ASB-A-293602970

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-293602970.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-293602970

Aliases

CVE-2024-23705

Published

2024-05-01T00:00:00Z

Modified

2024-07-26T15:05:33Z

Summary

Create and persist a new secondary user without any restrictions via a super large seed account option

Details

In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

14-next:0

Fixed

14-next:2024-05-01

Affected versions

Other

14-next

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/7e91582908475af43ff188d9d7e97aea2cdf8ee2"
    ],
    "spl": "2024-05-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

12:0

Fixed

12:2024-05-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/944ea959ab8464c39a8f6a4fc391fb6953e1df89"
    ],
    "spl": "2024-05-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

12L:0

Fixed

12L:2024-05-01

Affected versions

Other

12L

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/8dc6feaee7c0a5cea093b5280acaad862921cf3e"
    ],
    "spl": "2024-05-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

13:0

Fixed

13:2024-05-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/8dc6feaee7c0a5cea093b5280acaad862921cf3e"
    ],
    "spl": "2024-05-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

14:0

Fixed

14:2024-05-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/33a90988cf3b59a3b8dc9f699d155688be8d5623"
    ],
    "spl": "2024-05-01",
    "types": [
        "EoP"
    ],
    "severity": "High"
}