Arbitrary Activity Launch in AccountManagerService.checkKeyIntentParceledCorrectly
Summary
CVE-2023-45777: In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel Mismatch. Affects platform/frameworks/base across 3 version ranges.
>= 13:0, < 13:2023-12-01
>= 14:0, < 14:2023-12-01
>= 14-next:0, < 14-next:2023-12-01
Fixed in 14-next:2023-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The AccountManagerService is a component of the Android platform's base framework. It provides account management functionality, allowing applications to securely store and retrieve user credentials. The service is responsible for handling requests related to account authentication, adding and removing accounts, and managing account credentials. It plays a crucial role in ensuring the security and integrity of user accounts on Android devices.
Vulnerability Detail
The vulnerability exists in the checkKeyIntentParceledCorrectly method of the AccountManagerService. It arises due to a Parcel Mismatch, which allows an attacker to launch arbitrary activities using system privileges. By exploiting this vulnerability, an attacker can escalate their privileges locally without requiring any additional execution privileges. This vulnerability does not rely on user interaction, making it particularly dangerous. If successfully exploited, it could lead to unauthorized access to sensitive user data and compromise the overall security of the Android device.
How To Fix
Minimum fixed version
14-next:2023-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in AccountManagerService.checkKeyIntentParceledCorrectly poses a significant risk to the security of Android devices. It allows for the unauthorized launch of activities with system privileges, potentially leading to the escalation of privileges and unauthorized access to user data. It is crucial to apply the provided fixes to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
AccountManagerService is a component of the Android platform's base framework that provides account management functionality.
This vulnerability allows an attacker to launch arbitrary activities using system privileges, potentially leading to local escalation of privilege and unauthorized access to user data.
No, user interaction is not needed for exploitation of this vulnerability.
The vulnerability was introduced in Android 13.0 and affects all subsequent versions up to Android 14.0.
You can find more information about this vulnerability in the Open Source Vulnerability database. The vulnerability ID is ASB-A-299930871.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
