ASB-A-234442700

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-234442700.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-234442700

Aliases

A-234442700
CVE-2023-20929

Published

2023-03-01T00:00:00Z

Modified

2024-08-07T19:29:25.767146Z

Summary

[Android 13 Beta] Fast Pair - Information disclosure of Bluetooth Model ID and MAC Address

Details

In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted broadcast intent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/modules/Connectivity

Package

Name: platform/packages/modules/Connectivity

Affected ranges

Type: ECOSYSTEM
Events: Introduced

13-next:0

Fixed

13-next:2023-03-01

Affected versions

Other

13-next

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "328397260051996227135759261611843328454",
                    "129359633994315351973004114942235482351",
                    "42339847672469012809926555121913465245"
                ]
            },
            "id": "ASB-A-234442700-39ce7275",
            "source": "https://android.googlesource.com/platform/packages/modules/Connectivity/+/fdc92430972a9bff3ff209473343a1f87105dfb2",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "nearby/halfsheet/src/com/android/nearby/halfsheet/utils/BroadcastUtils.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "12788665894686877267506730894714524517",
                    "195588258138639578094767316417063403974",
                    "339716937456861031431965951494761331208",
                    "182449640670693133972346222686709542026",
                    "235406266822216302882684603830361310447"
                ]
            },
            "id": "ASB-A-234442700-6058ac53",
            "source": "https://android.googlesource.com/platform/packages/modules/Connectivity/+/fdc92430972a9bff3ff209473343a1f87105dfb2",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "nearby/halfsheet/src/com/android/nearby/halfsheet/HalfSheetActivity.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 809.0,
                "function_hash": "327631697207629074425264569555747175604"
            },
            "id": "ASB-A-234442700-d63c7995",
            "source": "https://android.googlesource.com/platform/packages/modules/Connectivity/+/fdc92430972a9bff3ff209473343a1f87105dfb2",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "nearby/halfsheet/src/com/android/nearby/halfsheet/HalfSheetActivity.java",
                "function": "sendHalfSheetCancelBroadcast"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Connectivity/+/fdc92430972a9bff3ff209473343a1f87105dfb2"
    ],
    "spl": "2023-03-01",
    "severity": "High",
    "types": [
        "ID"
    ]
}