ASB-A-328068777

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-328068777.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-328068777

Aliases

A-328068777
CVE-2024-23706

Published

2024-05-01T00:00:00Z

Modified

2025-11-13T16:43:39.237894Z

Summary

[none]

Details

In multiple locations, there is a possible bypass of health data permissions due to an improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/modules/HealthFitness

Package

Name: platform/packages/modules/HealthFitness

Affected ranges

Type: ECOSYSTEM
Events: Introduced

14-next:0

Fixed

14-next:2024-05-01

Affected versions

Other

14-next

Ecosystem specific

{
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/HealthFitness/+/dcb9791c2ed95b06a2ab9656f10fba3a35933ac5"
    ],
    "spl": "2024-05-01",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "deprecated": false,
            "target": {
                "function": "ChangeLogTokenRequest",
                "file": "framework/java/android/health/connect/changelog/ChangeLogTokenRequest.java"
            },
            "digest": {
                "function_hash": "11182637820034618401113751222754258203",
                "length": 176.0
            },
            "source": "https://android.googlesource.com/platform/packages/modules/HealthFitness/+/dcb9791c2ed95b06a2ab9656f10fba3a35933ac5",
            "signature_type": "Function",
            "id": "ASB-A-328068777-358b6dbd"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "target": {
                "function": "getChangeLogToken",
                "file": "service/java/com/android/server/healthconnect/HealthConnectServiceImpl.java"
            },
            "digest": {
                "function_hash": "210789308651513261784163237306101964800",
                "length": 1685.0
            },
            "source": "https://android.googlesource.com/platform/packages/modules/HealthFitness/+/dcb9791c2ed95b06a2ab9656f10fba3a35933ac5",
            "signature_type": "Function",
            "id": "ASB-A-328068777-755e83ba"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "target": {
                "file": "service/java/com/android/server/healthconnect/HealthConnectServiceImpl.java"
            },
            "digest": {
                "line_hashes": [
                    "24184396780336239456519827110476549761",
                    "326091310677141883351282324384448193723",
                    "169296199027089828482117199681574946450",
                    "60912415992642674153698379516784373776",
                    "253230689317029001137224617269275472402",
                    "270232514102022061319869247121890143736",
                    "253692171878371708813287315620972659781",
                    "23293976492454174139545048729646880666",
                    "152820436504189419185227330089363240672",
                    "192804579701164721586373396846142632900",
                    "36366221292545186722522250319036558772",
                    "157353292968794510263123915821142624716"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/packages/modules/HealthFitness/+/dcb9791c2ed95b06a2ab9656f10fba3a35933ac5",
            "signature_type": "Line",
            "id": "ASB-A-328068777-d2a84df2"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "target": {
                "file": "framework/java/android/health/connect/changelog/ChangeLogTokenRequest.java"
            },
            "digest": {
                "line_hashes": [
                    "184284571166231186356303372028293059177",
                    "158277996485282816687852804984270150792",
                    "3834673447980206355777666768730623887",
                    "194253162466046725342937943237631321477",
                    "40585238822889721281949691705454247789",
                    "235783409289312975463805719829070200344",
                    "12902639167930202410359945484686747496"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/packages/modules/HealthFitness/+/dcb9791c2ed95b06a2ab9656f10fba3a35933ac5",
            "signature_type": "Line",
            "id": "ASB-A-328068777-dd62bad8"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "target": {
                "file": "tests/cts/utils/HealthConnectTestUtils/src/android/healthconnect/cts/utils/DataFactory.java"
            },
            "digest": {
                "line_hashes": [
                    "169017893411465551870686141667331661882",
                    "254973238369687517206384210713299461536",
                    "265493436211331043298307543155769753378",
                    "230235184610370260045292722396838039625",
                    "28639966036122384420486418860090170562",
                    "14787195696624463574573004180146590960",
                    "124969319363793220763356686989257765174"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/packages/modules/HealthFitness/+/dcb9791c2ed95b06a2ab9656f10fba3a35933ac5",
            "signature_type": "Line",
            "id": "ASB-A-328068777-ee2b7d22"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "target": {
                "function": "getChangeLogs",
                "file": "service/java/com/android/server/healthconnect/HealthConnectServiceImpl.java"
            },
            "digest": {
                "function_hash": "226261509158360689473339911837521724737",
                "length": 3195.0
            },
            "source": "https://android.googlesource.com/platform/packages/modules/HealthFitness/+/dcb9791c2ed95b06a2ab9656f10fba3a35933ac5",
            "signature_type": "Function",
            "id": "ASB-A-328068777-f972c0c3"
        }
    ],
    "severity": "Critical"
}