ASB-A-250589026
See a problem?- Import Source
- https://storage.googleapis.com/android-osv/ASB-A-250589026.json
- JSON Data
- https://api.osv.dev/v1/vulns/ASB-A-250589026
- Aliases
-
- A-250589026
- CVE-2023-20960
- Published
- 2023-03-01T00:00:00Z
- Modified
- 2024-08-07T19:29:38.505201Z
- Summary
- Potential Intent Redirection issue in SettingsActivity of Settings app
- Details
-
In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
- References
-
- https://source.android.com/security/bulletin/2023-03-01
- https://android.googlesource.com/platform/packages/apps/Settings/+/23412ad94a4f74d93d9daf3271d4c013c6fb8e58
- https://android.googlesource.com/platform/packages/apps/Settings/+/f964b68feee28f29e284221cd9c902a8abbb2dc7
- https://android.googlesource.com/platform/packages/apps/Settings/+/95ff0752446fa7da96e60f1aa1bdacf104907764
Affected packages
Android / platform/packages/apps/Settings
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"length": 2539.0,
"function_hash": "339421717270082967262275541619017842136"
},
"id": "ASB-A-250589026-4653285b",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/1a49146508c82f719a8f500b1b7d50d90d1f57cb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "launchDeepLinkIntentToRight"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"19889703709643230488778874176412450130",
"58132085359130408064566981382968716564",
"158140440155223958624199652509803424124",
"240446787160798014109067111765586555296",
"40634345392637169147082143391141836917",
"243079669508775449528771644024702410519",
"46125533419279030785052189527591963180",
"155453018098868068692857679935943795376",
"208391914246697731056143312329637714581",
"180315719519565156681574041963180082389",
"303286173403469396541551464862290456344",
"161517627858608494507889177611303110769",
"241332110960668271551896344741156299646",
"99757496631693121228548180803939082625",
"245156924449676098785869003413302747187"
]
},
"id": "ASB-A-250589026-4dc87418",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/c3141fa91147fc0d9128f11071bd646d049f4b5a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 1923.0,
"function_hash": "24380505762495570664279962281205100398"
},
"id": "ASB-A-250589026-54d6a026",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/c3141fa91147fc0d9128f11071bd646d049f4b5a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "launchDeepLinkIntentToRight"
},
"signature_type": "Function"
},
{
"digest": {
"length": 776.0,
"function_hash": "179007188764865184077512315624074331826"
},
"id": "ASB-A-250589026-67f2644d",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/0c18e8990c8cff93798fca7efb4fd06beb6611bd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "hasPrivilegedAccess"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"279001664620559821039327681521744713323",
"121848592500763049162629720978306299042",
"266681223894601969669553490837426827867",
"22501573967827479589136736356387917634",
"73362776874150102349739150773389548885",
"166675980660359806194381639092935511269",
"161517627858608494507889177611303110769",
"97122821754810891388058054792915903440",
"137331323032868630210459966031857916047",
"325650289632194185458797874617594052508",
"107115511119344962959782955780790120586",
"218175375021224294036182551920933626664",
"111617273830044295002543004954162935568",
"323735617409954472858062057115385234496",
"262646873950258666471571453293369551395",
"102600391902106702682419807621370759860",
"149149902581443407792017138648236229797",
"19478771865707359211088310935574037641",
"250357508606991189553214358717752531411",
"179678239652480956958923969440302926473",
"223274336014301246156429891483789781796",
"285080588398437311645964231559474726463"
]
},
"id": "ASB-A-250589026-6ec29ad2",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/0c18e8990c8cff93798fca7efb4fd06beb6611bd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 2454.0,
"function_hash": "240452586968966900727690033827188499916"
},
"id": "ASB-A-250589026-87b29671",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/0c18e8990c8cff93798fca7efb4fd06beb6611bd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "launchDeepLinkIntentToRight"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"96853627072202321601979615406377984092",
"129637261089028594323390862762482315262",
"158974529263604796097333864534803461755",
"317202621517561104950015159086261898572",
"215351192949000577678557906525404601221",
"139883733641404800436845491007955882674",
"35529274653875053700670340285732519952",
"134185449990923178857248208953814102684",
"55482394578634608527976766338064574937",
"297935819184373740089850799222408589935",
"339274332969742977069216660171244180037",
"219456573291838433529742558373648438725",
"305813723206918506200606996142269263314",
"243284249451979974689967824885550164285",
"332650477830802640915889058868925074882",
"169697112848468621755471600210040999006",
"111815228042114161374480079867852065288",
"199754703728896267472723952964689091990",
"152519958985905396308246001784585535083",
"213364364349878563343713287693281805444",
"158643977296960506799112394821889109345",
"117217185018086354671765608732309492961",
"180718939313278496677208509002453749131"
]
},
"id": "ASB-A-250589026-c368295d",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/1a49146508c82f719a8f500b1b7d50d90d1f57cb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java"
