ASB-A-282932362

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-282932362.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-282932362
Aliases
Published
2023-09-01T00:00:00Z
Modified
2026-04-21T15:25:42.831358Z
Summary
[none]
Details

In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13-next:0
Fixed
13-next:2023-09-01

Affected versions

Other
13-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "294634124367052248394386169020166284332",
                    "88978324236892491589589473784292263755",
                    "338648485654313087033711728065430332615",
                    "23490566985865722460150269654695484889",
                    "311102167549770408879217341121839656861",
                    "169463383663347648238209179806123155112",
                    "50095465476844736254488280357616909642",
                    "311979823625657768011505661099237700423",
                    "31475890204875172956866694110480993125",
                    "161995774345632681254635797589659718457",
                    "164806847262468580437277558392722777872",
                    "267856684840699630275303187950722349617",
                    "86302340247680539963635686592900572666",
                    "148902671344144800006931471106531470431",
                    "233836032053406092975279555218148150058",
                    "248617778258688144593508837074603140508",
                    "232931942805321005549525985093687694157",
                    "319954440759973053585703265865772051211",
                    "79225239066849275162562687857509757244",
                    "283818049274769867037035755030254039312",
                    "256926395637488356157908408455088463188",
                    "50144567922314070038319525632061107406",
                    "305654933404569180227289694336132042047",
                    "44065827442217306034033007115848906613",
                    "206512885198128945474527575338259788624",
                    "200912777762029283255840870451978826290",
                    "60811113481700690404943496240128455469",
                    "10446807632321441200596594366663099475",
                    "109217972755243278935936864671528543551",
                    "260414775887767581580501615675157495936",
                    "52632036557187475069681974316393234387",
                    "60789226259898073242313770178947129931",
                    "291946532229831602515538084239604602921",
                    "105391211794244050679731883062424017587",
                    "76595963237905621111179196260539904080"
                ]
            },
            "id": "ASB-A-282932362-341cccd0",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "133677757676520135314588694683370645133",
                    "299221302668883357005184746557149656155",
                    "280187265363326819776817186053931184879",
                    "225667133675634608932135500009042086062"
                ]
            },
            "id": "ASB-A-282932362-366506c2",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "file": "src/com/android/settings/notification/NotificationBackend.java"
            }
        },
        {
            "digest": {
                "length": 653.0,
                "function_hash": "288807591368520171509556197179534220001"
            },
            "id": "ASB-A-282932362-3a960fba",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "getDeviceList",
                "file": "src/com/android/settings/notification/NotificationBackend.java"
            }
        },
        {
            "digest": {
                "length": 2329.0,
                "function_hash": "96784778302604530250323795759933278269"
            },
            "id": "ASB-A-282932362-61e93623",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "updateList",
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        },
        {
            "digest": {
                "length": 885.0,
                "function_hash": "319666683386069641356650172409346123272"
            },
            "id": "ASB-A-282932362-70e618e6",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "onCreate",
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2023-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-282932362.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2023-09-01

Affected versions

Other
11

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "233836032053406092975279555218148150058",
                    "248617778258688144593508837074603140508",
                    "232931942805321005549525985093687694157",
                    "319954440759973053585703265865772051211",
                    "79225239066849275162562687857509757244",
                    "283818049274769867037035755030254039312",
                    "256926395637488356157908408455088463188",
                    "50144567922314070038319525632061107406",
                    "122105133364015045938597796779026425921",
                    "179532852425826326692299436443241249389",
                    "109217972755243278935936864671528543551",
                    "260414775887767581580501615675157495936",
                    "52632036557187475069681974316393234387",
                    "129410244608970101961765586454956640494",
                    "71646175992933871088672163936187901605",
                    "329191465414273302375331598533272454494",
                    "85424555280039072357891418297497513005"
                ]
            },
            "id": "ASB-A-282932362-25d36b27",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/173cc267e0fb854cc7247e9f1e3acff0a325c4af",
            "target": {
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        },
        {
            "digest": {
                "length": 1986.0,
                "function_hash": "106937410198888050500698919619882963327"
            },
            "id": "ASB-A-282932362-5cf12009",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/173cc267e0fb854cc7247e9f1e3acff0a325c4af",
            "target": {
                "function": "updateList",
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        },
        {
            "digest": {
                "length": 937.0,
                "function_hash": "237566696159920372272111111547487334546"
            },
            "id": "ASB-A-282932362-ba5c0a06",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/173cc267e0fb854cc7247e9f1e3acff0a325c4af",
            "target": {
                "function": "onCreate",
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/173cc267e0fb854cc7247e9f1e3acff0a325c4af"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2023-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-282932362.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2023-09-01

