Important conversation messages could leak to another user profile due to incorrect request of pin people space widget by SystemUI in platform/frameworks/base
Summary
CVE-2023-40098: In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. Affects platform/frameworks/base across 5 version ranges.
>= 12:0, < 12:2023-12-01
>= 12L:0, < 12L:2023-12-01
>= 13:0, < 13:2023-12-01
>= 14:0, < 14:2023-12-01
>= 14-next:0, < 14-next:2023-12-01
Fixed in 14-next:2023-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The platform/frameworks/base package is a fundamental component of the Android operating system. It provides the core functionalities and libraries that support the Android framework. This package includes various modules and libraries that handle essential system operations, such as managing user interfaces, handling notifications, and providing system services. The vulnerability described in this report affects the package's handling of pin people space widget requests by SystemUI.
Vulnerability Detail
The vulnerability arises from a logic error in the code of NotificationConversationInfo.java. Specifically, in the mOnDone function, there is a flaw that allows potential access to app notification data of another user. This means that an attacker could retrieve important conversation messages from another user's profile. The vulnerability does not require any additional execution privileges and can be exploited without user interaction. The impact of this vulnerability is local information disclosure, which could compromise user privacy and confidentiality.
How To Fix
Minimum fixed version
14-next:2023-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is recommended to follow the fix provided by the Android Open Source Project.
Conclusion
In conclusion, the vulnerability in the platform/frameworks/base package allows for the potential leakage of important conversation messages to another user profile. This can result in local information disclosure and compromise user privacy. It is crucial for developers to apply the provided fix from the Android Open Source Project to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
The impact of this vulnerability is local information disclosure, which could lead to important conversation messages being leaked to another user profile.
No, this vulnerability can be exploited without user interaction.
No, no additional execution privileges are required to exploit this vulnerability.
Yes, a fix has been provided by the Android Open Source Project. It is recommended to update the affected package to the latest version that includes this fix.
You can find more information about this vulnerability in the Android Open Source Vulnerability database. The source for this vulnerability report can be accessed at: https://storage.googleapis.com/android-osv/ASB-A-288896269.json
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
