{"id":"ASB-A-191055353", "published":"2021-09-01T00:00:00Z", "modified":"2026-06-12T15:08:17.296522730Z", "aliases":["CVE-2021-0685", "A-191055353"], "details":"In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-09-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/75214cc510c62f936a713c2da3d0a54db9405957", "https://android.googlesource.com/platform/frameworks/base/+/7ac9b1da731bdf6ed2f34e22d5da7030bc0f7d21"], "severity":"High", "spl":"2021-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"26791562549518565736591114075966613619", "length":1125}, "id":"ASB-A-191055353-12719f89", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7ac9b1da731bdf6ed2f34e22d5da7030bc0f7d21", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java", "function":"getAllIntentFilters"}}, {"deprecated":false, "digest":{"line_hashes":["202508760551269928049748925265883837546", "288382602394991793246021359047271616882", "315568490547752979314190785874915548175", "158415110010746717477914766817457489900", "265991536892244389881449343573385780205"], "threshold":0.9}, "id":"ASB-A-191055353-4203149a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7ac9b1da731bdf6ed2f34e22d5da7030bc0f7d21", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"}}, {"deprecated":false, "digest":{"line_hashes":["6383142627887921752049176884963281050", "338290418009196026627822591821849595762", "183713638792197465421770325659382567042", "174014216592730753590348061875738654121", "109061979751437069457706521258152489813", "222598178733217949611033563915240518466", "215718501902555768039193060090932952539", "306705427514010007601787371644725205716", "230439080901629084449912468634622205021", "190887323007752390040444032902027580230", "337630781252104154245060121950646789109", "247519087127743278762696513752738413944", "319872940432361777858647363532225970641", "70869797237057126119282022522830468623", "137315420376541200394191568973125246448", "35813260228783421431271021967438178401", "332763883529750271178452233556756301302", "173948048992640538787447581372596933973"], "threshold":0.9}, "id":"ASB-A-191055353-512ca9e6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/75214cc510c62f936a713c2da3d0a54db9405957", "target":{"file":"core/java/android/content/pm/parsing/component/ParsedIntentInfo.java"}}, {"deprecated":false, "digest":{"function_hash":"206484618850353406861666623578980502078", "length":66}, "id":"ASB-A-191055353-60e27fd4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/75214cc510c62f936a713c2da3d0a54db9405957", "target":{"file":"core/java/android/content/pm/parsing/component/ParsedIntentInfo.java", "function":"newArray"}}, {"deprecated":false, "digest":{"function_hash":"188809707356197393437833129108699107627", "length":113}, "id":"ASB-A-191055353-b9d833df", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7ac9b1da731bdf6ed2f34e22d5da7030bc0f7d21", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java", "function":"writeElement"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-09-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/49cb41f9d7d2ec741bc2ec27717283dc560a9060"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/f1c159e1f5b3f0835f045a6d58dfd7fdaf1c01f3"}]}