CVE-2023-20921: Android AccessibilityManagerService Logic Error Privilege Escalation
Summary
CVE-2023-20921: In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility services due to a logic error in the code. Affects platform/frameworks/base across 5 version ranges.
>= 10:0, < 10:2023-01-01
>= 11:0, < 11:2023-01-01
>= 12:0, < 12:2023-01-01
>= 12L:0, < 12L:2023-01-01
>= 13:0, < 13:2023-01-01
Fixed in 10:2023-01-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android AccessibilityManagerService is responsible for managing accessibility services on the Android platform. It allows users with disabilities to interact with their devices more easily. Accessibility services have the ability to perform actions and retrieve information across different apps, making them a critical component of the Android accessibility framework.
Vulnerability Detail
The vulnerability (CVE-2023-20921) exists in the onPackageRemoved function of AccessibilityManagerService.java. Due to a logic error in the code, there is a possibility for automatic granting of accessibility services. This can lead to a local escalation of privilege, allowing attackers to gain sensitive permissions without requiring additional execution privileges. Exploitation of this vulnerability requires user interaction.
How To Fix
Minimum fixed version
10:2023-01-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The Android AccessibilityManagerService vulnerability (CVE-2023-20921) poses a significant risk as it allows for automatic granting of accessibility services, leading to a local escalation of privilege. It is crucial to apply the provided fix from the Android Open Source Project to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
The vulnerability allows attackers to automatically grant accessibility services, leading to a local escalation of privilege. This can potentially result in unauthorized access to sensitive user data and control over the affected device.
The vulnerability was introduced in Android 10 and affects all subsequent versions up to Android 13.
Yes, user interaction is needed for the vulnerability to be exploited.
There are no known instances of this vulnerability being exploited in the wild.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
