ASB-A-353700779

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-353700779.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-353700779
Aliases
Published
2024-11-01T00:00:00Z
Modified
2026-04-17T15:55:28.020024Z
Summary
[none]
Details

In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in the accessibility service settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2024-11-01

Affected versions

Other
15-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 586.0,
                "function_hash": "285217736839927846104457915613120063281"
            },
            "id": "ASB-A-353700779-25407cd0",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59",
            "target": {
                "function": "getInstalledAccessibilityPreferences",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "53643916469238259854452842988089730024",
                    "204265615377755217008589766975429388409",
                    "224552377136192462414401324488823375021",
                    "300083948815293452740340559232823979128",
                    "151777093721093528519530941537586595011",
                    "227348184122705479764642046504563910938",
                    "309430992087905021959649753283495140069",
                    "154770167411320167871371466617305623942",
                    "283071587301044400978471877772411704024",
                    "238903126193692026002511292991439891563",
                    "23361965122673009338575945133464245890",
                    "322953361758059982968100930586045004616",
                    "297790052984669952356559188841740293899",
                    "136443585717022516651906898419346400312",
                    "291592497918444445045727609359281311139",
                    "294110705814170783188288414522890755284",
                    "286221995654019383477634097910676211337",
                    "29267644997104994178370439238980952909",
                    "231590730793634362835012547783006036433",
                    "157670959015415467435765265188968216195",
                    "166057002036976466685725911128549964206",
                    "167454418962087896468027446602216180308",
                    "47377734622387932219082867656242349283",
                    "29885222256389208818865732216592845603",
                    "252860654942489349840093374137536901795",
                    "336899545689661739715103336492359543259",
                    "270173845205473864919217312202549150302",
                    "199094980942431697736108256036597428971",
                    "329564856147238746096377231085346821371",
                    "135650350224906798138903084304606579469",
                    "39440192737140534685181176184129327863",
                    "22726738467314657543028235757086015848",
                    "136820200302208206752982668860368131397",
                    "110197140603571614223346042250493807142",
                    "159575296239032874854001524805330534609",
                    "157689259942631077750991062474842373331",
                    "248941801438301735415338249995250328489",
                    "35255370932940251654034679384895165268",
                    "190515898744714854494049044164210198663",
                    "14359388727780284010830083510877994071",
                    "338071805652869803460497078876804230421",
                    "86406938043031531806109904128794914518",
                    "271804081414488647122234091971213311408",
                    "310544204605694634424337129207603545393",
                    "171630429241967655806318385188031477839",
                    "298987347333534547850525962331963791021",
                    "96531097385401763076648393808317494475",
                    "299487251314348296712938856167263783288",
                    "310876815043111588651615434367469656936",
                    "129268457449606612113116987205451647942",
                    "330707914275439605711014643505052668095",
                    "106840940535445474879717452109830213001",
                    "108281749985512031164616665559814617661",
                    "122473974629179491822729504958904654734",
                    "253454171945359541081648152741858653481"
                ]
            },
            "id": "ASB-A-353700779-3a61a49f",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59",
            "target": {
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "194611633686722999555843548120577447485",
                    "115177135498374500904052280419752696217",
                    "38815743889678716215398042049143720876",
                    "85116599841194138409239524860305909097",
                    "74851957185353664166667888334619845821",
                    "142157034503368663470470606306342602405",
                    "18191261222624075535279877560652234984",
                    "68413762186512236323614607183639971278",
                    "145071561646955445252423865444955940272",
                    "258941197841696008466606404099171758077",
                    "86454360718502623583724216880150005122",
                    "58455381986457782748276469341535820313",
                    "311728547441014078871566530114690790578",
                    "173058008182030071905961775938048934246"
                ]
            },
            "id": "ASB-A-353700779-5c5c5f06",
            "deprecated": false,
            "target": {
                "file": "tests/robotests/src/com/android/settings/testutils/shadow/ShadowAccessibilityManager.java"
            },
            "signature_type": "Line",
            "match_only_versions": [
                "15-next"
            ],
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59",
            "signature_version": "v1"
        },
        {
            "digest": {
                "length": 2628.0,
                "function_hash": "155448054326667516544572275453033287639"
            },
            "id": "ASB-A-353700779-6af15dcc",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59",
            "target": {
                "function": "updateServicePreferences",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "length": 242.0,
                "function_hash": "165781523433872076764536556235650935883"
            },
            "id": "ASB-A-353700779-71926db3",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59",
            "target": {
                "function": "containsPackageAndLabelInList",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2024-11-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353700779.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2024-11-01

