CVE-2023-40117: FRP Bypass in Android SettingsProvider
Summary
CVE-2023-40117: In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. Affects platform/frameworks/base across 4 version ranges.
>= 11:0, < 11:2023-10-01
>= 12:0, < 12:2023-10-01
>= 12L:0, < 12L:2023-10-01
>= 13:0, < 13:2023-10-01
Fixed in 11:2023-10-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Android's SettingsProvider is a component of the platform/frameworks/base package that manages system settings for the Android operating system. It provides a centralized interface for accessing and modifying various device settings. The SettingsProvider is responsible for enforcing security policies and permissions related to these settings.
Vulnerability Detail
The vulnerability (CVE-2023-40117) exists in the resetSettingsLocked function of SettingsProvider.java. It allows for a lockscreen bypass by exploiting a permissions bypass. An attacker can leverage this vulnerability to bypass the Factory Reset Protection (FRP) mechanism and gain unauthorized access to the device. This vulnerability does not require any additional execution privileges and can be exploited without user interaction.
How To Fix
Minimum fixed version
11:2023-10-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided fixes to mitigate the risk.
Conclusion
The vulnerability (CVE-2023-40117) in Android's SettingsProvider allows for a lockscreen bypass, enabling unauthorized access to Android devices. It is crucial to apply the provided fixes for the affected packages to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
This vulnerability allows an attacker to bypass the lockscreen and gain unauthorized access to an Android device. It can potentially lead to unauthorized data access, privacy breaches, and other malicious activities.
The vulnerability affects Android versions 11, 12, 12L, and 13.
No, user interaction is not needed for exploiting this vulnerability. An attacker can exploit it without any user involvement.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your Android device is affected by this vulnerability. It provides real-time monitoring and alerts for open-source vulnerabilities in software.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