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/c3141fa91147fc0d9128f11071bd646d049f4b5a",
"https://android.googlesource.com/platform/packages/apps/Settings/+/1a49146508c82f719a8f500b1b7d50d90d1f57cb",
"https://android.googlesource.com/platform/packages/apps/Settings/+/0c18e8990c8cff93798fca7efb4fd06beb6611bd"
],
"spl": "2023-03-01",
"severity": "High",
"types": [
"EoP"
]
}
Android / platform/packages/apps/Settings
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"length": 776.0,
"function_hash": "179007188764865184077512315624074331826"
},
"id": "ASB-A-250589026-019df5cf",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/17cd85b946a71a3afaa569da326ac029f28c7794",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "hasPrivilegedAccess"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"39551354632991716986533204900880133235",
"46352627204329243714218300273680632049",
"71171198155687323734198601282655784781",
"241663556783717717296030283401253021059",
"215351192949000577678557906525404601221",
"139883733641404800436845491007955882674",
"35529274653875053700670340285732519952",
"134185449990923178857248208953814102684",
"55482394578634608527976766338064574937",
"297935819184373740089850799222408589935",
"339274332969742977069216660171244180037",
"219456573291838433529742558373648438725",
"305813723206918506200606996142269263314",
"243284249451979974689967824885550164285",
"332650477830802640915889058868925074882",
"169697112848468621755471600210040999006",
"111815228042114161374480079867852065288",
"199754703728896267472723952964689091990",
"152519958985905396308246001784585535083",
"213364364349878563343713287693281805444",
"130356810215943214823021689997587792122",
"51885661069432670765141214962956676881",
"180718939313278496677208509002453749131"
]
},
"id": "ASB-A-250589026-1865b5b8",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/960c96474dcf17ee7f306e1496f5fab223b2500e",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"279001664620559821039327681521744713323",
"121848592500763049162629720978306299042",
"266681223894601969669553490837426827867",
"22501573967827479589136736356387917634",
"178147690360388402603895373963871279820",
"129832155868984039471414466489221904381",
"168868138148469505122814965986863330022",
"92624326139116946529668164688011475632",
"196310943967410537879892291701272256952",
"325650289632194185458797874617594052508",
"107115511119344962959782955780790120586",
"218175375021224294036182551920933626664",
"111617273830044295002543004954162935568",
"323735617409954472858062057115385234496",
"262646873950258666471571453293369551395",
"102600391902106702682419807621370759860",
"149149902581443407792017138648236229797",
"19478771865707359211088310935574037641",
"250357508606991189553214358717752531411",
"179678239652480956958923969440302926473",
"223274336014301246156429891483789781796",
"285080588398437311645964231559474726463"
]
},
"id": "ASB-A-250589026-1d1e47b5",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/17cd85b946a71a3afaa569da326ac029f28c7794",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 2483.0,
"function_hash": "267239687638447741246746769882060974789"
},
"id": "ASB-A-250589026-b3d94c3d",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/960c96474dcf17ee7f306e1496f5fab223b2500e",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "launchDeepLinkIntentToRight"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"19889703709643230488778874176412450130",
"65379301213402217192144709545161134569",
"99072443548216301919171432832858765860",
"336986885691285784681492164858773842786",
"317772497578446096364035886651506983707",
"81322631065583234041859669015948942267",
"269672235383604724213261202439668286628",
"40634345392637169147082143391141836917",
"261123763270713304772223437745797850351",
"260213371996524025825568459749116062943",
"70500076515026072888506738331401011190",
"208391914246697731056143312329637714581",
"180315719519565156681574041963180082389",
"303286173403469396541551464862290456344",
"83454143584368830700814898929441543052",
"232433288306299403488564828328464688880",
"222068756629326058536898525545910010934",
"245156924449676098785869003413302747187"
]
},
"id": "ASB-A-250589026-c570cc7f",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/fef9b97498b66d3e069feb2836701118bc41a63f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 1867.0,
"function_hash": "181591751518348970939000475911533666535"
},
"id": "ASB-A-250589026-cbc478d6",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/fef9b97498b66d3e069feb2836701118bc41a63f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "launchDeepLinkIntentToRight"
},
"signature_type": "Function"
},
{
"digest": {
"length": 2398.0,
"function_hash": "46098711828778360950723011065517612322"
},
"id": "ASB-A-250589026-dfcec170",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/17cd85b946a71a3afaa569da326ac029f28c7794",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "launchDeepLinkIntentToRight"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/fef9b97498b66d3e069feb2836701118bc41a63f",
"https://android.googlesource.com/platform/packages/apps/Settings/+/960c96474dcf17ee7f306e1496f5fab223b2500e",
