ASB-A-252762941

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-252762941.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-252762941
Aliases
Published
2023-04-01T00:00:00Z
Modified
2026-04-17T15:55:28.020024Z
Summary
[none]
Details

In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/services/Telecomm

Package

Name
platform/packages/services/Telecomm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13-next:0
Fixed
13-next:2023-04-01

Affected versions

Other
13-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 309.0,
                "function_hash": "338648352086149527100499374510372632256"
            },
            "id": "ASB-A-252762941-0491c532",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97",
            "target": {
                "function": "onServiceDisconnected",
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        },
        {
            "digest": {
                "length": 135.0,
                "function_hash": "120562527713875321562491172127154338355"
            },
            "id": "ASB-A-252762941-389f8d19",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97",
            "target": {
                "function": "onServiceDisconnected",
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 127.0,
                "function_hash": "336258356887302573331064480651611557665"
            },
            "id": "ASB-A-252762941-5e0d6fd6",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97",
            "target": {
                "function": "onBindingDied",
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "93138640784470167329690777748229323496",
                    "63659522462177018524502730833184707231",
                    "221352119823462935609529477489016598561",
                    "25006135446868165074748325266048463470",
                    "317718284322286336306459607661067067600",
                    "46883327502752481797982597445200861609",
                    "22267128855893681361825919778626530847",
                    "150664494464330869492374344664841387753",
                    "233455445762780446044602025550781883204"
                ]
            },
            "id": "ASB-A-252762941-65b2c755",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97",
            "target": {
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 1763.0,
                "function_hash": "209371112732447835114921646363933542613"
            },
            "id": "ASB-A-252762941-a6de4bd1",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97",
            "target": {
                "function": "bindAndGetCallIdentification",
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "50597268355645420433777563493224433987",
                    "248425411295318334669297501175840080626",
                    "204579555969700246112803004237674141628",
                    "108473673675401684701075550158319777465"
                ]
            },
            "id": "ASB-A-252762941-d6991d9f",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97",
            "target": {
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"
    ],
    "types": [
        "ID"
    ],
    "spl": "2023-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"
platform/packages/services/Telecomm

Package

Name
platform/packages/services/Telecomm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2023-04-01

Affected versions

Other
11

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 135.0,
                "function_hash": "120562527713875321562491172127154338355"
            },
            "id": "ASB-A-252762941-ae4eff45",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onServiceDisconnected",
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 127.0,
                "function_hash": "336258356887302573331064480651611557665"
            },
            "id": "ASB-A-252762941-b1d1468d",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onBindingDied",
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "93138640784470167329690777748229323496",
                    "63659522462177018524502730833184707231",
                    "221352119823462935609529477489016598561",
                    "25006135446868165074748325266048463470",
                    "317718284322286336306459607661067067600",
                    "46883327502752481797982597445200861609",
                    "22267128855893681361825919778626530847",
                    "150664494464330869492374344664841387753",
                    "233455445762780446044602025550781883204"
                ]
            },
            "id": "ASB-A-252762941-b768e05b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 1763.0,
                "function_hash": "308477138216609990425240453918711753581"
            },
            "id": "ASB-A-252762941-c552d493",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "bindAndGetCallIdentification",
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "50597268355645420433777563493224433987",
                    "248425411295318334669297501175840080626",
                    "204579555969700246112803004237674141628",
                    "108473673675401684701075550158319777465"
                ]
            },
            "id": "ASB-A-252762941-d6e83e36",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        },
        {
            "digest": {
                "length": 309.0,
                "function_hash": "338648352086149527100499374510372632256"
            },
            "id": "ASB-A-252762941-ee735b9e",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onServiceDisconnected",
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"
    ],
    "types": [
        "ID"
    ],
    "spl": "2023-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"
platform/packages/services/Telecomm

Package

Name
platform/packages/services/Telecomm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2023-04-01

