In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"function_hash": "275790296995513726427829673377107683482",
"length": 1576.0
},
"id": "ASB-A-288896269-4d8a678d",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/adf620316dcfaf19d7d4a73e2c63322b4a3a4d3a",
"deprecated": false,
"target": {
"function": "bindNotification",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationConversationInfo.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"265953387334128417533783229142107824643",
"128925952502831700169030010272114177992",
"138896328595853320761776874839011791774",
"160616190006747144472108337585292575911",
"228015238009796341240327091250876932018",
"71600874674562408720298518993654728673",
"59657049733372196380068050961988523682",
"194903749351548277678970832090882712657",
"111501335088025618588057779761888179250",
"305795497846898578712863349790280066572",
"198614634917747897042426569678831764695",
"33809323543126496807564377033955698641",
"3061521919880570451099164147101699862",
"268289310753455125116496969042687087741",
"128489441790955251978555926619893030340",
"332085048172746370719374279780517669107",
"304241201541386732293525466416520158958",
"280933088920217115505016103242846997263",
"161585619226953498893885346298666061327"
]
},
"id": "ASB-A-288896269-5700c026",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/adf620316dcfaf19d7d4a73e2c63322b4a3a4d3a",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationConversationInfo.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "97586018491712111788720419061632568428",
"length": 1007.0
},
"id": "ASB-A-288896269-5908d504",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/adf620316dcfaf19d7d4a73e2c63322b4a3a4d3a",
"deprecated": false,
"target": {
"function": "NotificationGutsManager",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "277091814411092081832620044540052517237",
"length": 1596.0
},
"id": "ASB-A-288896269-7da48cb8",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/adf620316dcfaf19d7d4a73e2c63322b4a3a4d3a",
"deprecated": false,
"target": {
"function": "initializeConversationNotificationInfo",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"250030163650702690218556814786070496467",
"131310132713107569074546476544284301339",
"200454172663836146017633787901049385944",
"256631679654335705417997342968732696046",
"60800081678460235282324025511543154992",
"184029382496790418619655563721822200537",
"144532002353641202108734101213349969251",
"312432234744021497199616349711957352583",
"299835800258771234386313081000909342564",
"11251168981888847700427063204746697821",
"3478132542860705786686384393193862126",
"57957579615136433794160362532557502014",
"216051915126484363564419485253569070130",
"112219203957012154437837566026893687200",
"167870209374219206177625039945305653474",
"235885022108293952125383790887580950514",
"94051001812651911373192909752203608523",
"338111167483887221304864265345565092383",
"93231106277635975303741366827246226731",
"16238322785248966224942093181591361924"
]
},
"id": "ASB-A-288896269-a8664fb2",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/adf620316dcfaf19d7d4a73e2c63322b4a3a4d3a",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
}
],
"types": [
"ID"
],
"spl": "2023-12-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/adf620316dcfaf19d7d4a73e2c63322b4a3a4d3a"
],
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"function_hash": "148880730089168082794866880690815489815",
"length": 881.0
},
"id": "ASB-A-288896269-52104215",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0522df0a33d0165656797df7edab978cb403bd4",
"deprecated": false,
"target": {
"function": "NotificationGutsManager",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"265953387334128417533783229142107824643",
"128925952502831700169030010272114177992",
"138896328595853320761776874839011791774",
"160616190006747144472108337585292575911",
"228015238009796341240327091250876932018",
"71600874674562408720298518993654728673",
"59657049733372196380068050961988523682",
"52195069929396233675454552345243074885",
"251745224700952836749914186730387791260",
"75882111226076295942487405329139410530",
"64136458640941196898083386928760440656",
"112513055506394179176074909462258007691",
"198614634917747897042426569678831764695",
"303560093868668070691232218874229168982",
"203181757443446892219905689705187323361",
"268289310753455125116496969042687087741",
"128489441790955251978555926619893030340",
"332085048172746370719374279780517669107",
"304241201541386732293525466416520158958",
"280933088920217115505016103242846997263",
"161585619226953498893885346298666061327"
]
},
"id": "ASB-A-288896269-62c72999",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0522df0a33d0165656797df7edab978cb403bd4",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationConversationInfo.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"202423729764277837459330863389223826032",
