CVE-2024-23710: Android framework sharedUserMaxSdkVersion attribute privilege escalation
Summary
CVE-2024-23710: In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a logic error in the code. Affects platform/frameworks/base across 3 version ranges.
>= 13:0, < 13:2024-04-01
>= 14:0, < 14:2024-04-01
>= 14-next:0, < 14-next:2024-04-01
Fixed in 14-next:2024-04-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android framework is a key component of the Android operating system that provides a set of APIs and tools for developers to build applications. It is responsible for managing various system-level functionalities and providing a platform for app development. The sharedUserMaxSdkVersion attribute is used in Android to specify the maximum SDK version that an app can be shared with. This attribute allows apps to share the same user ID and run in the same process, enabling inter-app communication and resource sharing. However, a vulnerability in the Android framework allows an app to become a privileged app by exploiting the sharedUserMaxSdkVersion attribute.
Vulnerability Detail
The vulnerability exists in the assertPackageWithSharedUserIdIsPrivileged function of the InstallPackageHelper.java file in the Android framework. Due to a logic error in the code, an app can execute arbitrary code as a privileged app, leading to local escalation of privilege. This means that the app can gain elevated privileges without requiring any additional execution privileges or user interaction. The impact of this vulnerability can be severe, as a privileged app has access to sensitive system resources and can perform actions that are restricted to privileged apps only.
How To Fix
Minimum fixed version
14-next:2024-04-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix provided by updating the Android framework to the fixed version.
Conclusion
The Android framework is vulnerable to a privilege escalation vulnerability related to the sharedUserMaxSdkVersion attribute. This vulnerability allows an app to execute arbitrary code as a privileged app, leading to local escalation of privilege. To mitigate this risk, developers should update the Android framework to the fixed version and ensure that their apps are using the updated framework version. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
The Android framework is a key component of the Android operating system that provides a set of APIs and tools for developers to build applications. It manages various system-level functionalities and provides a platform for app development.
The sharedUserMaxSdkVersion attribute is used in Android to specify the maximum SDK version that an app can be shared with. It allows apps to share the same user ID and run in the same process, enabling inter-app communication and resource sharing.
Privilege escalation is the act of gaining elevated privileges or permissions beyond what is normally granted to a user or an app. In the context of this vulnerability, it refers to an app gaining privileged app status and accessing sensitive system resources.
The potential ramifications of this vulnerability include unauthorized access to sensitive user data, unauthorized modification of system settings, and the ability to perform actions restricted to privileged apps.
Developers can mitigate the risk of privilege escalation by updating the Android framework to the fixed version, ensuring that their apps are using the updated framework version.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
