ASB-A-265431505

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-265431505.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-265431505
Aliases
Published
2023-08-01T00:00:00Z
Modified
2026-04-03T15:37:31.002635Z
Summary
[none]
Details

In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13-next:0
Fixed
13-next:2023-08-01

Affected versions

Other
13-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2"
    ],
    "spl": "2023-08-01",
    "severity": "High",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "39689452442272565971453877497751893524",
                    "25307676321278645062288265663908796245",
                    "7126838083485310030333911645021887272",
                    "329967580688749719186970430467551999062",
                    "275712561779024352939463625905345362089",
                    "260001323114698046348111294318812881405",
                    "92885252033579864700461838307405739932",
                    "16997948821922028804669429965704681353",
                    "148108479212846542151523964273568860188",
                    "44515452398227537616293316968546412561",
                    "62955029567051782759864073557872053134",
                    "153487917297176115130128064257690950561",
                    "332222086054823375604207172406661778732",
                    "260831415211971711176607302846435592979",
                    "122089986153144273567193581275727672468"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2",
            "id": "ASB-A-265431505-6f8e044c",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "function_hash": "148841041184183105348486301472293289503",
                "length": 718.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2",
            "id": "ASB-A-265431505-8367963c",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "playSound"
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "function_hash": "183527245861175790704734003490401276672",
                "length": 600.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2",
            "id": "ASB-A-265431505-a950c309",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "getLockTimeout"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2023-08-01

Affected versions

Other
11

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17"
    ],
    "spl": "2023-08-01",
    "severity": "High",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "function_hash": "183527245861175790704734003490401276672",
                "length": 600.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17",
            "id": "ASB-A-265431505-509735ea",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "getLockTimeout"
            }
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "39689452442272565971453877497751893524",
                    "25307676321278645062288265663908796245",
                    "7126838083485310030333911645021887272",
                    "329967580688749719186970430467551999062",
                    "275712561779024352939463625905345362089",
                    "260001323114698046348111294318812881405",
                    "92885252033579864700461838307405739932",
                    "16997948821922028804669429965704681353",
                    "148108479212846542151523964273568860188",
                    "44515452398227537616293316968546412561",
                    "62955029567051782759864073557872053134",
                    "153487917297176115130128064257690950561",
                    "332222086054823375604207172406661778732",
                    "260831415211971711176607302846435592979",
                    "122089986153144273567193581275727672468"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17",
            "id": "ASB-A-265431505-840dc114",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "function_hash": "148841041184183105348486301472293289503",
                "length": 718.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17",
            "id": "ASB-A-265431505-b6ae24d2",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "playSound"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2023-08-01

Affected versions

Other
12

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/f37a92b8c8c98ca40f858782fe3720362565c16c"
    ],
    "spl": "2023-08-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2023-08-01

Affected versions

Other
12L

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e"
    ],
    "spl": "2023-08-01",
    "severity": "High",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "function_hash": "183527245861175790704734003490401276672",
                "length": 600.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e",
            "id": "ASB-A-265431505-05515eef",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "getLockTimeout"
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "function_hash": "148841041184183105348486301472293289503",
                "length": 718.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e",
            "id": "ASB-A-265431505-0e3acf33",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "playSound"
            }
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "39689452442272565971453877497751893524",
                    "25307676321278645062288265663908796245",
                    "7126838083485310030333911645021887272",
                    "329967580688749719186970430467551999062",
                    "275712561779024352939463625905345362089",
                    "260001323114698046348111294318812881405",
                    "92885252033579864700461838307405739932",
                    "16997948821922028804669429965704681353",
                    "148108479212846542151523964273568860188",
                    "44515452398227537616293316968546412561",
                    "62955029567051782759864073557872053134",
                    "153487917297176115130128064257690950561",
                    "332222086054823375604207172406661778732",
                    "260831415211971711176607302846435592979",
                    "122089986153144273567193581275727672468"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e",
            "id": "ASB-A-265431505-8a897228",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2023-08-01

Affected versions

Other
13

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e"
    ],
    "spl": "2023-08-01",
    "severity": "High",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "function_hash": "183527245861175790704734003490401276672",
                "length": 600.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e",
            "id": "ASB-A-265431505-5d78ec34",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "getLockTimeout"
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "function_hash": "148841041184183105348486301472293289503",
                "length": 718.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e",
            "id": "ASB-A-265431505-764dea84",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "playSound"
            }
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "39689452442272565971453877497751893524",
                    "25307676321278645062288265663908796245",
                    "7126838083485310030333911645021887272",
                    "329967580688749719186970430467551999062",
                    "275712561779024352939463625905345362089",
                    "260001323114698046348111294318812881405",
                    "92885252033579864700461838307405739932",
                    "16997948821922028804669429965704681353",
                    "148108479212846542151523964273568860188",
                    "44515452398227537616293316968546412561",
                    "62955029567051782759864073557872053134",
                    "153487917297176115130128064257690950561",
                    "332222086054823375604207172406661778732",
                    "260831415211971711176607302846435592979",
                    "122089986153144273567193581275727672468"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e",
            "id": "ASB-A-265431505-9fbf19b8",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"