{"id":"ASB-A-252762941","details":"In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-252762941","CVE-2023-21083"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Telecomm/+/8b32e15214910a310e5f7391e739ac1043af3bf9"}],"affected":[{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-04-01"}]}],"versions":["13-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"],"severity":"High","spl":"2023-04-01","types":["ID"],"vanir_signatures":[{"digest":{"function_hash":"338648352086149527100499374510372632256","length":309},"id":"ASB-A-252762941-0491c532","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java","function":"onServiceDisconnected"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97","target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java","function":"onServiceDisconnected"},"deprecated":false,"digest":{"function_hash":"120562527713875321562491172127154338355","length":135},"id":"ASB-A-252762941-389f8d19","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97","target":{"function":"onBindingDied","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"deprecated":false,"digest":{"function_hash":"336258356887302573331064480651611557665","length":127},"id":"ASB-A-252762941-5e0d6fd6","signature_type":"Function"},{"target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["93138640784470167329690777748229323496","63659522462177018524502730833184707231","221352119823462935609529477489016598561","25006135446868165074748325266048463470","317718284322286336306459607661067067600","46883327502752481797982597445200861609","22267128855893681361825919778626530847","150664494464330869492374344664841387753","233455445762780446044602025550781883204"]},"id":"ASB-A-252762941-65b2c755","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"},{"id":"ASB-A-252762941-a6de4bd1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97","target":{"function":"bindAndGetCallIdentification","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"deprecated":false,"digest":{"function_hash":"209371112732447835114921646363933542613","length":1763}},{"deprecated":false,"digest":{"line_hashes":["50597268355645420433777563493224433987","248425411295318334669297501175840080626","204579555969700246112803004237674141628","108473673675401684701075550158319777465"],"threshold":0.9},"id":"ASB-A-252762941-d6991d9f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-04-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","spl":"2023-04-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"length":135,"function_hash":"120562527713875321562491172127154338355"},"id":"ASB-A-252762941-ae4eff45","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java","function":"onBindingDied"},"deprecated":false,"digest":{"function_hash":"336258356887302573331064480651611557665","length":127},"id":"ASB-A-252762941-b1d1468d","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"deprecated":false,"digest":{"line_hashes":["93138640784470167329690777748229323496","63659522462177018524502730833184707231","221352119823462935609529477489016598561","25006135446868165074748325266048463470","317718284322286336306459607661067067600","46883327502752481797982597445200861609","22267128855893681361825919778626530847","150664494464330869492374344664841387753","233455445762780446044602025550781883204"],"threshold":0.9},"id":"ASB-A-252762941-b768e05b","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"function":"bindAndGetCallIdentification","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"deprecated":false,"digest":{"function_hash":"308477138216609990425240453918711753581","length":1763},"id":"ASB-A-252762941-c552d493","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["50597268355645420433777563493224433987","248425411295318334669297501175840080626","204579555969700246112803004237674141628","108473673675401684701075550158319777465"]},"id":"ASB-A-252762941-d6e83e36"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java","function":"onServiceDisconnected"},"deprecated":false,"digest":{"function_hash":"338648352086149527100499374510372632256","length":309},"id":"ASB-A-252762941-ee735b9e"}],"fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-04-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2023-04-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"deprecated":false,"digest":{"function_hash":"120562527713875321562491172127154338355","length":135},"id":"ASB-A-252762941-06e8ce0d","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java","function":"onBindingDied"},"deprecated":false,"digest":{"function_hash":"336258356887302573331064480651611557665","length":127},"id":"ASB-A-252762941-14b9ec38"},{"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java","function":"onServiceDisconnected"},"deprecated":false,"digest":{"function_hash":"338648352086149527100499374510372632256","length":309},"id":"ASB-A-252762941-19343a41","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["50597268355645420433777563493224433987","248425411295318334669297501175840080626","204579555969700246112803004237674141628","108473673675401684701075550158319777465"]},"id":"ASB-A-252762941-24a2a90e","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-252762941-6d5800cd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"deprecated":false,"digest":{"line_hashes":["93138640784470167329690777748229323496","63659522462177018524502730833184707231","221352119823462935609529477489016598561","25006135446868165074748325266048463470","317718284322286336306459607661067067600","46883327502752481797982597445200861609","22267128855893681361825919778626530847","150664494464330869492374344664841387753","233455445762780446044602025550781883204"],"threshold":0.9}},{"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java","function":"bindAndGetCallIdentification"},"deprecated":false,"digest":{"length":1763,"function_hash":"308477138216609990425240453918711753581"},"id":"ASB-A-252762941-db51ad2d","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-04-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","spl":"2023-04-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-252762941-668b09ba","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"deprecated":false,"digest":{"line_hashes":["50597268355645420433777563493224433987","248425411295318334669297501175840080626","204579555969700246112803004237674141628","108473673675401684701075550158319777465"],"threshold":0.9}},{"id":"ASB-A-252762941-8a2e2ff0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"deprecated":false,"digest":{"line_hashes":["93138640784470167329690777748229323496","63659522462177018524502730833184707231","221352119823462935609529477489016598561","25006135446868165074748325266048463470","317718284322286336306459607661067067600","46883327502752481797982597445200861609","22267128855893681361825919778626530847","150664494464330869492374344664841387753","233455445762780446044602025550781883204"],"threshold":0.9}},{"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java","function":"onServiceDisconnected"},"deprecated":false,"digest":{"length":135,"function_hash":"120562527713875321562491172127154338355"},"id":"ASB-A-252762941-a1b2f09e","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"function":"onBindingDied","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"deprecated":false,"digest":{"function_hash":"336258356887302573331064480651611557665","length":127},"id":"ASB-A-252762941-f2ea59ce"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"function":"bindAndGetCallIdentification","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"deprecated":false,"digest":{"function_hash":"308477138216609990425240453918711753581","length":1763},"id":"ASB-A-252762941-f79e24bc"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"deprecated":false,"digest":{"function_hash":"338648352086149527100499374510372632256","length":309},"id":"ASB-A-252762941-fd7572ba","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-04-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-04-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["93138640784470167329690777748229323496","63659522462177018524502730833184707231","221352119823462935609529477489016598561","25006135446868165074748325266048463470","317718284322286336306459607661067067600","46883327502752481797982597445200861609","22267128855893681361825919778626530847","150664494464330869492374344664841387753","233455445762780446044602025550781883204"]},"id":"ASB-A-252762941-27c490f5","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java","function":"onServiceDisconnected"},"deprecated":false,"digest":{"function_hash":"120562527713875321562491172127154338355","length":135},"id":"ASB-A-252762941-652c0cf5"},{"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"deprecated":false,"digest":{"line_hashes":["50597268355645420433777563493224433987","248425411295318334669297501175840080626","204579555969700246112803004237674141628","108473673675401684701075550158319777465"],"threshold":0.9},"id":"ASB-A-252762941-786c864f","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":127,"function_hash":"336258356887302573331064480651611557665"},"id":"ASB-A-252762941-9d2570d9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java","function":"onBindingDied"}},{"digest":{"function_hash":"308477138216609990425240453918711753581","length":1763},"id":"ASB-A-252762941-a48d0a8e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java","function":"bindAndGetCallIdentification"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0","target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java","function":"onServiceDisconnected"},"deprecated":false,"digest":{"function_hash":"338648352086149527100499374510372632256","length":309},"id":"ASB-A-252762941-a877a0b2"}],"fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"}}],"schema_version":"1.9.0"}