ASB-A-340480881

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-340480881.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-340480881
Aliases
  • A-340480881
  • CVE-2024-43095
Published
2025-01-01T00:00:00Z
Modified
2025-01-13T21:12:09.160620Z
Summary
[none]
Details

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android / platform/packages/modules/Permission

Package

Name
platform/packages/modules/Permission

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2025-01-01

Affected versions

Other

15-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "259962140351988930054488859607270289429",
                    "34485054331938225524340970259094432032",
                    "236453479590493319390251154950242347972",
                    "334852091210630587248185033358495230145"
                ]
            },
            "id": "ASB-A-340480881-7bbe63dd",
            "source": "https://android.googlesource.com/platform/packages/modules/Permission/+/46abb4e1fd365a88efdfe3f2b1f87da4d255b41b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "PermissionController/src/com/android/permissioncontroller/permission/utils/SafetyNetLogger.java"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "309210055386791724508798064020443375701",
                    "76297417241953971349473152942420791120",
                    "32424068908752210583928908098415548096",
                    "190082113443108366700365308189806546719",
                    "164801660500259555085004869897945552185",
                    "22257253614608400341120835946906982351",
                    "84133947884435720570489621599358657566",
                    "25328240408979178066630196199757707142"
                ]
            },
            "id": "ASB-A-340480881-d7a46498",
            "source": "https://android.googlesource.com/platform/packages/modules/Permission/+/46abb4e1fd365a88efdfe3f2b1f87da4d255b41b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "PermissionController/src/com/android/permissioncontroller/permission/ui/handheld/ReviewPermissionsFragment.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Permission/+/46abb4e1fd365a88efdfe3f2b1f87da4d255b41b"
    ],
    "spl": "2025-01-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/packages/modules/Permission

Package

Name
platform/packages/modules/Permission

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2025-01-01

Affected versions

Other

12

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Permission/+/6843ffaa44ed01868c9b67bfc1c13bac4c2bd71a"
    ],
    "spl": "2025-01-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/packages/modules/Permission

Package

Name
platform/packages/modules/Permission

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2025-01-01

Affected versions

Other

12L

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Permission/+/2bf7a6ef16585b120dfeee6e4f701be62525ee12"
    ],
    "spl": "2025-01-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/packages/modules/Permission

Package

Name
platform/packages/modules/Permission

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-01-01

Affected versions

Other

13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "309210055386791724508798064020443375701",
                    "201534202829582251158760473503637969511",
                    "311663495964368043091592960826039410387",
                    "197746044962682403595156662193900869618",
                    "241014318001215970451323854968838978145",
                    "22257253614608400341120835946906982351",
                    "84133947884435720570489621599358657566",
                    "25328240408979178066630196199757707142"
                ]
            },
            "id": "ASB-A-340480881-14e99405",
            "source": "https://android.googlesource.com/platform/packages/modules/Permission/+/06e7a4b6dced97632ef42670539d71cb6c68785a",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "PermissionController/src/com/android/permissioncontroller/permission/ui/handheld/ReviewPermissionsFragment.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Permission/+/06e7a4b6dced97632ef42670539d71cb6c68785a"
    ],
    "spl": "2025-01-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/packages/modules/Permission

Package

Name
platform/packages/modules/Permission

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-01-01

Affected versions

Other

14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "309210055386791724508798064020443375701",
                    "201534202829582251158760473503637969511",
                    "311663495964368043091592960826039410387",
                    "197746044962682403595156662193900869618",
                    "241014318001215970451323854968838978145",
                    "22257253614608400341120835946906982351",
                    "84133947884435720570489621599358657566",
                    "25328240408979178066630196199757707142"
                ]
            },
            "id": "ASB-A-340480881-55e8170a",
            "source": "https://android.googlesource.com/platform/packages/modules/Permission/+/89aedebdb811ada35a283455a1779026fd84772e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "PermissionController/src/com/android/permissioncontroller/permission/ui/handheld/ReviewPermissionsFragment.java"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "259962140351988930054488859607270289429",
                    "34485054331938225524340970259094432032",
                    "236453479590493319390251154950242347972",
                    "334852091210630587248185033358495230145"
                ]
            },
            "id": "ASB-A-340480881-933a897c",
            "source": "https://android.googlesource.com/platform/packages/modules/Permission/+/89aedebdb811ada35a283455a1779026fd84772e",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "PermissionController/src/com/android/permissioncontroller/permission/utils/SafetyNetLogger.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Permission/+/89aedebdb811ada35a283455a1779026fd84772e"
    ],
    "spl": "2025-01-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}