In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2024-03-01",
"severity": "High",
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/df127e12b95a6c499b6fe1c4876eb54b90cd6327"
],
"vanir_signatures": [
{
"target": {
"function": "getCustomPrinterIcon",
"file": "services/print/java/com/android/server/print/PrintManagerService.java"
},
"digest": {
"length": 378.0,
"function_hash": "180367411456036369595812059490796090797"
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/df127e12b95a6c499b6fe1c4876eb54b90cd6327",
"deprecated": false,
"id": "ASB-A-281525042-0fff82cc",
"signature_type": "Function"
},
{
"target": {
"file": "services/print/java/com/android/server/print/PrintManagerService.java"
},
"digest": {
"line_hashes": [
"248395626035543703685135719755996992896",
"329392954003326859936652630030139930525",
"47938656684501295851478631079284904456",
"130135321277567940235206918348948720668",
"281285480602034854964864225789306182943",
"229640954779443452533459427897680671944",
"152067180050782279200912405906596721716",
"32930093571262382128838773306069558107"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/df127e12b95a6c499b6fe1c4876eb54b90cd6327",
"deprecated": false,
"id": "ASB-A-281525042-3f5de5a7",
"signature_type": "Line"
}
]
}{
"spl": "2024-03-01",
"severity": "High",
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/0e0693ca9cb408d0dc82f6c6b3feb453fc8ddd83"
],
"vanir_signatures": [
{
"target": {
"function": "getCustomPrinterIcon",
"file": "services/print/java/com/android/server/print/PrintManagerService.java"
},
"digest": {
"length": 378.0,
"function_hash": "180367411456036369595812059490796090797"
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0e0693ca9cb408d0dc82f6c6b3feb453fc8ddd83",
"deprecated": false,
"id": "ASB-A-281525042-1c7db41b",
"signature_type": "Function"
},
{
"target": {
"file": "services/print/java/com/android/server/print/PrintManagerService.java"
},
"digest": {
"line_hashes": [
"248395626035543703685135719755996992896",
"329392954003326859936652630030139930525",
"47938656684501295851478631079284904456",
"130135321277567940235206918348948720668",
"281285480602034854964864225789306182943",
"229640954779443452533459427897680671944",
"152067180050782279200912405906596721716",
"32930093571262382128838773306069558107"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0e0693ca9cb408d0dc82f6c6b3feb453fc8ddd83",
"deprecated": false,
"id": "ASB-A-281525042-c02a9fd6",
"signature_type": "Line"
}
]
}{
"spl": "2024-03-01",
"severity": "High",
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/7cfc47271c77b2fa5e9fa05fcf5c315dfb778dec"
],
"vanir_signatures": [
{
"target": {
"function": "getCustomPrinterIcon",
"file": "services/print/java/com/android/server/print/PrintManagerService.java"
},
"digest": {
"length": 378.0,
"function_hash": "180367411456036369595812059490796090797"
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7cfc47271c77b2fa5e9fa05fcf5c315dfb778dec",
"deprecated": false,
"id": "ASB-A-281525042-66e98441",
"signature_type": "Function"
},
{
"target": {
"file": "services/print/java/com/android/server/print/PrintManagerService.java"
},
"digest": {
"line_hashes": [
"248395626035543703685135719755996992896",
"329392954003326859936652630030139930525",
"47938656684501295851478631079284904456",
"130135321277567940235206918348948720668",
"281285480602034854964864225789306182943",
"229640954779443452533459427897680671944",
"152067180050782279200912405906596721716",
"32930093571262382128838773306069558107"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7cfc47271c77b2fa5e9fa05fcf5c315dfb778dec",
"deprecated": false,
"id": "ASB-A-281525042-d6a40029",
"signature_type": "Line"
}
]
}{
"spl": "2024-03-01",
"severity": "High",
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/39f5737626ca644f41fda890c12518ce51875835"
],
"vanir_signatures": [
{
"target": {
"function": "getCustomPrinterIcon",
"file": "services/print/java/com/android/server/print/PrintManagerService.java"
},
"digest": {
"length": 378.0,
"function_hash": "180367411456036369595812059490796090797"
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/39f5737626ca644f41fda890c12518ce51875835",
"deprecated": false,
"id": "ASB-A-281525042-717f191e",
"signature_type": "Function"
},
{
"target": {
"file": "services/print/java/com/android/server/print/PrintManagerService.java"
},
"digest": {
"line_hashes": [
"248395626035543703685135719755996992896",
"329392954003326859936652630030139930525",
"47938656684501295851478631079284904456",
"130135321277567940235206918348948720668",
"281285480602034854964864225789306182943",
"229640954779443452533459427897680671944",
"152067180050782279200912405906596721716",
"32930093571262382128838773306069558107"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/39f5737626ca644f41fda890c12518ce51875835",
"deprecated": false,
"id": "ASB-A-281525042-9f4bb365",
"signature_type": "Line"
}
]
}{
"spl": "2024-03-01",
"severity": "High",
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/c58f2b7b262eee49130f47d72247615f07af4a81"
],
"vanir_signatures": [
{
"target": {
"function": "getCustomPrinterIcon",
"file": "services/print/java/com/android/server/print/PrintManagerService.java"
},
"digest": {
"length": 378.0,
"function_hash": "180367411456036369595812059490796090797"
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c58f2b7b262eee49130f47d72247615f07af4a81",
"deprecated": false,
"id": "ASB-A-281525042-2f30f638",
"signature_type": "Function"
},
{
"target": {
"file": "services/print/java/com/android/server/print/PrintManagerService.java"
},
"digest": {
"line_hashes": [
"248395626035543703685135719755996992896",
"329392954003326859936652630030139930525",
"47938656684501295851478631079284904456",
"130135321277567940235206918348948720668",
"281285480602034854964864225789306182943",
"229640954779443452533459427897680671944",
"152067180050782279200912405906596721716",
"32930093571262382128838773306069558107"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c58f2b7b262eee49130f47d72247615f07af4a81",
"deprecated": false,
"id": "ASB-A-281525042-33f2e020",
"signature_type": "Line"
}
]
}