PUB-A-246542917

See a problem?

Import Source

https://storage.googleapis.com/android-osv/PUB-A-246542917.json

JSON Data

https://api.osv.dev/v1/vulns/PUB-A-246542917

Aliases

A-246542917
CVE-2023-21187

Published

2023-06-01T00:00:00Z

Modified

2026-04-28T15:17:37.552933Z

Summary

[none]

Details

In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2023-06-01

Affected packages

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

13-next:0

Fixed

13-next:2023-06-01

Affected versions

Other

13-next

Ecosystem specific

{
    "spl": "2023-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/168662319429aa3ba16742439a8f02da2e07b0c6"
    ],
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "239487596569913257256789971046801982305",
                    "157863405048789649203519074377370654005",
                    "64486575106066182416122459636838835426",
                    "115973020535609400821268272251040977803",
                    "36494061490479298340585942036533499433",
                    "304206301656214372985175649909903305269",
                    "261714860255620743397976767951740614797",
                    "223233839627489651530141544022799941803",
                    "172170284231136267552630545613693180554",
                    "281143166377382409460288712474034776448",
                    "18706295847698019748182134826688791576",
                    "178605713698937034068633266678119705762",
                    "243472584883236262499680914991463965914"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/168662319429aa3ba16742439a8f02da2e07b0c6",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/usb/UsbAccessoryUriActivity.java"
            },
            "id": "PUB-A-246542917-1ff5fb66"
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 1174.0,
                "function_hash": "265292813354158046860462585634524894732"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/168662319429aa3ba16742439a8f02da2e07b0c6",
            "target": {
                "function": "onCreate",
                "file": "packages/SystemUI/src/com/android/systemui/usb/UsbAccessoryUriActivity.java"
            },
            "id": "PUB-A-246542917-2d5e9981"
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "241561769809779353104357559803944746372",
                    "198206283175030578925560351825334423279",
                    "143896384614232544677158841796841288339",
                    "40215649798809789819180199193846098830",
                    "267995326452312996068618056653150590873",
                    "326612124666837065524513062857716630564",
                    "53250778376441268140114150154958477503"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/168662319429aa3ba16742439a8f02da2e07b0c6",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/dagger/DefaultActivityBinder.java"
            },
            "id": "PUB-A-246542917-dd6d9108"
        }
    ],
    "severity": "Moderate"
}

Database specific

source

"https://storage.googleapis.com/android-osv/PUB-A-246542917.json"