ASB-A-299931761

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-299931761.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-299931761
Aliases
  • A-299931761
  • CVE-2024-23704
Published
2024-04-01T00:00:00Z
Modified
2025-07-16T14:51:32.440415Z
Summary
[none]
Details

In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOWADDWIFI_CONFIG restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14-next:0
Fixed
14-next:2024-04-01

Affected versions

Other

14-next

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "304908083314054415826178321478903199900",
                    "92829774652229226396613894627617119109",
                    "165283700952960222520899569461947905195",
                    "272867405623721607522721949130899071488",
                    "47094200591307887012498369411850846673",
                    "332087609072455182703974401199847417928",
                    "267063775795884427666077931740735262588",
                    "308336175154960398757381536582125074328",
                    "98804998587821721315467228299898039967"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/51fa3d798ad0397122bbb2143bc24efe1a705be9",
            "id": "ASB-A-299931761-93e577ee",
            "signature_type": "Line",
            "target": {
                "file": "src/com/android/settings/wifi/WifiDialogActivity.java"
            }
        },
        {
            "digest": {
                "function_hash": "12017830568597260975719184582897496976",
                "length": 1115.0
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/51fa3d798ad0397122bbb2143bc24efe1a705be9",
            "id": "ASB-A-299931761-f109cd99",
            "signature_type": "Function",
            "target": {
                "file": "src/com/android/settings/wifi/WifiDialogActivity.java",
                "function": "onCreate"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/51fa3d798ad0397122bbb2143bc24efe1a705be9"
    ],
    "spl": "2024-04-01"
}

Android / platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2024-04-01

Affected versions

Other

13

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "331680241548120640732637950813423618419",
                    "330625712644560439905665376406109280763",
                    "214416774826381198887431004990514828941",
                    "123464542501830518251302421673961665693",
                    "100383292714303344328591006572568725033",
                    "53914481670964070342629675062259607123",
                    "290489390437304356837269100143485880537",
                    "145218590775382854201468427449450430113",
                    "85670028455605829055933677344838523182",
                    "4793110726557626096114028258196273961",
                    "79339572396844216866429910254617453268",
                    "179679681544337826586295570893219464756",
                    "98804998587821721315467228299898039967"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/aabb15de74d4d24a81ed1f5b7789fe0a8407b256",
            "id": "ASB-A-299931761-951e4eed",
            "signature_type": "Line",
            "target": {
                "file": "src/com/android/settings/wifi/WifiDialogActivity.java"
            }
        },
        {
            "digest": {
                "function_hash": "22540778110885899099295149132315098659",
                "length": 1070.0
            },
            "id": "ASB-A-299931761-ea412ef0",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/aabb15de74d4d24a81ed1f5b7789fe0a8407b256",
            "signature_version": "v1",
            "deprecated": false,
            "match_only_versions": [
                "13"
            ],
            "signature_type": "Function",
            "target": {
                "file": "src/com/android/settings/wifi/WifiDialogActivity.java",
                "function": "onCreate"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/aabb15de74d4d24a81ed1f5b7789fe0a8407b256"
    ],
    "spl": "2024-04-01"
}

Android / platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2024-04-01

Affected versions

Other

14

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "300529575560052376725951945053325304123",
                "length": 1120.0
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/a0409e582c30d2d6ff347eefd173ae169963df75",
            "id": "ASB-A-299931761-81d91778",
            "signature_type": "Function",
            "target": {
                "file": "src/com/android/settings/wifi/WifiDialogActivity.java",
                "function": "onCreate"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "304908083314054415826178321478903199900",
                    "92829774652229226396613894627617119109",
                    "165283700952960222520899569461947905195",
                    "272867405623721607522721949130899071488",
                    "47094200591307887012498369411850846673",
                    "332087609072455182703974401199847417928",
                    "267063775795884427666077931740735262588",
                    "308336175154960398757381536582125074328",
                    "98804998587821721315467228299898039967"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/a0409e582c30d2d6ff347eefd173ae169963df75",
            "id": "ASB-A-299931761-ea9b660e",
            "signature_type": "Line",
            "target": {
                "file": "src/com/android/settings/wifi/WifiDialogActivity.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/a0409e582c30d2d6ff347eefd173ae169963df75"
    ],
    "spl": "2024-04-01"
}