9e369d15c7952847d1bf"], "severity":"High", "spl":"2021-07-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["155140798746955026211922233343569436904", "40679412187670084343085350279336058230", "319361658088727101539218216098082093863", "238337608107298172025037589602738868900"], "threshold":0.9}, "id":"ASB-A-175614289-2205c988", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7dfcfe85ae1225547ffb9e369d15c7952847d1bf", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"4679512688626466174133925212477317438", "length":599}, "id":"ASB-A-175614289-4900edc5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7dfcfe85ae1225547ffb9e369d15c7952847d1bf", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"scheduleTimeoutLocked"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-07-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4056976f1e7556873696e0a23ad612659669ebad"], "severity":"High", "spl":"2021-07-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["155140798746955026211922233343569436904", "40679412187670084343085350279336058230", "319361658088727101539218216098082093863", "238337608107298172025037589602738868900"], "threshold":0.9}, "id":"ASB-A-175614289-516df413", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4056976f1e7556873696e0a23ad612659669ebad", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"102344930994049120752323747863630688565", "length":600}, "id":"ASB-A-175614289-ef2973a8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4056976f1e7556873696e0a23ad612659669ebad", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"scheduleTimeoutLocked"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-07-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/1c08e32233fef339af2cfdcd1b801af42bd49615"}]}