"https://android.googlesource.com/platform/packages/apps/Settings/+/17cd85b946a71a3afaa569da326ac029f28c7794"
],
"spl": "2023-03-01",
"severity": "High",
"types": [
"EoP"
]
}
Android / platform/packages/apps/Settings
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"length": 2542.0,
"function_hash": "134543286869365308168318520896259825410"
},
"id": "ASB-A-250589026-058a6362",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/0f7f913281fff39d533b4ae325ba2fd11f0ae204",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "launchDeepLinkIntentToRight"
},
"signature_type": "Function"
},
{
"digest": {
"length": 2011.0,
"function_hash": "10088607538663335582578413175090232814"
},
"id": "ASB-A-250589026-10782d60",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/434c8934c4aa416931a66626016d94712e47d617",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "launchDeepLinkIntentToRight"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"279001664620559821039327681521744713323",
"121848592500763049162629720978306299042",
"266681223894601969669553490837426827867",
"22501573967827479589136736356387917634",
"178147690360388402603895373963871279820",
"129832155868984039471414466489221904381",
"168868138148469505122814965986863330022",
"97122821754810891388058054792915903440",
"137331323032868630210459966031857916047",
"325650289632194185458797874617594052508",
"107115511119344962959782955780790120586",
"218175375021224294036182551920933626664",
"111617273830044295002543004954162935568",
"323735617409954472858062057115385234496",
"262646873950258666471571453293369551395",
"102600391902106702682419807621370759860",
"149149902581443407792017138648236229797",
"19478771865707359211088310935574037641",
"250357508606991189553214358717752531411",
"179678239652480956958923969440302926473",
"223274336014301246156429891483789781796",
"285080588398437311645964231559474726463"
]
},
"id": "ASB-A-250589026-1f1b55c0",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/0f7f913281fff39d533b4ae325ba2fd11f0ae204",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 776.0,
"function_hash": "179007188764865184077512315624074331826"
},
"id": "ASB-A-250589026-64b47b43",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/0f7f913281fff39d533b4ae325ba2fd11f0ae204",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "hasPrivilegedAccess"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"96853627072202321601979615406377984092",
"129637261089028594323390862762482315262",
"158974529263604796097333864534803461755",
"317202621517561104950015159086261898572",
"215351192949000577678557906525404601221",
"139883733641404800436845491007955882674",
"35529274653875053700670340285732519952",
"134185449990923178857248208953814102684",
"55482394578634608527976766338064574937",
"297935819184373740089850799222408589935",
"339274332969742977069216660171244180037",
"219456573291838433529742558373648438725",
"305813723206918506200606996142269263314",
"243284249451979974689967824885550164285",
"332650477830802640915889058868925074882",
"169697112848468621755471600210040999006",
"111815228042114161374480079867852065288",
"199754703728896267472723952964689091990",
"152519958985905396308246001784585535083",
"213364364349878563343713287693281805444",
"158643977296960506799112394821889109345",
"117217185018086354671765608732309492961",
"180718939313278496677208509002453749131"
]
},
"id": "ASB-A-250589026-85f1098c",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/04989073225435ffdbd04f795dcc99c269fa35d5",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 2627.0,
"function_hash": "173955643565711437913128154602182163243"
},
"id": "ASB-A-250589026-a807dc12",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/04989073225435ffdbd04f795dcc99c269fa35d5",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java",
"function": "launchDeepLinkIntentToRight"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"19889703709643230488778874176412450130",
"58132085359130408064566981382968716564",
"158140440155223958624199652509803424124",
"240446787160798014109067111765586555296",
"333508925477177995037790987873290650351",
"31436569120441341541425603011400885872",
"267017598387022532936727623388492570071",
"40634345392637169147082143391141836917",
"261123763270713304772223437745797850351",
"260213371996524025825568459749116062943",
"70500076515026072888506738331401011190",
"208391914246697731056143312329637714581",
"180315719519565156681574041963180082389",
"303286173403469396541551464862290456344",
"161517627858608494507889177611303110769",
"241332110960668271551896344741156299646",
"99757496631693121228548180803939082625",
"245156924449676098785869003413302747187"
]
},
"id": "ASB-A-250589026-f4e77545",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/434c8934c4aa416931a66626016d94712e47d617",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "src/com/android/settings/homepage/SettingsHomepageActivity.java"
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/434c8934c4aa416931a66626016d94712e47d617",
"https://android.googlesource.com/platform/packages/apps/Settings/+/04989073225435ffdbd04f795dcc99c269fa35d5",
"https://android.googlesource.com/platform/packages/apps/Settings/+/0f7f913281fff39d533b4ae325ba2fd11f0ae204"
],
"spl": "2023-03-01",
"severity": "High",
"types": [
"EoP"
]
}