ASB-A-293301736

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-293301736.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-293301736
Aliases
  • A-293301736
  • CVE-2024-23708
Published
2024-05-01T00:00:00Z
Modified
2025-12-05T16:54:02.447714Z
Summary
[none]
Details

In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14-next:0
Fixed
14-next:2024-05-01

Affected versions

Other

14-next

Ecosystem specific 

{
    "spl": "2024-05-01",
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "target": {
                "function": "showAccessNotificationLocked",
                "file": "services/core/java/com/android/server/clipboard/ClipboardService.java"
            },
            "digest": {
                "length": 1860.0,
                "function_hash": "140153105100582210719064882995352522392"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595",
            "deprecated": false,
            "id": "ASB-A-293301736-439c565d",
            "signature_type": "Function"
        },
        {
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "line_hashes": [
                    "125599800300640038754283766824678389395",
                    "3023639384543577288562536460166227898",
                    "8963212570310550905245133942830702436",
                    "4526041545684604913922208798118986461",
                    "298346877194448923487418883407950380948",
                    "160740365947827704916635276698930127768",
                    "239153161959907254205043043208137548203",
                    "49579684893671908030064883749971197156"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595",
            "deprecated": false,
            "id": "ASB-A-293301736-5a47489d",
            "signature_type": "Line"
        },
        {
            "target": {
                "function": "enqueueToast",
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "length": 2182.0,
                "function_hash": "145575933447579522652520267726728119690"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595",
            "deprecated": false,
            "id": "ASB-A-293301736-c47277be",
            "signature_type": "Function"
        },
        {
            "target": {
                "file": "services/core/java/com/android/server/clipboard/ClipboardService.java"
            },
            "digest": {
                "line_hashes": [
                    "16611719256377645983705321024960876530",
                    "117412489361192054082462128599202202669",
                    "327375500565017324979474791578469601077",
                    "268091315116038178718845494633414811208",
                    "271717791748026080633539960008347998961",
                    "33302268204333460697797465021037210175",
                    "214371846999978358185522176872997427511",
                    "339994169504411628922283014169364048797"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595",
            "deprecated": false,
            "id": "ASB-A-293301736-e2b77b06",
            "signature_type": "Line"
        }
    ]
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2024-05-01

Affected versions

Other

12

Ecosystem specific 

{
    "spl": "2024-05-01",
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "target": {
                "file": "services/core/java/com/android/server/clipboard/ClipboardService.java"
            },
            "digest": {
                "line_hashes": [
                    "148183948512628701485280756920349622278",
                    "166077678838537786944914696536831747595",
                    "165604897802186618009002619732948475636",
                    "148325104774793000025904769572606837950"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6",
            "deprecated": false,
            "id": "ASB-A-293301736-64d11196",
            "signature_type": "Line"
        },
        {
            "target": {
                "function": "enqueueToast",
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "length": 1817.0,
                "function_hash": "58557464394478024950270382125085909310"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6",
            "deprecated": false,
            "id": "ASB-A-293301736-8404304a",
            "signature_type": "Function"
        },
        {
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "line_hashes": [
                    "125599800300640038754283766824678389395",
                    "3023639384543577288562536460166227898",
                    "8963212570310550905245133942830702436",
                    "4526041545684604913922208798118986461",
                    "298346877194448923487418883407950380948",
                    "298352797132916608215461151575427450436",
                    "319685266089544305277604211166019926183",
                    "48013361902388822231982465596199263183"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6",
            "deprecated": false,
            "id": "ASB-A-293301736-b21dc6ba",
            "signature_type": "Line"
        },
        {
            "target": {
                "function": "showAccessNotificationLocked",
                "file": "services/core/java/com/android/server/clipboard/ClipboardService.java"
            },
            "digest": {
                "length": 1166.0,
                "function_hash": "162520886564088941042872260154283953673"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6",
            "deprecated": false,
            "id": "ASB-A-293301736-b9ea1e0a",
            "signature_type": "Function"
        }
    ]
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2024-05-01

