{"id":"ASB-A-195748381", "published":"2021-12-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2021-0952", "A-195748381"], "details":"In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user's contacts with no additional execution privileges needed. User interaction is needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Contacts", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2021-12-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389"], "severity":"High", "spl":"2021-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"33710228034365950587107242472375266098", "length":1819}, "id":"ASB-A-195748381-130309fb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java", "function":"onActivityResult"}}, {"deprecated":false, "digest":{"function_hash":"314418117801851775801355691785811246598", "length":658}, "id":"ASB-A-195748381-150a3476", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java", "function":"doCropPhoto"}}, {"deprecated":false, "digest":{"line_hashes":["297009647437187288351312534496057984541", "38469369907873177461087543694196245761", "321415984954187660629236682543188182871", "272054503843800643377983096657675118706", "211243339119699819273234614350551707603", "230090811574423055686942903894849481240", "180186510685095853057110917444232057232", "102675008360826615964887147173645430316", "18201849733337273009001638995212369039", "309206389203258398850708434217568906961", "103651622964447416465088003270726011314", "160887830718248784768962514539007960381", "35995487625435595485094658060379210616", "75986618999617851885806937119284027442", "261279452738273431249761987130227645760"], "threshold":0.9}, "id":"ASB-A-195748381-747d2d82", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java"}}, {"deprecated":false, "digest":{"function_hash":"179677790373120952691248773781147594472", "length":173}, "id":"ASB-A-195748381-9085cbd7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java", "function":"hasIntentHandler"}}, {"deprecated":false, "digest":{"function_hash":"297298836795236935448087114931872793637", "length":184}, "id":"ASB-A-195748381-b947400e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java", "function":"hasIntentHandler"}}, {"deprecated":false, "digest":{"line_hashes":["223278207680195898951512275945111873585", "244089033526537708944594960841179992814", "63334131810626954617180635434969915156", "323222867625324388110637694425113564436", "312524547105340884440092928648807911551", "244133901288040665864098417729068874748", "100044497615972359408504530620295725419", "210307963315060544596413630958488474882", "307761566645295474480670835374025477452", "325337384810327391145065627446683500717", "60726150914499607586060425792476400273", "163652942217467545884249545905377635004", "69691961966343907956262108305030078463", "135297140287006104911559077189726871358"], "threshold":0.9}, "id":"ASB-A-195748381-f3f2b5de", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java"}}]}}, {"package":{"name":"platform/packages/apps/Contacts", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-12-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389"], "severity":"High", "spl":"2021-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"297298836795236935448087114931872793637", "length":184}, "id":"ASB-A-195748381-03e52fdb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java", "function":"hasIntentHandler"}}, {"deprecated":false, "digest":{"function_hash":"179677790373120952691248773781147594472", "length":173}, "id":"ASB-A-195748381-15e7b106", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java", "function":"hasIntentHandler"}}, {"deprecated":false, "digest":{"function_hash":"314418117801851775801355691785811246598", "length":658}, "id":"ASB-A-195748381-5a488543", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java", "function":"doCropPhoto"}}, {"deprecated":false, "digest":{"line_hashes":["297009647437187288351312534496057984541", "38469369907873177461087543694196245761", "321415984954187660629236682543188182871", "272054503843800643377983096657675118706", "211243339119699819273234614350551707603", "230090811574423055686942903894849481240", "180186510685095853057110917444232057232", "102675008360826615964887147173645430316", "18201849733337273009001638995212369039", "309206389203258398850708434217568906961", "103651622964447416465088003270726011314", "160887830718248784768962514539007960381", "35995487625435595485094658060379210616", "75986618999617851885806937119284027442", "261279452738273431249761987130227645760"], "threshold":0.9}, "id":"ASB-A-195748381-7f7d8f3e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java"}}, {"deprecated":false, "digest":{"line_hashes":["223278207680195898951512275945111873585", "244089033526537708944594960841179992814", "63334131810626954617180635434969915156", "323222867625324388110637694425113564436", "312524547105340884440092928648807911551", "244133901288040665864098417729068874748", "100044497615972359408504530620295725419", "210307963315060544596413630958488474882", "307761566645295474480670835374025477452", "325337384810327391145065627446683500717", "60726150914499607586060425792476400273", "163652942217467545884249545905377635004", "69691961966343907956262108305030078463", "135297140287006104911559077189726871358"], "threshold":0.9}, "id":"ASB-A-195748381-a302240f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"33710228034365950587107242472375266098", "length":1819}, "id":"ASB-A-195748381-c9cf8f45", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java", "function":"onActivityResult"}}]}}, {"package":{"name":"platform/packages/apps/Contacts", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-12-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389"], "severity":"High", "spl":"2021-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"179677790373120952691248773781147594472", "length":173}, "id":"ASB-A-195748381-14db33ff", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java", "function":"hasIntentHandler"}}, {"deprecated":false, "digest":{"function_hash":"314418117801851775801355691785811246598", "length":658}, "id":"ASB-A-195748381-4c1b28c5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java", "function":"doCropPhoto"}}, {"deprecated":false, "digest":{"line_hashes":["297009647437187288351312534496057984541", "38469369907873177461087543694196245761", "321415984954187660629236682543188182871", "272054503843800643377983096657675118706", "211243339119699819273234614350551707603", "230090811574423055686942903894849481240", "180186510685095853057110917444232057232", "102675008360826615964887147173645430316", "18201849733337273009001638995212369039", "309206389203258398850708434217568906961", "103651622964447416465088003270726011314", "160887830718248784768962514539007960381", "35995487625435595485094658060379210616", "75986618999617851885806937119284027442", "261279452738273431249761987130227645760"], "threshold":0.9}, "id":"ASB-A-195748381-a95bc6ca", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java"}}, {"deprecated":false, "digest":{"line_hashes":["223278207680195898951512275945111873585", "244089033526537708944594960841179992814", "63334131810626954617180635434969915156", "323222867625324388110637694425113564436", "312524547105340884440092928648807911551", "244133901288040665864098417729068874748", "100044497615972359408504530620295725419", "210307963315060544596413630958488474882", "307761566645295474480670835374025477452", "325337384810327391145065627446683500717", "60726150914499607586060425792476400273", "163652942217467545884249545905377635004", "69691961966343907956262108305030078463", "135297140287006104911559077189726871358"], "threshold":0.9}, "id":"ASB-A-195748381-ae3262a0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"33710228034365950587107242472375266098", "length":1819}, "id":"ASB-A-195748381-d67b2744", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java", "function":"onActivityResult"}}, {"deprecated":false, "digest":{"function_hash":"297298836795236935448087114931872793637", "length":184}, "id":"ASB-A-195748381-fd26ac0e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java", "function":"hasIntentHandler"}}]}}, {"package":{"name":"platform/packages/apps/Contacts", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2021-12-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389"], "severity":"High", "spl":"2021-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["223278207680195898951512275945111873585", "244089033526537708944594960841179992814", "63334131810626954617180635434969915156", "323222867625324388110637694425113564436", "312524547105340884440092928648807911551", "244133901288040665864098417729068874748", "100044497615972359408504530620295725419", "210307963315060544596413630958488474882", "307761566645295474480670835374025477452", "325337384810327391145065627446683500717", "60726150914499607586060425792476400273", "163652942217467545884249545905377635004", "69691961966343907956262108305030078463", "135297140287006104911559077189726871358"], "threshold":0.9}, "id":"ASB-A-195748381-009d7708", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java"}}, {"deprecated":false, "digest":{"line_hashes":["297009647437187288351312534496057984541", "38469369907873177461087543694196245761", "321415984954187660629236682543188182871", "272054503843800643377983096657675118706", "211243339119699819273234614350551707603", "230090811574423055686942903894849481240", "180186510685095853057110917444232057232", "102675008360826615964887147173645430316", "18201849733337273009001638995212369039", "309206389203258398850708434217568906961", "103651622964447416465088003270726011314", "160887830718248784768962514539007960381", "35995487625435595485094658060379210616", "75986618999617851885806937119284027442", "261279452738273431249761987130227645760"], "threshold":0.9}, "id":"ASB-A-195748381-3299212d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java"}}, {"deprecated":false, "digest":{"function_hash":"33710228034365950587107242472375266098", "length":1819}, "id":"ASB-A-195748381-3dac08dd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java", "function":"onActivityResult"}}, {"deprecated":false, "digest":{"function_hash":"179677790373120952691248773781147594472", "length":173}, "id":"ASB-A-195748381-80013b57", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/activities/AttachPhotoActivity.java", "function":"hasIntentHandler"}}, {"deprecated":false, "digest":{"function_hash":"297298836795236935448087114931872793637", "length":184}, "id":"ASB-A-195748381-bdd7ad26", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java", "function":"hasIntentHandler"}}, {"deprecated":false, "digest":{"function_hash":"314418117801851775801355691785811246598", "length":658}, "id":"ASB-A-195748381-da0c6cae", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Contacts/+/8b19ca470847f5f77d5b2e5dd086aae9ad4ea389", "target":{"file":"src/com/android/contacts/detail/PhotoSelectionHandler.java", "function":"doCropPhoto"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-12-01"}]}