{"id":"ASB-A-177238342", "published":"2021-07-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2021-0588", "A-177238342"], "details":"In processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2021-07-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Bluetooth/+/7fe88ee4d21df9715d1326995ef9f1160945f8a7"], "severity":"High", "spl":"2021-07-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"267014055218915562324544224807642477596", "length":1589}, "id":"ASB-A-177238342-21ed1dfc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/7fe88ee4d21df9715d1326995ef9f1160945f8a7", "target":{"file":"src/com/android/bluetooth/mapclient/MceStateMachine.java", "function":"processInboundMessage"}}, {"deprecated":false, "digest":{"line_hashes":["204567973715472067066247483845272490480", "4651904736654534218624381003266123619", "175106579451678976287564149135052824973", "50516183646675268844942920109146207064", "239927787402054502068805163281703011302", "118578066003825052603890285099994597954", "280191191649882434054280314678359611874", "17024649308917103928626280810893798588"], "threshold":0.9}, "id":"ASB-A-177238342-b2941ee4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/7fe88ee4d21df9715d1326995ef9f1160945f8a7", "target":{"file":"src/com/android/bluetooth/mapclient/MceStateMachine.java"}}]}}, {"package":{"name":"platform/packages/apps/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-07-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Bluetooth/+/1053a248da167ab586e282fb8057fef2ef87b659"], "severity":"High", "spl":"2021-07-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["88242695581226210517726882826385907342", "228351318621997576290397813409176551539", "306990524383001794509029399546078534620", "30870753740782282268746949493014393146", "239927787402054502068805163281703011302", "118578066003825052603890285099994597954", "280191191649882434054280314678359611874", "17024649308917103928626280810893798588"], "threshold":0.9}, "id":"ASB-A-177238342-256d90e9", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/1053a248da167ab586e282fb8057fef2ef87b659", "target":{"file":"src/com/android/bluetooth/mapclient/MceStateMachine.java"}}, {"deprecated":false, "digest":{"function_hash":"262941306501579972416702905455252343848", "length":1617}, "id":"ASB-A-177238342-ede25644", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/1053a248da167ab586e282fb8057fef2ef87b659", "target":{"file":"src/com/android/bluetooth/mapclient/MceStateMachine.java", "function":"processInboundMessage"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-07-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/bbf60925044c9ea7613c4264dea20c6c12246118"}]}