{"id":"ASB-A-258422365","details":"In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-258422365","CVE-2023-21110"],"modified":"2026-05-01T15:24:27.653932Z","published":"2023-05-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-05-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/e0de4236a68cbfc4052cc034093209f943824ca0"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-05-01"}]}],"versions":["13-next"],"ecosystem_specific":{"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/5c4acdccf4e452b627eeb26780310fdb75a75d1d","signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["206011746163297305132300104186084978784","241539067283460964491270084693296296757","191991451895106618924309496761116815890","184287898546220317222157868761688745274","275084031064875680992478290601659976867","88443025620989396663654189866201888949","112197717982825007225355787911216728149","119321661562151055095244265562114422223","55227118540929058058448814210942911754","40404519076541977670016340564362917975","1462691159536227245047796327170328582","69865797419674982298301031894451876657","107876745447396953226689947565208115345","143578509994406488141997917364780156932","257615567132102509993123458328202807797","1462691159536227245047796327170328582","69865797419674982298301031894451876657","107876745447396953226689947565208115345"]},"id":"ASB-A-258422365-091a0353","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"clearData"},"source":"https://android.googlesource.com/platform/frameworks/base/+/5c4acdccf4e452b627eeb26780310fdb75a75d1d","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"159457108802835939933204168598599082997","length":821},"id":"ASB-A-258422365-1238ce29","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"clearData"},"source":"https://android.googlesource.com/platform/frameworks/base/+/5c4acdccf4e452b627eeb26780310fdb75a75d1d","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"313894563926212627758564161787606785904","length":749},"id":"ASB-A-258422365-2c4b3305","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"getSnoozeTimeForUnpostedNotification"},"source":"https://android.googlesource.com/platform/frameworks/base/+/5c4acdccf4e452b627eeb26780310fdb75a75d1d","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"177388055190041962230635764117031089167","length":215},"id":"ASB-A-258422365-6d71d4b7","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"getSnoozeContextForUnpostedNotification"},"source":"https://android.googlesource.com/platform/frameworks/base/+/5c4acdccf4e452b627eeb26780310fdb75a75d1d","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"310474266240063358746554753379143854544","length":161},"id":"ASB-A-258422365-735741b0","deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5c4acdccf4e452b627eeb26780310fdb75a75d1d"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-258422365.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-05-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"snooze"},"source":"https://android.googlesource.com/platform/frameworks/base/+/931093dfb41fc41659c9f2d6f76bd74e85cf1da8","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"68234399032875519848256920986336492113","length":384},"id":"ASB-A-258422365-42ae2ed9","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"getSnoozeContextForUnpostedNotification"},"source":"https://android.googlesource.com/platform/frameworks/base/+/931093dfb41fc41659c9f2d6f76bd74e85cf1da8","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"297298476576690380993301502056350580831","length":258},"id":"ASB-A-258422365-4ead6e44","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"getSnoozeTimeForUnpostedNotification"},"source":"https://android.googlesource.com/platform/frameworks/base/+/931093dfb41fc41659c9f2d6f76bd74e85cf1da8","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"179712768751024727169228097046822972071","length":298},"id":"ASB-A-258422365-5581fd1b","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"repost"},"source":"https://android.googlesource.com/platform/frameworks/base/+/931093dfb41fc41659c9f2d6f76bd74e85cf1da8","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"116020863117182769389189458339551242870","length":854},"id":"ASB-A-258422365-5e4ab6d5","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"snooze"},"source":"https://android.googlesource.com/platform/frameworks/base/+/931093dfb41fc41659c9f2d6f76bd74e85cf1da8","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"99311278616326413012635839657250076055","length":303},"id":"ASB-A-258422365-c3a4784e","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/931093dfb41fc41659c9f2d6f76bd74e85cf1da8","signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["188808557791150153303674507465884268646","140647674100675573696495731562312454216","249827259411598780524802110734816503169","157487468691751015695604963054778856853","879991