"149637711870791475439214501699369946947",
"45164103961923015352548044016399637543",
"90616013806748030587310345061725384465",
"83036082872288204524710312751447281102",
"263288044336644581958528683740516952300",
"100776016335977268769395061763150185638",
"139279611553483094861445348210041438293",
"278708482124900979312389608318767881776",
"203378636160739123584612189496557695371",
"252392960709280821845012763715727804687",
"281264446443945558807586086307403930158"
]
},
"id": "ASB-A-288896269-937ac271",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0522df0a33d0165656797df7edab978cb403bd4",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/dagger/NotificationsModule.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "316910474760991676319562680710809790311",
"length": 1649.0
},
"id": "ASB-A-288896269-c36af31b",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0522df0a33d0165656797df7edab978cb403bd4",
"deprecated": false,
"target": {
"function": "bindNotification",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationConversationInfo.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"250030163650702690218556814786070496467",
"131310132713107569074546476544284301339",
"200454172663836146017633787901049385944",
"256631679654335705417997342968732696046",
"312791754320742168449884174106375237751",
"277227618549493534062934707979794410558",
"220988877961902772679017382083177329450",
"312432234744021497199616349711957352583",
"83036082872288204524710312751447281102",
"263288044336644581958528683740516952300",
"100776016335977268769395061763150185638",
"139279611553483094861445348210041438293",
"186144590417932858439520096794134518573",
"221536014066874596426273631637584292499",
"166857196917069435929397588459026084634",
"188163968223791024560792090100164186770",
"189259908505359799866966181673239147712",
"211645088009758618415743361212521862817",
"93231106277635975303741366827246226731",
"16238322785248966224942093181591361924"
]
},
"id": "ASB-A-288896269-d29b11c9",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0522df0a33d0165656797df7edab978cb403bd4",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "144932520929737556307665606509048968832",
"length": 1613.0
},
"id": "ASB-A-288896269-e5f1f5b1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0522df0a33d0165656797df7edab978cb403bd4",
"deprecated": false,
"target": {
"function": "initializeConversationNotificationInfo",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
}
],
"types": [
"ID"
],
"spl": "2023-12-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/b0522df0a33d0165656797df7edab978cb403bd4"
],
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"250030163650702690218556814786070496467",
"131310132713107569074546476544284301339",
"200454172663836146017633787901049385944",
"256631679654335705417997342968732696046",
"60800081678460235282324025511543154992",
"184029382496790418619655563721822200537",
"144532002353641202108734101213349969251",
"312432234744021497199616349711957352583",
"83036082872288204524710312751447281102",
"263288044336644581958528683740516952300",
"100776016335977268769395061763150185638",
"139279611553483094861445348210041438293",
"216051915126484363564419485253569070130",
"112219203957012154437837566026893687200",
"167870209374219206177625039945305653474",
"235885022108293952125383790887580950514",
"189259908505359799866966181673239147712",
"211645088009758618415743361212521862817",
"93231106277635975303741366827246226731",
"16238322785248966224942093181591361924"
]
},
"id": "ASB-A-288896269-0a414352",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/95659d74cfa1f6d7a9796b5d595c99df253ec054",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"265953387334128417533783229142107824643",
"128925952502831700169030010272114177992",
"138896328595853320761776874839011791774",
"160616190006747144472108337585292575911",
"228015238009796341240327091250876932018",
"71600874674562408720298518993654728673",
"59657049733372196380068050961988523682",
"75882111226076295942487405329139410530",
"64136458640941196898083386928760440656",
"112513055506394179176074909462258007691",
"198614634917747897042426569678831764695",
"303560093868668070691232218874229168982",
"203181757443446892219905689705187323361",
"268289310753455125116496969042687087741",
"128489441790955251978555926619893030340",
"332085048172746370719374279780517669107",
"304241201541386732293525466416520158958",
"280933088920217115505016103242846997263",
"161585619226953498893885346298666061327"
]
},
"id": "ASB-A-288896269-2e8e3a38",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/95659d74cfa1f6d7a9796b5d595c99df253ec054",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationConversationInfo.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "316910474760991676319562680710809790311",
