CVE-2023-40113: Work Profile Messages app having access to personal messages (1)
Summary
CVE-2023-40113: In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. Affects platform/packages/providers/TelephonyProvider across 4 version ranges.
>= 11:0, < 11:2023-11-01
>= 12:0, < 12:2023-11-01
>= 12L:0, < 12L:2023-11-01
>= 13:0, < 13:2023-11-01
Fixed in 11:2023-11-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The TelephonyProvider package is a component of the Android platform that provides telephony-related functionality, including managing messages. It is responsible for handling message data and ensuring the privacy and security of user communications. However, a vulnerability has been identified in multiple versions of the TelephonyProvider package that allows apps to access cross-user message data without the necessary permission check. This means that the Work Profile Messages app can potentially access personal messages of users, leading to a local information disclosure. The vulnerability does not require any additional execution privileges and can be exploited without user interaction.
Vulnerability Detail
The vulnerability arises due to a missing permission check in the TelephonyProvider package. This allows apps, including the Work Profile Messages app, to access message data of other users. As a result, sensitive personal information can be exposed, compromising user privacy. The impact of this vulnerability is significant as it can lead to the unauthorized access and disclosure of private messages. The vulnerability affects multiple versions of the TelephonyProvider package, starting from Android 11 up to Android 13.
How To Fix
Minimum fixed version
11:2023-11-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround available for this vulnerability. It is necessary to apply the provided fix to the TelephonyProvider package to resolve the issue.
Conclusion
The vulnerability in the TelephonyProvider package allows the Work Profile Messages app to access personal messages of users, leading to a local information disclosure. To mitigate this vulnerability, it is crucial to update the TelephonyProvider package to the fixed version. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/providers/TelephonyProvider →
FAQ
The vulnerability allows the Work Profile Messages app to access personal messages of users, leading to a local information disclosure. This can result in the exposure of sensitive and private communications.
No, user interaction is not needed for exploitation. The vulnerability can be exploited without any additional execution privileges.
The vulnerability affects Android versions 11, 12, 12L, and 13.
No, there are no known workarounds available for this vulnerability. It is necessary to apply the provided fix to the TelephonyProvider package.
To fix this vulnerability, update the TelephonyProvider package to the fixed version provided. This will address the missing permission check and prevent unauthorized access to cross-user message data.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/providers/TelephonyProvider.