Affected versions

Other
12

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 885.0,
                "function_hash": "319666683386069641356650172409346123272"
            },
            "id": "ASB-A-282932362-12b6ef45",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "onCreate",
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "294634124367052248394386169020166284332",
                    "88978324236892491589589473784292263755",
                    "338648485654313087033711728065430332615",
                    "23490566985865722460150269654695484889",
                    "311102167549770408879217341121839656861",
                    "169463383663347648238209179806123155112",
                    "50095465476844736254488280357616909642",
                    "311979823625657768011505661099237700423",
                    "31475890204875172956866694110480993125",
                    "161995774345632681254635797589659718457",
                    "164806847262468580437277558392722777872",
                    "267856684840699630275303187950722349617",
                    "86302340247680539963635686592900572666",
                    "148902671344144800006931471106531470431",
                    "233836032053406092975279555218148150058",
                    "248617778258688144593508837074603140508",
                    "232931942805321005549525985093687694157",
                    "319954440759973053585703265865772051211",
                    "79225239066849275162562687857509757244",
                    "283818049274769867037035755030254039312",
                    "256926395637488356157908408455088463188",
                    "50144567922314070038319525632061107406",
                    "305654933404569180227289694336132042047",
                    "44065827442217306034033007115848906613",
                    "206512885198128945474527575338259788624",
                    "200912777762029283255840870451978826290",
                    "60811113481700690404943496240128455469",
                    "10446807632321441200596594366663099475",
                    "109217972755243278935936864671528543551",
                    "260414775887767581580501615675157495936",
                    "52632036557187475069681974316393234387",
                    "60789226259898073242313770178947129931",
                    "291946532229831602515538084239604602921",
                    "105391211794244050679731883062424017587",
                    "76595963237905621111179196260539904080"
                ]
            },
            "id": "ASB-A-282932362-6ce37603",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        },
        {
            "digest": {
                "length": 653.0,
                "function_hash": "288807591368520171509556197179534220001"
            },
            "id": "ASB-A-282932362-90e54c51",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "getDeviceList",
                "file": "src/com/android/settings/notification/NotificationBackend.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "133677757676520135314588694683370645133",
                    "299221302668883357005184746557149656155",
                    "280187265363326819776817186053931184879",
                    "225667133675634608932135500009042086062"
                ]
            },
            "id": "ASB-A-282932362-ef299240",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "file": "src/com/android/settings/notification/NotificationBackend.java"
            }
        },
        {
            "digest": {
                "length": 2329.0,
                "function_hash": "96784778302604530250323795759933278269"
            },
            "id": "ASB-A-282932362-f5fb5512",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "updateList",
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2023-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-282932362.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2023-09-01

