PUB-A-269738057

See a problem?
Import Source
https://storage.googleapis.com/android-osv/PUB-A-269738057.json
JSON Data
https://api.osv.dev/v1/vulns/PUB-A-269738057
Aliases
  • A-269738057
  • CVE-2023-21191
Published
2023-06-01T00:00:00Z
Modified
2024-11-06T12:16:03.231308Z
Summary
[none]
Details

In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13-next:0
Fixed
13-next:2023-06-01

Affected versions

Other

13-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "22958080035816717202560403664685991890",
                    "78123315983861430364359015650840499123",
                    "183856406065227123892773425565102501940",
                    "79635876793560842305014633038986757136",
                    "312321841640813114234790836333174461078",
                    "235125375418014438895254984887835224170",
                    "61630958252814798551357640514339740264",
                    "16699496012393502426038688768324289971",
                    "314187314827919320136176759322348381114",
                    "262333844503341372164981295343067069679",
                    "308818903745529776665203353569457307478",
                    "65162265104857293240296365857903256242",
                    "27356863289009533215345071004145625404",
                    "91905748566243451892390620574538037034",
                    "236664540975238391300142303325764207736",
                    "97730021583178991741148219150334820299",
                    "54039155133794126294561902890717823083",
                    "98120493992643444677959930722952129214",
                    "15421390081872240526325879915808753869",
                    "138344645973504630717914566244438963984",
                    "146885620058357543268040305569022955453"
                ]
            },
            "id": "PUB-A-269738057-42b9241b",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d88e3522c6dc15a30875f810a2dd830657c482dc",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 5055.0,
                "function_hash": "187391855468368959923851713318301334502"
            },
            "id": "PUB-A-269738057-43978bbb",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d88e3522c6dc15a30875f810a2dd830657c482dc",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
                "function": "enqueueNotificationInternal"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 4214.0,
                "function_hash": "193190198217629380855161219689323077320"
            },
            "id": "PUB-A-269738057-77d728f5",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d88e3522c6dc15a30875f810a2dd830657c482dc",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
                "function": "fixNotification"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "13-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "102580151532020817651757524858089080866",
                    "66554477197568812191758632051680872084",
                    "197138248013674296920468478617445192476",
                    "237783404032002928573774197550746374124",
                    "158565824480158959320596339880668900135",
                    "41263151994992397904985065614435412555",
                    "159441869495033598437210893815745634705"
                ]
            },
            "id": "PUB-A-269738057-f48f949e",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d88e3522c6dc15a30875f810a2dd830657c482dc",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/Notification.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/d88e3522c6dc15a30875f810a2dd830657c482dc"
    ],
    "spl": "2023-06-01",
    "severity": "Moderate",
    "types": [
        "EoP"
    ]
}