ASB-A-270152142

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-270152142.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-270152142
Aliases
  • A-270152142
  • CVE-2023-35682
Published
2023-09-01T00:00:00Z
Modified
2024-08-07T19:29:07.019707Z
Summary
Ability to start arbitrary components in Launcher3 via Legacy Shortcut
Details

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android / platform/packages/apps/Launcher3

Package

Name
platform/packages/apps/Launcher3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2023-09-01

Affected versions

Other

11

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "16712015744838485042592019300562064227",
                    "31121227761605580680359732024722092718",
                    "262702927862700480734688122387108827107",
                    "124378739837206776677664547034741575928"
                ]
            },
            "id": "ASB-A-270152142-2b13f694",
            "source": "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/launcher3/util/PackageManagerHelper.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 650.0,
                "function_hash": "45317721139558193179461422572059100534"
            },
            "id": "ASB-A-270152142-ed54c94d",
            "source": "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/launcher3/util/PackageManagerHelper.java",
                "function": "hasPermissionForActivity"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442"
    ],
    "spl": "2023-09-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/packages/apps/Launcher3

Package

Name
platform/packages/apps/Launcher3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2023-09-01

Affected versions

Other

12

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "16712015744838485042592019300562064227",
                    "31121227761605580680359732024722092718",
                    "262702927862700480734688122387108827107",
                    "124378739837206776677664547034741575928"
                ]
            },
            "id": "ASB-A-270152142-849c9156",
            "source": "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/launcher3/util/PackageManagerHelper.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 650.0,
                "function_hash": "45317721139558193179461422572059100534"
            },
            "id": "ASB-A-270152142-912e11fb",
            "source": "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/launcher3/util/PackageManagerHelper.java",
                "function": "hasPermissionForActivity"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442"
    ],
    "spl": "2023-09-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/packages/apps/Launcher3

Package

Name
platform/packages/apps/Launcher3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2023-09-01

Affected versions

Other

12L

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "16712015744838485042592019300562064227",
                    "31121227761605580680359732024722092718",
                    "262702927862700480734688122387108827107",
                    "124378739837206776677664547034741575928"
                ]
            },
            "id": "ASB-A-270152142-7838c1ba",
            "source": "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/launcher3/util/PackageManagerHelper.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 650.0,
                "function_hash": "45317721139558193179461422572059100534"
            },
            "id": "ASB-A-270152142-828afd9b",
            "source": "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/launcher3/util/PackageManagerHelper.java",
                "function": "hasPermissionForActivity"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442"
    ],
    "spl": "2023-09-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Android / platform/packages/apps/Launcher3

Package

Name
platform/packages/apps/Launcher3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2023-09-01

Affected versions

Other

13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "16712015744838485042592019300562064227",
                    "31121227761605580680359732024722092718",
                    "262702927862700480734688122387108827107",
                    "124378739837206776677664547034741575928"
                ]
            },
            "id": "ASB-A-270152142-25edf70f",
            "source": "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/launcher3/util/PackageManagerHelper.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 650.0,
                "function_hash": "45317721139558193179461422572059100534"
            },
            "id": "ASB-A-270152142-89afff17",
            "source": "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/launcher3/util/PackageManagerHelper.java",
                "function": "hasPermissionForActivity"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Launcher3/+/c53818a16b4322a823497726ac7e7a44501b4442"
    ],
    "spl": "2023-09-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}