Affected versions

Other
12

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 135.0,
                "function_hash": "120562527713875321562491172127154338355"
            },
            "id": "ASB-A-252762941-06e8ce0d",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onServiceDisconnected",
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 127.0,
                "function_hash": "336258356887302573331064480651611557665"
            },
            "id": "ASB-A-252762941-14b9ec38",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onBindingDied",
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 309.0,
                "function_hash": "338648352086149527100499374510372632256"
            },
            "id": "ASB-A-252762941-19343a41",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onServiceDisconnected",
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "50597268355645420433777563493224433987",
                    "248425411295318334669297501175840080626",
                    "204579555969700246112803004237674141628",
                    "108473673675401684701075550158319777465"
                ]
            },
            "id": "ASB-A-252762941-24a2a90e",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "93138640784470167329690777748229323496",
                    "63659522462177018524502730833184707231",
                    "221352119823462935609529477489016598561",
                    "25006135446868165074748325266048463470",
                    "317718284322286336306459607661067067600",
                    "46883327502752481797982597445200861609",
                    "22267128855893681361825919778626530847",
                    "150664494464330869492374344664841387753",
                    "233455445762780446044602025550781883204"
                ]
            },
            "id": "ASB-A-252762941-6d5800cd",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 1763.0,
                "function_hash": "308477138216609990425240453918711753581"
            },
            "id": "ASB-A-252762941-db51ad2d",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "bindAndGetCallIdentification",
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"
    ],
    "types": [
        "ID"
    ],
    "spl": "2023-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"
platform/packages/services/Telecomm

Package

Name
platform/packages/services/Telecomm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2023-04-01

Affected versions

Other
12L

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "50597268355645420433777563493224433987",
                    "248425411295318334669297501175840080626",
                    "204579555969700246112803004237674141628",
                    "108473673675401684701075550158319777465"
                ]
            },
            "id": "ASB-A-252762941-668b09ba",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "93138640784470167329690777748229323496",
                    "63659522462177018524502730833184707231",
                    "221352119823462935609529477489016598561",
                    "25006135446868165074748325266048463470",
                    "317718284322286336306459607661067067600",
                    "46883327502752481797982597445200861609",
                    "22267128855893681361825919778626530847",
                    "150664494464330869492374344664841387753",
                    "233455445762780446044602025550781883204"
                ]
            },
            "id": "ASB-A-252762941-8a2e2ff0",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 135.0,
                "function_hash": "120562527713875321562491172127154338355"
            },
            "id": "ASB-A-252762941-a1b2f09e",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onServiceDisconnected",
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 127.0,
                "function_hash": "336258356887302573331064480651611557665"
            },
            "id": "ASB-A-252762941-f2ea59ce",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onBindingDied",
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 1763.0,
                "function_hash": "308477138216609990425240453918711753581"
            },
            "id": "ASB-A-252762941-f79e24bc",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "bindAndGetCallIdentification",
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        },
        {
            "digest": {
                "length": 309.0,
                "function_hash": "338648352086149527100499374510372632256"
            },
            "id": "ASB-A-252762941-fd7572ba",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onServiceDisconnected",
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"
    ],
    "types": [
        "ID"
    ],
    "spl": "2023-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"
platform/packages/services/Telecomm

Package

Name
platform/packages/services/Telecomm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2023-04-01

Affected versions

Other
13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "93138640784470167329690777748229323496",
                    "63659522462177018524502730833184707231",
                    "221352119823462935609529477489016598561",
                    "25006135446868165074748325266048463470",
                    "317718284322286336306459607661067067600",
                    "46883327502752481797982597445200861609",
                    "22267128855893681361825919778626530847",
                    "150664494464330869492374344664841387753",
                    "233455445762780446044602025550781883204"
                ]
            },
            "id": "ASB-A-252762941-27c490f5",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 135.0,
                "function_hash": "120562527713875321562491172127154338355"
            },
            "id": "ASB-A-252762941-652c0cf5",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onServiceDisconnected",
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "50597268355645420433777563493224433987",
                    "248425411295318334669297501175840080626",
                    "204579555969700246112803004237674141628",
                    "108473673675401684701075550158319777465"
                ]
            },
            "id": "ASB-A-252762941-786c864f",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        },
        {
            "digest": {
                "length": 127.0,
                "function_hash": "336258356887302573331064480651611557665"
            },
            "id": "ASB-A-252762941-9d2570d9",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onBindingDied",
                "file": "src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"
            }
        },
        {
            "digest": {
                "length": 1763.0,
                "function_hash": "308477138216609990425240453918711753581"
            },
            "id": "ASB-A-252762941-a48d0a8e",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "bindAndGetCallIdentification",
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        },
        {
            "digest": {
                "length": 309.0,
                "function_hash": "338648352086149527100499374510372632256"
            },
            "id": "ASB-A-252762941-a877a0b2",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0",
            "target": {
                "function": "onServiceDisconnected",
                "file": "src/com/android/server/telecom/CallScreeningServiceHelper.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"
    ],
    "types": [
        "ID"
    ],
    "spl": "2023-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"