788045211835303027405448232707","214840239090764637954836017524842681540","51496534472853483632034086534350144859","224160875825442884728438083523667813340","176235277049659247156135101294893859055","34356618568430150796548339378553317807","44583487309391159226351237753630801099","231674074763218260270626935860265178589","3036404489624116030570827699641379165","133299138022547582026598222106355741418","31401440915287203432696824453957196662","337805581300870083762567328134254150049","125281737638142811648441759182910960271","285036999310139410942968040362157021577","290602891257173545752238467139289915371","294664921174415678229912484905515898893","74279495458936760821609821329788655163","252526685655093636312019913422936573375","338578860196150984499846657091454351207","219013295355096366763938351619815311009","297524077185614968785878626764790631484","75354462513111889104519551698780150970","299836337748063808446164496556756088509","53498460906247200945096950147860597530","148410791997027194435562706885463602364","6399668413602991100508848105403689796","68367167882388386044168338213239908334","148189913035040877105542052331892778733","25520128510059115042013909881488464365"]},"id":"ASB-A-258422365-fce6d3bc","deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/931093dfb41fc41659c9f2d6f76bd74e85cf1da8"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-258422365.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-05-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"snooze"},"source":"https://android.googlesource.com/platform/frameworks/base/+/b8a07871459ed895fc814730e198df4a0b5860dc","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"99311278616326413012635839657250076055","length":303},"id":"ASB-A-258422365-08c3d7d6","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"getSnoozeTimeForUnpostedNotification"},"source":"https://android.googlesource.com/platform/frameworks/base/+/b8a07871459ed895fc814730e198df4a0b5860dc","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"179712768751024727169228097046822972071","length":298},"id":"ASB-A-258422365-12b4739a","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"getSnoozeContextForUnpostedNotification"},"source":"https://android.googlesource.com/platform/frameworks/base/+/b8a07871459ed895fc814730e198df4a0b5860dc","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"297298476576690380993301502056350580831","length":258},"id":"ASB-A-258422365-29e0d246","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"snooze"},"source":"https://android.googlesource.com/platform/frameworks/base/+/b8a07871459ed895fc814730e198df4a0b5860dc","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"68234399032875519848256920986336492113","length":384},"id":"ASB-A-258422365-b1cd5a25","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/b8a07871459ed895fc814730e198df4a0b5860dc","signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["268038216406559524402887156480391118308","269456018888989736138252755403548005507","249827259411598780524802110734816503169","157487468691751015695604963054778856853","879991788045211835303027405448232707","214840239090764637954836017524842681540","51496534472853483632034086534350144859","224160875825442884728438083523667813340","176235277049659247156135101294893859055","34356618568430150796548339378553317807","44583487309391159226351237753630801099","231674074763218260270626935860265178589","3036404489624116030570827699641379165","133299138022547582026598222106355741418","31401440915287203432696824453957196662","337805581300870083762567328134254150049","125281737638142811648441759182910960271","285036999310139410942968040362157021577","290602891257173545752238467139289915371","294664921174415678229912484905515898893","74279495458936760821609821329788655163","252526685655093636312019913422936573375","338578860196150984499846657091454351207","219013295355096366763938351619815311009","297524077185614968785878626764790631484","75354462513111889104519551698780150970","299836337748063808446164496556756088509","53498460906247200945096950147860597530","148410791997027194435562706885463602364","6399668413602991100508848105403689796","68367167882388386044168338213239908334","148189913035040877105542052331892778733","25520128510059115042013909881488464365"]},"id":"ASB-A-258422365-bf612b78","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"repost"},"source":"https://android.googlesource.com/platform/frameworks/base/+/b8a07871459ed895fc814730e198df4a0b5860dc","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"116020863117182769389189458339551242870","length":854},"id":"ASB-A-258422365-c15299bc","deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b8a07871459ed895fc814730e198df4a0b5860dc"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-258422365.