CVE-2022-20004: Open SliceManagerService Access
Summary
CVE-2022-20004: In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. Affects platform/frameworks/base across 4 version ranges.
>= 10:0, < 10:2022-05-01
>= 11:0, < 11:2022-05-01
>= 12:0, < 12:2022-05-01
>= 12L:0, < 12L:2022-05-01
Fixed in 10:2022-05-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/frameworks/base in the Android ecosystem. This package is responsible for providing the fundamental functionality and framework for the Android operating system. It includes various components and services that enable the execution of applications and the management of system resources. One of these components is SliceManagerService, which allows apps to interact with slice providers installed on the device. Slices are UI components that display app content and actions in a concise and interactive manner. They can be used to provide quick access to app features and information. However, due to a vulnerability in SliceManagerService, apps can gain access to all slice providers on the device without requiring any permission.
Vulnerability Detail
The vulnerability (CVE-2022-20004) originates from improper input validation in the checkSlicePermission function of SliceManagerService.java. This allows apps to access any slice URI, leading to a local escalation of privilege. The exploitation of this vulnerability does not require any additional execution privileges or user interaction. An attacker can leverage this vulnerability to gain unauthorized access to sensitive information or perform malicious actions through the exposed slice providers.
How To Fix
Minimum fixed version
10:2022-05-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, developers can consider implementing additional input validation or access control mechanisms within their own apps to mitigate the risk of unauthorized access to slice providers.
Conclusion
The vulnerability (CVE-2022-20004) in the platform/frameworks/base package of the Android operating system allows apps to gain unauthorized access to all slice providers on the device. This can lead to a local escalation of privilege and potential misuse of sensitive information or malicious actions. Developers should update to a fixed version of the package to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
SliceManagerService is a component in the platform/frameworks/base package of the Android operating system. It allows apps to interact with slice providers installed on the device, enabling the display of app content and actions in a concise and interactive manner.
Slice providers are components that provide data and actions for slices. Slices are UI components that display app content and actions in a concise and interactive manner. They can be used to provide quick access to app features and information.
The vulnerability allows apps to gain unauthorized access to all slice providers on the device without requiring any permission. This can lead to a local escalation of privilege, enabling attackers to access sensitive information or perform malicious actions through the exposed slice providers.
No, user interaction is not needed for exploitation of this vulnerability. An attacker can leverage the vulnerability to gain unauthorized access to slice providers without any additional execution privileges or user involvement.
Developers need to update the platform/frameworks/base package to a version that includes the necessary fixes. The fix for this vulnerability was implemented in versions 10, 11, 12, and 12L of the Android operating system. By updating to a fixed version, the improper input validation in SliceManagerService.java will be corrected, preventing unauthorized access to slice providers.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
