CVE-2024-0043: NotificationListenerService Grant in Work Profile via setDeviceProfile#AssociationRequest.DEVICE_PROFILE_WATCH
Summary
CVE-2024-0043: In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the code. Affects platform/packages/modules/Permission across 5 version ranges.
>= 12:0, < 12:2024-05-01
>= 12L:0, < 12L:2024-05-01
>= 13:0, < 13:2024-05-01
>= 14:0, < 14:2024-05-01
>= 14-next:0, < 14-next:2024-05-01
Fixed in 14-next:2024-05-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is 'platform/packages/modules/Permission' in the Android ecosystem. This package is responsible for managing permissions in the Android operating system. It provides functionality for granting and revoking permissions to apps. The vulnerability affects versions 12, 12L, 13, and 14 of the Android platform. The package is vulnerable to a logic error that enables a notification listener grant to an app running in the work profile. This vulnerability requires user interaction for exploitation.
Vulnerability Detail
The vulnerability arises due to a logic error in the code of 'platform/packages/modules/Permission'. It allows an app running in the work profile to be granted notification listener permissions, leading to a local escalation of privilege. This means that an attacker with access to the work profile can gain elevated privileges without requiring any additional execution privileges. The impact of this vulnerability is significant as it can potentially allow an attacker to access sensitive user information or perform unauthorized actions within the work profile.
How To Fix
Minimum fixed version
14-next:2024-05-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The 'platform/packages/modules/Permission' package in the Android ecosystem is vulnerable to a logic error that enables a notification listener grant in the work profile. This can lead to a local escalation of privilege without requiring additional execution privileges. It is recommended to update to the latest version of the package to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/modules/Permission →
FAQ
The impact of this vulnerability is a local escalation of privilege in the work profile. An attacker with access to the work profile can gain elevated privileges without requiring any additional execution privileges.
Yes, user interaction is needed for exploitation of this vulnerability.
Versions 12, 12L, 13, and 14 of the Android platform are affected by this vulnerability.
'platform/packages/modules/Permission' package is responsible for managing permissions in the Android operating system. It provides functionality for granting and revoking permissions to apps.
To fix this vulnerability, update the 'platform/packages/modules/Permission' package to the latest version available.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Permission.