Affected versions

Other

12L

Ecosystem specific 

{
    "spl": "2024-05-01",
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "target": {
                "function": "enqueueToast",
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "length": 1817.0,
                "function_hash": "58557464394478024950270382125085909310"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6",
            "deprecated": false,
            "id": "ASB-A-293301736-adac3c40",
            "signature_type": "Function"
        },
        {
            "target": {
                "function": "showAccessNotificationLocked",
                "file": "services/core/java/com/android/server/clipboard/ClipboardService.java"
            },
            "digest": {
                "length": 1166.0,
                "function_hash": "162520886564088941042872260154283953673"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6",
            "deprecated": false,
            "id": "ASB-A-293301736-da5a45ff",
            "signature_type": "Function"
        },
        {
            "target": {
                "file": "services/core/java/com/android/server/clipboard/ClipboardService.java"
            },
            "digest": {
                "line_hashes": [
                    "148183948512628701485280756920349622278",
                    "166077678838537786944914696536831747595",
                    "165604897802186618009002619732948475636",
                    "148325104774793000025904769572606837950"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6",
            "deprecated": false,
            "id": "ASB-A-293301736-e30b7119",
            "signature_type": "Line"
        },
        {
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "line_hashes": [
                    "125599800300640038754283766824678389395",
                    "3023639384543577288562536460166227898",
                    "8963212570310550905245133942830702436",
                    "4526041545684604913922208798118986461",
                    "298346877194448923487418883407950380948",
                    "298352797132916608215461151575427450436",
                    "319685266089544305277604211166019926183",
                    "48013361902388822231982465596199263183"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6",
            "deprecated": false,
            "id": "ASB-A-293301736-f5fb0b62",
            "signature_type": "Line"
        }
    ]
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2024-05-01

Affected versions

Other

13

Ecosystem specific 

{
    "spl": "2024-05-01",
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "target": {
                "file": "services/core/java/com/android/server/clipboard/ClipboardService.java"
            },
            "digest": {
                "line_hashes": [
                    "148183948512628701485280756920349622278",
                    "166077678838537786944914696536831747595",
                    "165604897802186618009002619732948475636",
                    "148325104774793000025904769572606837950"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80",
            "deprecated": false,
            "id": "ASB-A-293301736-31305b67",
            "signature_type": "Line"
        },
        {
            "target": {
                "function": "enqueueToast",
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "length": 1817.0,
                "function_hash": "58557464394478024950270382125085909310"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80",
            "deprecated": false,
            "id": "ASB-A-293301736-3eaa6049",
            "signature_type": "Function"
        },
        {
            "target": {
                "function": "showAccessNotificationLocked",
                "file": "services/core/java/com/android/server/clipboard/ClipboardService.java"
            },
            "digest": {
                "length": 1315.0,
                "function_hash": "25192570982462651463085555734020786691"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80",
            "deprecated": false,
            "id": "ASB-A-293301736-688bc3f4",
            "signature_type": "Function"
        },
        {
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "line_hashes": [
                    "125599800300640038754283766824678389395",
                    "3023639384543577288562536460166227898",
                    "8963212570310550905245133942830702436",
                    "4526041545684604913922208798118986461",
                    "298346877194448923487418883407950380948",
                    "298352797132916608215461151575427450436",
                    "319685266089544305277604211166019926183",
                    "48013361902388822231982465596199263183"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80",
            "deprecated": false,
            "id": "ASB-A-293301736-99a29437",
            "signature_type": "Line"
        }
    ]
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2024-05-01

Affected versions

Other

14

Ecosystem specific 

{
    "spl": "2024-05-01",
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "line_hashes": [
                    "125599800300640038754283766824678389395",
                    "3023639384543577288562536460166227898",
                    "8963212570310550905245133942830702436",
                    "4526041545684604913922208798118986461",
                    "298346877194448923487418883407950380948",
                    "160740365947827704916635276698930127768",
                    "239153161959907254205043043208137548203",
                    "49579684893671908030064883749971197156"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db",
            "deprecated": false,
            "id": "ASB-A-293301736-3ee1c82d",
            "signature_type": "Line"
        },
        {
            "target": {
                "file": "services/core/java/com/android/server/clipboard/ClipboardService.java"
            },
            "digest": {
                "line_hashes": [
                    "16611719256377645983705321024960876530",
                    "117412489361192054082462128599202202669",
                    "327375500565017324979474791578469601077",
                    "268091315116038178718845494633414811208",
                    "271717791748026080633539960008347998961",
                    "33302268204333460697797465021037210175",
                    "214371846999978358185522176872997427511",
                    "339994169504411628922283014169364048797"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db",
            "deprecated": false,
            "id": "ASB-A-293301736-79a7f58a",
            "signature_type": "Line"
        },
        {
            "target": {
                "function": "enqueueToast",
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "length": 2182.0,
                "function_hash": "145575933447579522652520267726728119690"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db",
            "deprecated": false,
            "id": "ASB-A-293301736-912e8e8d",
            "signature_type": "Function"
        },
        {
            "target": {
                "function": "showAccessNotificationLocked",
                "file": "services/core/java/com/android/server/clipboard/ClipboardService.java"
            },
            "digest": {
                "length": 1860.0,
                "function_hash": "140153105100582210719064882995352522392"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db",
            "deprecated": false,
            "id": "ASB-A-293301736-f5a6836c",
            "signature_type": "Function"
        }
    ]
}