Affected versions

Other
12L

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 653.0,
                "function_hash": "288807591368520171509556197179534220001"
            },
            "id": "ASB-A-282932362-21ee2402",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "getDeviceList",
                "file": "src/com/android/settings/notification/NotificationBackend.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "133677757676520135314588694683370645133",
                    "299221302668883357005184746557149656155",
                    "280187265363326819776817186053931184879",
                    "225667133675634608932135500009042086062"
                ]
            },
            "id": "ASB-A-282932362-5efc24d6",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "file": "src/com/android/settings/notification/NotificationBackend.java"
            }
        },
        {
            "digest": {
                "length": 885.0,
                "function_hash": "319666683386069641356650172409346123272"
            },
            "id": "ASB-A-282932362-8e93c0fd",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "onCreate",
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "294634124367052248394386169020166284332",
                    "88978324236892491589589473784292263755",
                    "338648485654313087033711728065430332615",
                    "23490566985865722460150269654695484889",
                    "311102167549770408879217341121839656861",
                    "169463383663347648238209179806123155112",
                    "50095465476844736254488280357616909642",
                    "311979823625657768011505661099237700423",
                    "31475890204875172956866694110480993125",
                    "161995774345632681254635797589659718457",
                    "164806847262468580437277558392722777872",
                    "267856684840699630275303187950722349617",
                    "86302340247680539963635686592900572666",
                    "148902671344144800006931471106531470431",
                    "233836032053406092975279555218148150058",
                    "248617778258688144593508837074603140508",
                    "232931942805321005549525985093687694157",
                    "319954440759973053585703265865772051211",
                    "79225239066849275162562687857509757244",
                    "283818049274769867037035755030254039312",
                    "256926395637488356157908408455088463188",
                    "50144567922314070038319525632061107406",
                    "305654933404569180227289694336132042047",
                    "44065827442217306034033007115848906613",
                    "206512885198128945474527575338259788624",
                    "200912777762029283255840870451978826290",
                    "60811113481700690404943496240128455469",
                    "10446807632321441200596594366663099475",
                    "109217972755243278935936864671528543551",
                    "260414775887767581580501615675157495936",
                    "52632036557187475069681974316393234387",
                    "60789226259898073242313770178947129931",
                    "291946532229831602515538084239604602921",
                    "105391211794244050679731883062424017587",
                    "76595963237905621111179196260539904080"
                ]
            },
            "id": "ASB-A-282932362-acf1efc3",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        },
        {
            "digest": {
                "length": 2329.0,
                "function_hash": "96784778302604530250323795759933278269"
            },
            "id": "ASB-A-282932362-d7a0d626",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "updateList",
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2023-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-282932362.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2023-09-01

Affected versions

Other
13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 885.0,
                "function_hash": "319666683386069641356650172409346123272"
            },
            "id": "ASB-A-282932362-10d6f867",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "onCreate",
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        },
        {
            "digest": {
                "length": 653.0,
                "function_hash": "288807591368520171509556197179534220001"
            },
            "id": "ASB-A-282932362-4925cc87",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "getDeviceList",
                "file": "src/com/android/settings/notification/NotificationBackend.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "294634124367052248394386169020166284332",
                    "88978324236892491589589473784292263755",
                    "338648485654313087033711728065430332615",
                    "23490566985865722460150269654695484889",
                    "311102167549770408879217341121839656861",
                    "169463383663347648238209179806123155112",
                    "50095465476844736254488280357616909642",
                    "311979823625657768011505661099237700423",
                    "31475890204875172956866694110480993125",
                    "161995774345632681254635797589659718457",
                    "164806847262468580437277558392722777872",
                    "267856684840699630275303187950722349617",
                    "86302340247680539963635686592900572666",
                    "148902671344144800006931471106531470431",
                    "233836032053406092975279555218148150058",
                    "248617778258688144593508837074603140508",
                    "232931942805321005549525985093687694157",
                    "319954440759973053585703265865772051211",
                    "79225239066849275162562687857509757244",
                    "283818049274769867037035755030254039312",
                    "256926395637488356157908408455088463188",
                    "50144567922314070038319525632061107406",
                    "305654933404569180227289694336132042047",
                    "44065827442217306034033007115848906613",
                    "206512885198128945474527575338259788624",
                    "200912777762029283255840870451978826290",
                    "60811113481700690404943496240128455469",
                    "10446807632321441200596594366663099475",
                    "109217972755243278935936864671528543551",
                    "260414775887767581580501615675157495936",
                    "52632036557187475069681974316393234387",
                    "60789226259898073242313770178947129931",
                    "291946532229831602515538084239604602921",
                    "105391211794244050679731883062424017587",
                    "76595963237905621111179196260539904080"
                ]
            },
            "id": "ASB-A-282932362-92e992bc",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "133677757676520135314588694683370645133",
                    "299221302668883357005184746557149656155",
                    "280187265363326819776817186053931184879",
                    "225667133675634608932135500009042086062"
                ]
            },
            "id": "ASB-A-282932362-beea9cc0",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "file": "src/com/android/settings/notification/NotificationBackend.java"
            }
        },
        {
            "digest": {
                "length": 2329.0,
                "function_hash": "96784778302604530250323795759933278269"
            },
            "id": "ASB-A-282932362-f8fcc6fd",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584",
            "target": {
                "function": "updateList",
                "file": "src/com/android/settings/notification/NotificationAccessSettings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2023-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-282932362.json"