"length": 1649.0
},
"id": "ASB-A-288896269-31cb41cf",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/95659d74cfa1f6d7a9796b5d595c99df253ec054",
"deprecated": false,
"target": {
"function": "bindNotification",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationConversationInfo.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"202423729764277837459330863389223826032",
"149637711870791475439214501699369946947",
"45164103961923015352548044016399637543",
"90616013806748030587310345061725384465",
"83036082872288204524710312751447281102",
"263288044336644581958528683740516952300",
"100776016335977268769395061763150185638",
"139279611553483094861445348210041438293",
"278708482124900979312389608318767881776",
"203378636160739123584612189496557695371",
"252392960709280821845012763715727804687",
"281264446443945558807586086307403930158"
]
},
"id": "ASB-A-288896269-8ca14599",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/95659d74cfa1f6d7a9796b5d595c99df253ec054",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/dagger/NotificationsModule.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "118208187244745841379262631806642852851",
"length": 895.0
},
"id": "ASB-A-288896269-9bc6d9b6",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/95659d74cfa1f6d7a9796b5d595c99df253ec054",
"deprecated": false,
"target": {
"function": "NotificationGutsManager",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "144932520929737556307665606509048968832",
"length": 1613.0
},
"id": "ASB-A-288896269-ce222ee3",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/95659d74cfa1f6d7a9796b5d595c99df253ec054",
"deprecated": false,
"target": {
"function": "initializeConversationNotificationInfo",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
}
],
"types": [
"ID"
],
"spl": "2023-12-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/95659d74cfa1f6d7a9796b5d595c99df253ec054"
],
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"function_hash": "316910474760991676319562680710809790311",
"length": 1649.0
},
"id": "ASB-A-288896269-02533e78",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7444c007743970a9d6877c1b3fd2b28143687281",
"deprecated": false,
"target": {
"function": "bindNotification",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationConversationInfo.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"250030163650702690218556814786070496467",
"131310132713107569074546476544284301339",
"200454172663836146017633787901049385944",
"256631679654335705417997342968732696046",
"60800081678460235282324025511543154992",
"184029382496790418619655563721822200537",
"144532002353641202108734101213349969251",
"312432234744021497199616349711957352583",
"83036082872288204524710312751447281102",
"263288044336644581958528683740516952300",
"100776016335977268769395061763150185638",
"139279611553483094861445348210041438293",
"216051915126484363564419485253569070130",
"112219203957012154437837566026893687200",
"167870209374219206177625039945305653474",
"235885022108293952125383790887580950514",
"189259908505359799866966181673239147712",
"211645088009758618415743361212521862817",
"93231106277635975303741366827246226731",
"16238322785248966224942093181591361924"
]
},
"id": "ASB-A-288896269-5917e25e",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7444c007743970a9d6877c1b3fd2b28143687281",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"202423729764277837459330863389223826032",
"149637711870791475439214501699369946947",
"45164103961923015352548044016399637543",
"90616013806748030587310345061725384465",
"83036082872288204524710312751447281102",
"263288044336644581958528683740516952300",
"100776016335977268769395061763150185638",
"139279611553483094861445348210041438293",
"278708482124900979312389608318767881776",
"203378636160739123584612189496557695371",
"252392960709280821845012763715727804687",
"281264446443945558807586086307403930158"
]
},
"id": "ASB-A-288896269-c1c73a42",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7444c007743970a9d6877c1b3fd2b28143687281",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/dagger/NotificationsModule.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "308819479757998318616934749308127298072",
"length": 1619.0
},
"id": "ASB-A-288896269-ce8d1cbf",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7444c007743970a9d6877c1b3fd2b28143687281",
"deprecated": false,
"target": {
"function": "initializeConversationNotificationInfo",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "167081506323013977108977122307933165843",
"length": 901.0
},
"id": "ASB-A-288896269-de38c169",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7444c007743970a9d6877c1b3fd2b28143687281",
