In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"severity": "High",
"spl": "2023-02-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"length": 838.0,
"function_hash": "97734813324455114638168973987451006310"
},
"id": "ASB-A-244154558-074a2305",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8",
"target": {
"file": "core/java/android/accounts/ChooseTypeAndAccountActivity.java",
"function": "run"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"168367720658013878434305636110780693264",
"70322744295924372814385861896908411710",
"282128897818291101007703694976473725565",
"172838133897058858698945207264699440779"
],
"threshold": 0.9
},
"id": "ASB-A-244154558-40dfacc6",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8",
"target": {
"file": "core/java/android/accounts/ChooseTypeAndAccountActivity.java"
}
}
],
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8"
]
}{
"severity": "High",
"spl": "2023-02-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"length": 838.0,
"function_hash": "97734813324455114638168973987451006310"
},
"id": "ASB-A-244154558-2eaea268",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8",
"target": {
"file": "core/java/android/accounts/ChooseTypeAndAccountActivity.java",
"function": "run"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"168367720658013878434305636110780693264",
"70322744295924372814385861896908411710",
"282128897818291101007703694976473725565",
"172838133897058858698945207264699440779"
],
"threshold": 0.9
},
"id": "ASB-A-244154558-9bd62540",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8",
"target": {
"file": "core/java/android/accounts/ChooseTypeAndAccountActivity.java"
}
}
],
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8"
]
}{
"severity": "High",
"spl": "2023-02-01",
"vanir_signatures": [
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"168367720658013878434305636110780693264",
"70322744295924372814385861896908411710",
"282128897818291101007703694976473725565",
"172838133897058858698945207264699440779"
],
"threshold": 0.9
},
"id": "ASB-A-244154558-13b53d61",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8",
"target": {
"file": "core/java/android/accounts/ChooseTypeAndAccountActivity.java"
}
},
{
"signature_type": "Function",
"digest": {
"length": 838.0,
"function_hash": "97734813324455114638168973987451006310"
},
"id": "ASB-A-244154558-5eac4868",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8",
"target": {
"file": "core/java/android/accounts/ChooseTypeAndAccountActivity.java",
"function": "run"
}
}
],
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8"
]
}{
"severity": "High",
"spl": "2023-02-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"length": 838.0,
"function_hash": "97734813324455114638168973987451006310"
},
"id": "ASB-A-244154558-1f4f3ba5",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8",
"target": {
"file": "core/java/android/accounts/ChooseTypeAndAccountActivity.java",
"function": "run"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"168367720658013878434305636110780693264",
"70322744295924372814385861896908411710",
"282128897818291101007703694976473725565",
"172838133897058858698945207264699440779"
],
"threshold": 0.9
},
"id": "ASB-A-244154558-57111c25",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8",
"target": {
"file": "core/java/android/accounts/ChooseTypeAndAccountActivity.java"
}
}
],
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8"
]
}{
"severity": "High",
"spl": "2023-02-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"length": 838.0,
"function_hash": "97734813324455114638168973987451006310"
},
"id": "ASB-A-244154558-098b6aa7",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8",
"target": {
"file": "core/java/android/accounts/ChooseTypeAndAccountActivity.java",
"function": "run"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"168367720658013878434305636110780693264",
"70322744295924372814385861896908411710",
"282128897818291101007703694976473725565",
"172838133897058858698945207264699440779"
],
"threshold": 0.9
},
"id": "ASB-A-244154558-827b82bf",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8",
"target": {
"file": "core/java/android/accounts/ChooseTypeAndAccountActivity.java"
}
}
],
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ede0a767c26f144e38b4a0c1c2f530b05ffd29a8"
]
}