{"id":"ASB-A-252762941","details":"In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-252762941","CVE-2023-21083"],"modified":"2026-04-17T15:55:28.020024Z","published":"2023-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Telecomm/+/8b32e15214910a310e5f7391e739ac1043af3bf9"}],"affected":[{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-04-01"}]}],"versions":["13-next"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","id":"ASB-A-252762941-0491c532","digest":{"function_hash":"338648352086149527100499374510372632256","length":309},"target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"},{"signature_type":"Function","id":"ASB-A-252762941-389f8d19","digest":{"function_hash":"120562527713875321562491172127154338355","length":135},"target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"},{"signature_type":"Function","id":"ASB-A-252762941-5e0d6fd6","digest":{"function_hash":"336258356887302573331064480651611557665","length":127},"target":{"function":"onBindingDied","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"},{"signature_type":"Line","id":"ASB-A-252762941-65b2c755","digest":{"line_hashes":["93138640784470167329690777748229323496","63659522462177018524502730833184707231","221352119823462935609529477489016598561","25006135446868165074748325266048463470","317718284322286336306459607661067067600","46883327502752481797982597445200861609","22267128855893681361825919778626530847","150664494464330869492374344664841387753","233455445762780446044602025550781883204"],"threshold":0.9},"target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"},{"signature_type":"Function","id":"ASB-A-252762941-a6de4bd1","digest":{"function_hash":"209371112732447835114921646363933542613","length":1763},"target":{"function":"bindAndGetCallIdentification","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"},{"signature_type":"Line","id":"ASB-A-252762941-d6991d9f","digest":{"line_hashes":["50597268355645420433777563493224433987","248425411295318334669297501175840080626","204579555969700246112803004237674141628","108473673675401684701075550158319777465"],"threshold":0.9},"target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"}],"spl":"2023-04-01","types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-04-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","id":"ASB-A-252762941-ae4eff45","digest":{"function_hash":"120562527713875321562491172127154338355","length":135},"target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-b1d1468d","digest":{"function_hash":"336258356887302573331064480651611557665","length":127},"target":{"function":"onBindingDied","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Line","id":"ASB-A-252762941-b768e05b","digest":{"line_hashes":["93138640784470167329690777748229323496","63659522462177018524502730833184707231","221352119823462935609529477489016598561","25006135446868165074748325266048463470","317718284322286336306459607661067067600","46883327502752481797982597445200861609","22267128855893681361825919778626530847","150664494464330869492374344664841387753","233455445762780446044602025550781883204"],"threshold":0.9},"target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-c552d493","digest":{"function_hash":"308477138216609990425240453918711753581","length":1763},"target":{"function":"bindAndGetCallIdentification","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Line","id":"ASB-A-252762941-d6e83e36","digest":{"line_hashes":["50597268355645420433777563493224433987","248425411295318334669297501175840080626","204579555969700246112803004237674141628","108473673675401684701075550158319777465"],"threshold":0.9},"target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-ee735b9e","digest":{"function_hash":"338648352086149527100499374510372632256","length":309},"target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"}],"spl":"2023-04-01","types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-04-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","id":"ASB-A-252762941-06e8ce0d","digest":{"function_hash":"120562527713875321562491172127154338355","length":135},"target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-14b9ec38","digest":{"function_hash":"336258356887302573331064480651611557665","length":127},"target":{"function":"onBindingDied","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-19343a41","digest":{"function_hash":"338648352086149527100499374510372632256","length":309},"target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Line","id":"ASB-A-252762941-24a2a90e","digest":{"line_hashes":["50597268355645420433777563493224433987","248425411295318334669297501175840080626","204579555969700246112803004237674141628","108473673675401684701075550158319777465"],"threshold":0.9},"target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Line","id":"ASB-A-252762941-6d5800cd","digest":{"line_hashes":["93138640784470167329690777748229323496","63659522462177018524502730833184707231","221352119823462935609529477489016598561","25006135446868165074748325266048463470","317718284322286336306459607661067067600","46883327502752481797982597445200861609","22267128855893681361825919778626530847","150664494464330869492374344664841387753","233455445762780446044602025550781883204"],"threshold":0.9},"target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-db51ad2d","digest":{"function_hash":"308477138216609990425240453918711753581","length":1763},"target":{"function":"bindAndGetCallIdentification","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"}],"spl":"2023-04-01","types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-04-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","id":"ASB-A-252762941-668b09ba","digest":{"line_hashes":["50597268355645420433777563493224433987","248425411295318334669297501175840080626","204579555969700246112803004237674141628","108473673675401684701075550158319777465"],"threshold":0.9},"target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Line","id":"ASB-A-252762941-8a2e2ff0","digest":{"line_hashes":["93138640784470167329690777748229323496","63659522462177018524502730833184707231","221352119823462935609529477489016598561","25006135446868165074748325266048463470","317718284322286336306459607661067067600","46883327502752481797982597445200861609","22267128855893681361825919778626530847","150664494464330869492374344664841387753","233455445762780446044602025550781883204"],"threshold":0.9},"target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-a1b2f09e","digest":{"function_hash":"120562527713875321562491172127154338355","length":135},"target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-f2ea59ce","digest":{"function_hash":"336258356887302573331064480651611557665","length":127},"target":{"function":"onBindingDied","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-f79e24bc","digest":{"function_hash":"308477138216609990425240453918711753581","length":1763},"target":{"function":"bindAndGetCallIdentification","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-fd7572ba","digest":{"function_hash":"338648352086149527100499374510372632256","length":309},"target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"}],"spl":"2023-04-01","types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-04-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","id":"ASB-A-252762941-27c490f5","digest":{"line_hashes":["93138640784470167329690777748229323496","63659522462177018524502730833184707231","221352119823462935609529477489016598561","25006135446868165074748325266048463470","317718284322286336306459607661067067600","46883327502752481797982597445200861609","22267128855893681361825919778626530847","150664494464330869492374344664841387753","233455445762780446044602025550781883204"],"threshold":0.9},"target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-652c0cf5","digest":{"function_hash":"120562527713875321562491172127154338355","length":135},"target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Line","id":"ASB-A-252762941-786c864f","digest":{"line_hashes":["50597268355645420433777563493224433987","248425411295318334669297501175840080626","204579555969700246112803004237674141628","108473673675401684701075550158319777465"],"threshold":0.9},"target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-9d2570d9","digest":{"function_hash":"336258356887302573331064480651611557665","length":127},"target":{"function":"onBindingDied","file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-a48d0a8e","digest":{"function_hash":"308477138216609990425240453918711753581","length":1763},"target":{"function":"bindAndGetCallIdentification","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"},{"signature_type":"Function","id":"ASB-A-252762941-a877a0b2","digest":{"function_hash":"338648352086149527100499374510372632256","length":309},"target":{"function":"onServiceDisconnected","file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"},"signature_version":"v1","deprecated":false,"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"}],"spl":"2023-04-01","types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-252762941.json"}}],"schema_version":"1.7.5"}