"deprecated": false,
"target": {
"function": "NotificationGutsManager",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"265953387334128417533783229142107824643",
"128925952502831700169030010272114177992",
"138896328595853320761776874839011791774",
"160616190006747144472108337585292575911",
"228015238009796341240327091250876932018",
"71600874674562408720298518993654728673",
"59657049733372196380068050961988523682",
"75882111226076295942487405329139410530",
"64136458640941196898083386928760440656",
"112513055506394179176074909462258007691",
"198614634917747897042426569678831764695",
"303560093868668070691232218874229168982",
"203181757443446892219905689705187323361",
"268289310753455125116496969042687087741",
"128489441790955251978555926619893030340",
"332085048172746370719374279780517669107",
"304241201541386732293525466416520158958",
"280933088920217115505016103242846997263",
"161585619226953498893885346298666061327"
]
},
"id": "ASB-A-288896269-e792ac09",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7444c007743970a9d6877c1b3fd2b28143687281",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationConversationInfo.java"
},
"signature_version": "v1"
}
],
"types": [
"ID"
],
"spl": "2023-12-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/7444c007743970a9d6877c1b3fd2b28143687281"
],
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"function_hash": "275790296995513726427829673377107683482",
"length": 1576.0
},
"id": "ASB-A-288896269-25c0bd7d",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/dd044a6cad393ea70440eef08c274b8a93b50202",
"deprecated": false,
"target": {
"function": "bindNotification",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationConversationInfo.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "97586018491712111788720419061632568428",
"length": 1007.0
},
"id": "ASB-A-288896269-7f0adca0",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/dd044a6cad393ea70440eef08c274b8a93b50202",
"deprecated": false,
"target": {
"function": "NotificationGutsManager",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"250030163650702690218556814786070496467",
"131310132713107569074546476544284301339",
"200454172663836146017633787901049385944",
"256631679654335705417997342968732696046",
"60800081678460235282324025511543154992",
"184029382496790418619655563721822200537",
"144532002353641202108734101213349969251",
"312432234744021497199616349711957352583",
"299835800258771234386313081000909342564",
"11251168981888847700427063204746697821",
"3478132542860705786686384393193862126",
"57957579615136433794160362532557502014",
"216051915126484363564419485253569070130",
"112219203957012154437837566026893687200",
"167870209374219206177625039945305653474",
"235885022108293952125383790887580950514",
"94051001812651911373192909752203608523",
"338111167483887221304864265345565092383",
"93231106277635975303741366827246226731",
"16238322785248966224942093181591361924"
]
},
"id": "ASB-A-288896269-8d2f55f8",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/dd044a6cad393ea70440eef08c274b8a93b50202",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"function_hash": "277091814411092081832620044540052517237",
"length": 1596.0
},
"id": "ASB-A-288896269-8fda8aa0",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/dd044a6cad393ea70440eef08c274b8a93b50202",
"deprecated": false,
"target": {
"function": "initializeConversationNotificationInfo",
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationGutsManager.java"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"265953387334128417533783229142107824643",
"128925952502831700169030010272114177992",
"138896328595853320761776874839011791774",
"160616190006747144472108337585292575911",
"228015238009796341240327091250876932018",
"71600874674562408720298518993654728673",
"59657049733372196380068050961988523682",
"194903749351548277678970832090882712657",
"111501335088025618588057779761888179250",
"305795497846898578712863349790280066572",
"198614634917747897042426569678831764695",
"33809323543126496807564377033955698641",
"3061521919880570451099164147101699862",
"268289310753455125116496969042687087741",
"128489441790955251978555926619893030340",
"332085048172746370719374279780517669107",
"304241201541386732293525466416520158958",
"280933088920217115505016103242846997263",
"161585619226953498893885346298666061327"
]
},
"id": "ASB-A-288896269-9856de0e",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/dd044a6cad393ea70440eef08c274b8a93b50202",
"deprecated": false,
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationConversationInfo.java"
},
"signature_version": "v1"
}
],
"types": [
"ID"
],
"spl": "2023-12-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/dd044a6cad393ea70440eef08c274b8a93b50202"
],
"severity": "High"
}