In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"242320771535315980050484120809794308072",
"296913085662620605379968931505105984810",
"279417290654962479070601799201660726300",
"329211697523938101836923730570379081074",
"153540163021642628404714144453611544588",
"225035955800410188057009915316535497486",
"267871132959976300411582840514189484251",
"281822121154544065232206213228884293188",
"145937556301203796535992222558199648757",
"271941672339814849029273791595833871242",
"95737713181957463334669733157835592965",
"295926535008434168556078651314623829979",
"243619535528587100896225694080110555687",
"297057082058474901114027675289630414523"
]
},
"id": "ASB-A-277333746-03ea34e1",
"deprecated": false,
"target": {
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f57e52a64d3235a6bdb53396caca5f74e222cfd6",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"62153730229618496648674051534881827827",
"22396422418565989086294469171201428620",
"329624527293697247546009605454388603935",
"329211697523938101836923730570379081074",
"125326388924702969691784191447178744415",
"241280742680879406672071828827386339453",
"236437913113299649598153855418952059208",
"247661939955556571476940520514469447717",
"204787558229661505753907875768473091536",
"203764550499556593344896432101114909805",
"333892403586930045111487698983088219192",
"95737713181957463334669733157835592965",
"295926535008434168556078651314623829979",
"243619535528587100896225694080110555687",
"297057082058474901114027675289630414523"
]
},
"id": "ASB-A-277333746-61958928",
"deprecated": false,
"target": {
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f57e52a64d3235a6bdb53396caca5f74e222cfd6",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 147.0,
"function_hash": "310332147339108939095141666931239626666"
},
"id": "ASB-A-277333746-71393d3c",
"deprecated": false,
"target": {
"function": "getAvailabilityStatus",
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f57e52a64d3235a6bdb53396caca5f74e222cfd6",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 125.0,
"function_hash": "282627696745779176040904433281652542013"
},
"id": "ASB-A-277333746-7b583de8",
"deprecated": false,
"target": {
"function": "WifiScanningMainSwitchPreferenceController",
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f57e52a64d3235a6bdb53396caca5f74e222cfd6",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 147.0,
"function_hash": "310332147339108939095141666931239626666"
},
"id": "ASB-A-277333746-da0d0a1c",
"deprecated": false,
"target": {
"function": "getAvailabilityStatus",
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f57e52a64d3235a6bdb53396caca5f74e222cfd6",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 78.0,
"function_hash": "208140333756278670377616915341058906098"
},
"id": "ASB-A-277333746-f3bbc5a9",
"deprecated": false,
"target": {
"function": "BluetoothScanningMainSwitchPreferenceController",
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f57e52a64d3235a6bdb53396caca5f74e222cfd6",
"exact_target_file_match_only": true,
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/f57e52a64d3235a6bdb53396caca5f74e222cfd6"
],
"types": [
"EoP"
],
"spl": "2023-07-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 78.0,
"function_hash": "208140333756278670377616915341058906098"
},
"id": "ASB-A-277333746-07d6c402",
"deprecated": false,
"target": {
"function": "BluetoothScanningMainSwitchPreferenceController",
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 125.0,
"function_hash": "282627696745779176040904433281652542013"
},
"id": "ASB-A-277333746-453d5611",
"deprecated": false,
"target": {
"function": "WifiScanningMainSwitchPreferenceController",
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"242320771535315980050484120809794308072",
"296913085662620605379968931505105984810",
"279417290654962479070601799201660726300",
"329211697523938101836923730570379081074",
"153540163021642628404714144453611544588",
"225035955800410188057009915316535497486",
"267871132959976300411582840514189484251",
"281822121154544065232206213228884293188",
"145937556301203796535992222558199648757",
"271941672339814849029273791595833871242",
"95737713181957463334669733157835592965",
"295926535008434168556078651314623829979",
"243619535528587100896225694080110555687",
"297057082058474901114027675289630414523"
]
},
"id": "ASB-A-277333746-a6ce16c5",
"deprecated": false,
"target": {
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 147.0,
"function_hash": "310332147339108939095141666931239626666"
},
"id": "ASB-A-277333746-ab560dd1",
"deprecated": false,
"target": {
"function": "getAvailabilityStatus",
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 147.0,
"function_hash": "310332147339108939095141666931239626666"
},
"id": "ASB-A-277333746-bf2ee817",
"deprecated": false,
"target": {
"function": "getAvailabilityStatus",
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"62153730229618496648674051534881827827",
"22396422418565989086294469171201428620",
"329624527293697247546009605454388603935",
"329211697523938101836923730570379081074",
"125326388924702969691784191447178744415",
"241280742680879406672071828827386339453",
"236437913113299649598153855418952059208",
"247661939955556571476940520514469447717",
"204787558229661505753907875768473091536",
"203764550499556593344896432101114909805",
"333892403586930045111487698983088219192",
"95737713181957463334669733157835592965",
"295926535008434168556078651314623829979",
"243619535528587100896225694080110555687",
"297057082058474901114027675289630414523"
]
},
"id": "ASB-A-277333746-e77c5042",
