In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2023-01-01",
"vanir_signatures": [
{
"target": {
"function": "getStringsForPrefix",
"file": "core/java/android/provider/Settings.java"
},
"match_only_versions": [
"13"
],
"source": "https://android.googlesource.com/platform/frameworks/base/+/76db1db57e911ed3651e75815fcb66723d6677ae",
"digest": {
"function_hash": "170719490046824191009922812218909069932",
"length": 3207.0
},
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-252663068-2014011f",
"deprecated": false
},
{
"target": {
"file": "core/java/android/provider/Settings.java"
},
"match_only_versions": [
"13"
],
"source": "https://android.googlesource.com/platform/frameworks/base/+/76db1db57e911ed3651e75815fcb66723d6677ae",
"digest": {
"line_hashes": [
"206575089993651807089601235909722492323",
"170746835424172723105617627082668510532",
"304428179005368915956353337583359134940",
"84429516047730934974337158224633238508",
"240840838016650974262232595251488677278"
],
"threshold": 0.9
},
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-252663068-c4196af9",
"deprecated": false
}
],
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/76db1db57e911ed3651e75815fcb66723d6677ae"
],
"severity": "High"
}