CVE-2024-0021: Notification listener services enabled in work profile via CompanionDeviceManager#requestNotificationAccess
Summary
CVE-2024-0021: In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to enable notification listener services due to a logic error in the code. Affects platform/packages/apps/Settings across 3 version ranges.
>= 13:0, < 13:2024-01-01
>= 14:0, < 14:2024-01-01
>= 14-next:0, < 14-next:2024-01-01
Fixed in 14-next:2024-01-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/packages/apps/Settings in the Android ecosystem. This package is responsible for managing various settings on an Android device. It provides a user interface for configuring system preferences, including network, display, sound, and notification settings. The package is an integral part of the Android operating system and is present on all Android devices.
Vulnerability Detail
The vulnerability exists in the onCreate method of NotificationAccessConfirmationActivity.java within the platform/packages/apps/Settings package. Due to a logic error in the code, an app in the work profile can exploit this vulnerability to enable notification listener services. This can lead to a local escalation of privilege without requiring additional execution privileges. However, user interaction is necessary for the exploitation of this vulnerability. The impact of this vulnerability is a potential compromise of the notification listener services in the work profile, allowing unauthorized access to sensitive information.
How To Fix
Minimum fixed version
14-next:2024-01-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the platform/packages/apps/Settings package in the Android ecosystem is vulnerable to a logic error that enables notification listener services in the work profile. This vulnerability can lead to a local escalation of privilege. It is recommended to update the package to the fixed version and exercise caution when granting notification listener access to apps in the work profile. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/apps/Settings →
FAQ
The impact of this vulnerability is a potential compromise of the notification listener services in the work profile, allowing unauthorized access to sensitive information.
Yes, user interaction is needed for the exploitation of this vulnerability.
Android versions 13 and 14 are affected by this vulnerability.
Yes, a fix for this vulnerability is available in the platform/packages/apps/Settings package. It is recommended to update to the fixed version.
There are no known instances of this vulnerability being exploited at the moment.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/apps/Settings.