"deprecated": false,
"target": {
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9"
],
"types": [
"EoP"
],
"spl": "2023-07-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 147.0,
"function_hash": "310332147339108939095141666931239626666"
},
"id": "ASB-A-277333746-30e50da6",
"deprecated": false,
"target": {
"function": "getAvailabilityStatus",
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 78.0,
"function_hash": "208140333756278670377616915341058906098"
},
"id": "ASB-A-277333746-4d0438a3",
"deprecated": false,
"target": {
"function": "BluetoothScanningMainSwitchPreferenceController",
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"62153730229618496648674051534881827827",
"22396422418565989086294469171201428620",
"329624527293697247546009605454388603935",
"329211697523938101836923730570379081074",
"125326388924702969691784191447178744415",
"241280742680879406672071828827386339453",
"236437913113299649598153855418952059208",
"247661939955556571476940520514469447717",
"204787558229661505753907875768473091536",
"203764550499556593344896432101114909805",
"333892403586930045111487698983088219192",
"95737713181957463334669733157835592965",
"295926535008434168556078651314623829979",
"243619535528587100896225694080110555687",
"297057082058474901114027675289630414523"
]
},
"id": "ASB-A-277333746-7b999e31",
"deprecated": false,
"target": {
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"242320771535315980050484120809794308072",
"296913085662620605379968931505105984810",
"279417290654962479070601799201660726300",
"329211697523938101836923730570379081074",
"153540163021642628404714144453611544588",
"225035955800410188057009915316535497486",
"267871132959976300411582840514189484251",
"281822121154544065232206213228884293188",
"145937556301203796535992222558199648757",
"271941672339814849029273791595833871242",
"95737713181957463334669733157835592965",
"295926535008434168556078651314623829979",
"243619535528587100896225694080110555687",
"297057082058474901114027675289630414523"
]
},
"id": "ASB-A-277333746-b67f382c",
"deprecated": false,
"target": {
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 125.0,
"function_hash": "282627696745779176040904433281652542013"
},
"id": "ASB-A-277333746-d580fa80",
"deprecated": false,
"target": {
"function": "WifiScanningMainSwitchPreferenceController",
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 147.0,
"function_hash": "310332147339108939095141666931239626666"
},
"id": "ASB-A-277333746-f1f8ec2e",
"deprecated": false,
"target": {
"function": "getAvailabilityStatus",
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9"
],
"types": [
"EoP"
],
"spl": "2023-07-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 147.0,
"function_hash": "310332147339108939095141666931239626666"
},
"id": "ASB-A-277333746-1237e63c",
"deprecated": false,
"target": {
"function": "getAvailabilityStatus",
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 125.0,
"function_hash": "282627696745779176040904433281652542013"
},
"id": "ASB-A-277333746-1821efe9",
"deprecated": false,
"target": {
"function": "WifiScanningMainSwitchPreferenceController",
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 78.0,
"function_hash": "208140333756278670377616915341058906098"
},
"id": "ASB-A-277333746-271ee77b",
"deprecated": false,
"target": {
"function": "BluetoothScanningMainSwitchPreferenceController",
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"242320771535315980050484120809794308072",
"296913085662620605379968931505105984810",
"279417290654962479070601799201660726300",
"329211697523938101836923730570379081074",
"153540163021642628404714144453611544588",
"225035955800410188057009915316535497486",
"267871132959976300411582840514189484251",
"281822121154544065232206213228884293188",
"145937556301203796535992222558199648757",
"271941672339814849029273791595833871242",
"95737713181957463334669733157835592965",
"295926535008434168556078651314623829979",
"243619535528587100896225694080110555687",
"297057082058474901114027675289630414523"
]
},
"id": "ASB-A-277333746-d1644ea3",
"deprecated": false,
"target": {
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"62153730229618496648674051534881827827",
"22396422418565989086294469171201428620",
"329624527293697247546009605454388603935",
"329211697523938101836923730570379081074",
"125326388924702969691784191447178744415",
"241280742680879406672071828827386339453",
"236437913113299649598153855418952059208",
"247661939955556571476940520514469447717",
"204787558229661505753907875768473091536",
"203764550499556593344896432101114909805",
"333892403586930045111487698983088219192",
"95737713181957463334669733157835592965",
"295926535008434168556078651314623829979",
"243619535528587100896225694080110555687",
"297057082058474901114027675289630414523"
]
},
"id": "ASB-A-277333746-eaf26239",
"deprecated": false,
"target": {
"file": "src/com/android/settings/location/WifiScanningMainSwitchPreferenceController.java"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
},
{
"digest": {
"length": 147.0,
"function_hash": "310332147339108939095141666931239626666"
},
"id": "ASB-A-277333746-edb89d85",
"deprecated": false,
"target": {
"function": "getAvailabilityStatus",
"file": "src/com/android/settings/location/BluetoothScanningMainSwitchPreferenceController.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9",
"exact_target_file_match_only": true,
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/7591fff234886e79c5d0210a2cf3282a69de9be9"
],
"types": [
"EoP"
],
"spl": "2023-07-01",
"severity": "High"
}