{"id":"ASB-A-223793631","details":"In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-223793631","CVE-2023-35683"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/23d156ed1bed6d2c2b325f0be540d0afca510c49"}],"affected":[{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-09-01"}]}],"versions":["13-next"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/11a3e33800d324ec7e40bd3b717455dd8e4f0d4c"],"severity":"High","spl":"2023-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-223793631.json"}},{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-09-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/b5aadde5f1d3c47562eade2223f7a30729dda53e"],"severity":"High","spl":"2023-09-01","types":["ID"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["29589661527729970920197757447098681201","227676290786395735151124985128560214970","279969880971284412529864377845756430800","133626510894911829191706094865819018408","110616539877835788141470216616498105401","88965750662070752662688070633701222223","276245187349861928585160787886810289883"]},"id":"ASB-A-223793631-c648b5ee","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/b5aadde5f1d3c47562eade2223f7a30729dda53e","target":{"file":"src/com/android/providers/media/util/DatabaseUtils.java"},"deprecated":false},{"id":"ASB-A-223793631-f49d6e6d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/b5aadde5f1d3c47562eade2223f7a30729dda53e","target":{"file":"src/com/android/providers/media/util/DatabaseUtils.java","function":"bindSelection"},"deprecated":false,"digest":{"length":1576,"function_hash":"167780436427771854248856327374794323637"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-223793631.json"}},{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-09-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/31e3d9369d7778ca6258281a0f2d94e5d7c094b5"],"severity":"High","spl":"2023-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-223793631.json"}},{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-09-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2023-09-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/8f07a4f7941c53d96e097c3c840e2f4bc0814b2c","target":{"file":"src/com/android/providers/media/util/DatabaseUtils.java"},"deprecated":false,"digest":{"line_hashes":["29589661527729970920197757447098681201","227676290786395735151124985128560214970","279969880971284412529864377845756430800","133626510894911829191706094865819018408","110616539877835788141470216616498105401","88965750662070752662688070633701222223","276245187349861928585160787886810289883"],"threshold":0.9},"id":"ASB-A-223793631-00b545ee","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"167780436427771854248856327374794323637","length":1576},"id":"ASB-A-223793631-d097bf3d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/8f07a4f7941c53d96e097c3c840e2f4bc0814b2c","target":{"file":"src/com/android/providers/media/util/DatabaseUtils.java","function":"bindSelection"}}],"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/8f07a4f7941c53d96e097c3c840e2f4bc0814b2c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-223793631.json"}},{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-09-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/a48b01f78f28fc642b144c673bfcd12ae78c5a73"],"severity":"High","spl":"2023-09-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-223793631-52d56f81","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/a48b01f78f28fc642b144c673bfcd12ae78c5a73","target":{"file":"src/com/android/providers/media/util/DatabaseUtils.java","function":"bindSelection"},"deprecated":false,"digest":{"length":1576,"function_hash":"167780436427771854248856327374794323637"}},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/a48b01f78f28fc642b144c673bfcd12ae78c5a73","target":{"file":"src/com/android/providers/media/util/DatabaseUtils.java"},"deprecated":false,"digest":{"line_hashes":["29589661527729970920197757447098681201","227676290786395735151124985128560214970","279969880971284412529864377845756430800","133626510894911829191706094865819018408","110616539877835788141470216616498105401","88965750662070752662688070633701222223","276245187349861928585160787886810289883"],"threshold":0.9},"id":"ASB-A-223793631-907778a5","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-223793631.json"}}],"schema_version":"1.9.0"}