Affected versions

Other
12

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "144422750009371951600995196731036689622",
                    "155690637582515572617715167374539253670",
                    "60601569844597957729357498125277242461",
                    "111614628546416402698955181079145405406",
                    "294849969966961275002540312770227921085",
                    "31242838117669534691129301776187435189",
                    "9575903934300010857870388392986166443",
                    "257417760387597684732748376338482846517",
                    "332273860880998348933578912512777202152",
                    "63556312701202719457586516950924316929",
                    "78497599825161441577520928516283979155",
                    "289088847707262081491973581258519553518",
                    "135153836155980582756306013224028003918",
                    "306013477803140523853759126857236477915",
                    "312644131033760342415660335805232055346",
                    "69663769005949117252957252365175778868",
                    "63634561811135092964965095453685181067",
                    "129268457449606612113116987205451647942",
                    "279821722700640267769812859122951679057",
                    "143688957664535955797666872411459068603",
                    "81261708505312857542778728954142508842",
                    "150505307782422924855497374380983079670",
                    "278110562919455909216344619553282986499",
                    "168241266802551248217366618837482422812",
                    "196952287101980436559155027255620106751",
                    "253220766386414055761430999996545414847",
                    "130014035008290283032687500810472033193",
                    "102773042227712380051185624212894701760",
                    "193945555105656936453847297800470789796",
                    "24312057217877174375154752207075989864",
                    "5747207037135602253424381473973468446",
                    "253454171945359541081648152741858653481"
                ]
            },
            "id": "ASB-A-353700779-63daab78",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/c4963a73f0d9266a246330527ef9422b336db91d",
            "target": {
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "length": 503.0,
                "function_hash": "298404758624910439096961776660560705406"
            },
            "id": "ASB-A-353700779-c102603e",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/c4963a73f0d9266a246330527ef9422b336db91d",
            "target": {
                "function": "getInstalledAccessibilityList",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "length": 500.0,
                "function_hash": "14471867451777370060218690595941141253"
            },
            "id": "ASB-A-353700779-daecfe0a",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/c4963a73f0d9266a246330527ef9422b336db91d",
            "target": {
                "function": "containsTargetNameInList",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/c4963a73f0d9266a246330527ef9422b336db91d"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2024-11-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353700779.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2024-11-01

Affected versions

Other
12L

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 500.0,
                "function_hash": "14471867451777370060218690595941141253"
            },
            "id": "ASB-A-353700779-1bda5fd7",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/1bcc4049583085522767c3da7866ee83d0f5e104",
            "target": {
                "function": "containsTargetNameInList",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "144422750009371951600995196731036689622",
                    "155690637582515572617715167374539253670",
                    "60601569844597957729357498125277242461",
                    "111614628546416402698955181079145405406",
                    "294849969966961275002540312770227921085",
                    "31242838117669534691129301776187435189",
                    "9575903934300010857870388392986166443",
                    "257417760387597684732748376338482846517",
                    "332273860880998348933578912512777202152",
                    "63556312701202719457586516950924316929",
                    "78497599825161441577520928516283979155",
                    "289088847707262081491973581258519553518",
                    "135153836155980582756306013224028003918",
                    "306013477803140523853759126857236477915",
                    "312644131033760342415660335805232055346",
                    "69663769005949117252957252365175778868",
                    "63634561811135092964965095453685181067",
                    "129268457449606612113116987205451647942",
                    "279821722700640267769812859122951679057",
                    "143688957664535955797666872411459068603",
                    "81261708505312857542778728954142508842",
                    "150505307782422924855497374380983079670",
                    "278110562919455909216344619553282986499",
                    "168241266802551248217366618837482422812",
                    "196952287101980436559155027255620106751",
                    "253220766386414055761430999996545414847",
                    "130014035008290283032687500810472033193",
                    "102773042227712380051185624212894701760",
                    "193945555105656936453847297800470789796",
                    "24312057217877174375154752207075989864",
                    "5747207037135602253424381473973468446",
                    "253454171945359541081648152741858653481"
                ]
            },
            "id": "ASB-A-353700779-5e95aed3",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/1bcc4049583085522767c3da7866ee83d0f5e104",
            "target": {
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "length": 503.0,
                "function_hash": "298404758624910439096961776660560705406"
            },
            "id": "ASB-A-353700779-f2357385",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/1bcc4049583085522767c3da7866ee83d0f5e104",
            "target": {
                "function": "getInstalledAccessibilityList",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/1bcc4049583085522767c3da7866ee83d0f5e104"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2024-11-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353700779.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2024-11-01

