ASB-A-283962634

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-283962634.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-283962634

Aliases

CVE-2024-0032

Published

2024-02-01T00:00:00Z

Modified

2024-07-26T15:04:18Z

Summary

Bypass access restriction on Android/data/directory and all subdirectories

Details

In queryChildDocuments of FileSystemProvider.java, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

14-next:0

Fixed

14-next:2024-02-01

Affected versions

Other

14-next

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/7f5667bfafbd9b1b4d59c2cb15f9a3e07a559318"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/packages/providers/DownloadProvider

Package

Name: platform/packages/providers/DownloadProvider

Affected ranges

Type: ECOSYSTEM
Events: Introduced

14-next:0

Fixed

14-next:2024-02-01

Affected versions

Other

14-next

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/eae60a878ffa8eafe854539d3381ceba9ff6cca4"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

11:0

Fixed

11:2024-02-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/364ba60e061893f82e29761c48d8f09397715c19"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/packages/providers/DownloadProvider

Package

Name: platform/packages/providers/DownloadProvider

Affected ranges

Type: ECOSYSTEM
Events: Introduced

11:0

Fixed

11:2024-02-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/e11e4ca6eef7e77042f2b27fce4fdb8a0b3d0371"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

12:0

Fixed

12:2024-02-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/9a9602a68d6d7acb8e9bd6fa37ca93f11d6dd213"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/packages/providers/DownloadProvider

Package

Name: platform/packages/providers/DownloadProvider

Affected ranges

Type: ECOSYSTEM
Events: Introduced

12:0

Fixed

12:2024-02-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/94678ecc096f91e5e5e96e58a31260e06711720a"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

12L:0

Fixed

12L:2024-02-01

Affected versions

Other

12L

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/9a9602a68d6d7acb8e9bd6fa37ca93f11d6dd213"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/packages/providers/DownloadProvider

Package

Name: platform/packages/providers/DownloadProvider

Affected ranges

Type: ECOSYSTEM
Events: Introduced

12L:0

Fixed

12L:2024-02-01

Affected versions

Other

12L

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/94678ecc096f91e5e5e96e58a31260e06711720a"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

13:0

Fixed

13:2024-02-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/131e73e1b3839111463aae26bae1b3db6782eb38"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/packages/providers/DownloadProvider

Package

Name: platform/packages/providers/DownloadProvider

Affected ranges

Type: ECOSYSTEM
Events: Introduced

13:0

Fixed

13:2024-02-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/5af532ef7505de70cb63ec19dcc06bd2c09c9009"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

14:0

Fixed

14:2024-02-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/cf28630a3e286629ed7b13badd4fb0412564c0fd"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/packages/providers/DownloadProvider

Package

Name: platform/packages/providers/DownloadProvider

Affected ranges

Type: ECOSYSTEM
Events: Introduced

14:0

Fixed

14:2024-02-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a75edeba64b72058e143801ada107cb2a610632"
    ],
    "spl": "2024-02-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}