Open Source Vulnerability in platform/frameworks/base: Enumerating other users' photos by posting important conversation Notifications with a message sender person
Summary
CVE-2023-40073: In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. Affects platform/frameworks/base across 6 version ranges.
>= 11:0, < 11:2023-12-01
>= 12:0, < 12:2023-12-01
>= 12L:0, < 12L:2023-12-01
>= 13:0, < 13:2023-12-01
>= 14:0, < 14:2023-12-01
>= 14-next:0, < 14-next:2023-12-01
Fixed in 14-next:2023-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package platform/frameworks/base is a part of the Android ecosystem and is responsible for providing the fundamental functionalities and components of the Android operating system. It includes various libraries, APIs, and frameworks that enable the development and execution of Android applications. This package plays a crucial role in the overall functioning and security of the Android platform.
Vulnerability Detail
The vulnerability identified in the platform/frameworks/base package allows for the enumeration of other users' photos by exploiting the handling of important conversation Notifications with a message sender person. This vulnerability arises due to a Confused Deputy issue in the visitUris of Notification.java. An attacker can leverage this vulnerability to gain unauthorized access to media files of other users, leading to local information disclosure. Notably, this vulnerability does not require any additional execution privileges or user interaction for exploitation.
How To Fix
Minimum fixed version
14-next:2023-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
The vulnerability in the platform/frameworks/base package allows for the unauthorized enumeration of other users' photos. It is crucial to promptly update the Android operating system to the latest version, which includes the necessary security patches and fixes. For further assistance and support in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
This vulnerability allows an attacker to access other users' photos, leading to a potential breach of privacy and unauthorized disclosure of sensitive information.
No, this vulnerability can be exploited without any user interaction.
This vulnerability affects Android versions 11, 12, 12L, 13, and 14.
Yes, the Android team has released a fix for this vulnerability. Updating the platform/frameworks/base package to the latest version will address the issue.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, providing valuable insights without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