Affected versions

Other
13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 500.0,
                "function_hash": "14471867451777370060218690595941141253"
            },
            "id": "ASB-A-353700779-dfc7d599",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/398ab199230563aabebbba61e1809306e478a0b9",
            "target": {
                "function": "containsTargetNameInList",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "82630320983239367868995932347249873552",
                    "238720745101173363797345494215368416207",
                    "236567698392950522510091002694888408909",
                    "335240233360688362156751331580867261112",
                    "294849969966961275002540312770227921085",
                    "31242838117669534691129301776187435189",
                    "9575903934300010857870388392986166443",
                    "257417760387597684732748376338482846517",
                    "332273860880998348933578912512777202152",
                    "63556312701202719457586516950924316929",
                    "78497599825161441577520928516283979155",
                    "289088847707262081491973581258519553518",
                    "135153836155980582756306013224028003918",
                    "306013477803140523853759126857236477915",
                    "312644131033760342415660335805232055346",
                    "69663769005949117252957252365175778868",
                    "63634561811135092964965095453685181067",
                    "129268457449606612113116987205451647942",
                    "279821722700640267769812859122951679057",
                    "143688957664535955797666872411459068603",
                    "81261708505312857542778728954142508842",
                    "150505307782422924855497374380983079670",
                    "278110562919455909216344619553282986499",
                    "168241266802551248217366618837482422812",
                    "196952287101980436559155027255620106751",
                    "253220766386414055761430999996545414847",
                    "130014035008290283032687500810472033193",
                    "102773042227712380051185624212894701760",
                    "193945555105656936453847297800470789796",
                    "24312057217877174375154752207075989864",
                    "5747207037135602253424381473973468446",
                    "253454171945359541081648152741858653481"
                ]
            },
            "id": "ASB-A-353700779-e73be0a2",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/398ab199230563aabebbba61e1809306e478a0b9",
            "target": {
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "length": 503.0,
                "function_hash": "298404758624910439096961776660560705406"
            },
            "id": "ASB-A-353700779-fea841fc",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/398ab199230563aabebbba61e1809306e478a0b9",
            "target": {
                "function": "getInstalledAccessibilityList",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/398ab199230563aabebbba61e1809306e478a0b9"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2024-11-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353700779.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2024-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 503.0,
                "function_hash": "298404758624910439096961776660560705406"
            },
            "id": "ASB-A-353700779-47782eb2",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/25ecee0563a2c6f9f6a47dbf8e5b4d66043d4f67",
            "target": {
                "function": "getInstalledAccessibilityList",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "length": 500.0,
                "function_hash": "14471867451777370060218690595941141253"
            },
            "id": "ASB-A-353700779-9f5272e6",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/25ecee0563a2c6f9f6a47dbf8e5b4d66043d4f67",
            "target": {
                "function": "containsTargetNameInList",
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "82630320983239367868995932347249873552",
                    "238720745101173363797345494215368416207",
                    "236567698392950522510091002694888408909",
                    "335240233360688362156751331580867261112",
                    "294849969966961275002540312770227921085",
                    "31242838117669534691129301776187435189",
                    "9575903934300010857870388392986166443",
                    "257417760387597684732748376338482846517",
                    "332273860880998348933578912512777202152",
                    "63556312701202719457586516950924316929",
                    "78497599825161441577520928516283979155",
                    "289088847707262081491973581258519553518",
                    "135153836155980582756306013224028003918",
                    "306013477803140523853759126857236477915",
                    "312644131033760342415660335805232055346",
                    "69663769005949117252957252365175778868",
                    "63634561811135092964965095453685181067",
                    "129268457449606612113116987205451647942",
                    "279821722700640267769812859122951679057",
                    "143688957664535955797666872411459068603",
                    "81261708505312857542778728954142508842",
                    "150505307782422924855497374380983079670",
                    "278110562919455909216344619553282986499",
                    "168241266802551248217366618837482422812",
                    "196952287101980436559155027255620106751",
                    "253220766386414055761430999996545414847",
                    "130014035008290283032687500810472033193",
                    "102773042227712380051185624212894701760",
                    "193945555105656936453847297800470789796",
                    "24312057217877174375154752207075989864",
                    "5747207037135602253424381473973468446",
                    "253454171945359541081648152741858653481"
                ]
            },
            "id": "ASB-A-353700779-ee4939da",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/25ecee0563a2c6f9f6a47dbf8e5b4d66043d4f67",
            "target": {
                "file": "src/com/android/settings/accessibility/AccessibilitySettings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/25ecee0563a2c6f9f6a47dbf8e5b4d66043d4f67"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2024-11-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353700779.json"