{"id":"PUB-A-190403923", "published":"2021-12-01T00:00:00Z", "modified":"2026-07-10T15:26:01.587957612Z", "aliases":["CVE-2021-0985", "A-190403923"], "details":"In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Calendar", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2021-12-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Calendar/+/ae487ada1969c32e7bbd32d8a83fc587506cd51c"], "severity":"Moderate", "spl":"2021-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"108617513870138025136260894798723387824", "length":125}, "id":"PUB-A-190403923-1c794392", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Calendar/+/ae487ada1969c32e7bbd32d8a83fc587506cd51c", "target":{"file":"src/com/android/calendar/alerts/AlertReceiver.java", "function":"closeNotificationShade"}}, {"deprecated":false, "digest":{"function_hash":"93356585002155740390245538472246922660", "length":208}, "id":"PUB-A-190403923-41073d3e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Calendar/+/ae487ada1969c32e7bbd32d8a83fc587506cd51c", "target":{"file":"src/com/android/calendar/alerts/AlertReceiver.java", "function":"onReceive"}}, {"deprecated":false, "digest":{"line_hashes":["300617179344378637534527336095936374568", "180678488712927927906112762742832389511", "143164644377627368423907901371003681387", "271827929067176684688928617079353341344", "106114471733513251642808885011820723129", "295015509283110613549894267130139925544", "208427662785872013839685999483419916928", "142511458237997025435444913586429282833", "197174280565475402059731278978296818377"], "threshold":0.9}, "id":"PUB-A-190403923-5b10c57e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Calendar/+/ae487ada1969c32e7bbd32d8a83fc587506cd51c", "target":{"file":"src/com/android/calendar/alerts/AlertReceiver.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-12-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Calendar/+/ae487ada1969c32e7bbd32d8a83fc587506cd51c"}]}