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-05-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"getSnoozeTimeForUnpostedNotification"},"source":"https://android.googlesource.com/platform/frameworks/base/+/2a01a489c10c80f96a4291b0c901ce1e65cd4c42","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"179712768751024727169228097046822972071","length":298},"id":"ASB-A-258422365-26684a80","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/2a01a489c10c80f96a4291b0c901ce1e65cd4c42","signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["268038216406559524402887156480391118308","269456018888989736138252755403548005507","249827259411598780524802110734816503169","157487468691751015695604963054778856853","879991788045211835303027405448232707","214840239090764637954836017524842681540","51496534472853483632034086534350144859","224160875825442884728438083523667813340","176235277049659247156135101294893859055","34356618568430150796548339378553317807","44583487309391159226351237753630801099","231674074763218260270626935860265178589","3036404489624116030570827699641379165","133299138022547582026598222106355741418","31401440915287203432696824453957196662","337805581300870083762567328134254150049","125281737638142811648441759182910960271","285036999310139410942968040362157021577","290602891257173545752238467139289915371","294664921174415678229912484905515898893","74279495458936760821609821329788655163","252526685655093636312019913422936573375","338578860196150984499846657091454351207","219013295355096366763938351619815311009","297524077185614968785878626764790631484","75354462513111889104519551698780150970","299836337748063808446164496556756088509","53498460906247200945096950147860597530","148410791997027194435562706885463602364","6399668413602991100508848105403689796","68367167882388386044168338213239908334","148189913035040877105542052331892778733","25520128510059115042013909881488464365"]},"id":"ASB-A-258422365-a0b3ce30","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"getSnoozeContextForUnpostedNotification"},"source":"https://android.googlesource.com/platform/frameworks/base/+/2a01a489c10c80f96a4291b0c901ce1e65cd4c42","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"297298476576690380993301502056350580831","length":258},"id":"ASB-A-258422365-b184371e","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"repost"},"source":"https://android.googlesource.com/platform/frameworks/base/+/2a01a489c10c80f96a4291b0c901ce1e65cd4c42","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"116020863117182769389189458339551242870","length":854},"id":"ASB-A-258422365-c197338b","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"snooze"},"source":"https://android.googlesource.com/platform/frameworks/base/+/2a01a489c10c80f96a4291b0c901ce1e65cd4c42","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"68234399032875519848256920986336492113","length":384},"id":"ASB-A-258422365-cf26c3b5","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"snooze"},"source":"https://android.googlesource.com/platform/frameworks/base/+/2a01a489c10c80f96a4291b0c901ce1e65cd4c42","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"99311278616326413012635839657250076055","length":303},"id":"ASB-A-258422365-f1ae3f4a","deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2a01a489c10c80f96a4291b0c901ce1e65cd4c42"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-258422365.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-05-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"getSnoozeContextForUnpostedNotification"},"source":"https://android.googlesource.com/platform/frameworks/base/+/37e748ab8a38b3e1ada63ee6321eb01d264229ec","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"297298476576690380993301502056350580831","length":258},"id":"ASB-A-258422365-03136a3c","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"snooze"},"source":"https://android.googlesource.com/platform/frameworks/base/+/37e748ab8a38b3e1ada63ee6321eb01d264229ec","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"68234399032875519848256920986336492113","length":384},"id":"ASB-A-258422365-521dd8a0","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/37e748ab8a38b3e1ada63ee6321eb01d264229ec","signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["268038216406559524402887156480391118308","269456018888989736138252755403548005507","249827259411598780524802110734816503169","157487468691751015695604963054778856853","879991788045211835303027405448232707","214840239090764637954836017524842681540","51496534472853483632034086534350144859","224160875825442884728438083523667813340","176235277049659247156135101294893859055","34356618568430150796548339378553317807","44583487309391159226351237753630801099","231674074763218260270626935860265178589","3036404489624116030570827699641379165","133299138022547582026598222106355741418","31401440915287203432696824453957196662","337805581300870083762567328134254150049","125281737638142811648441759182910960271","285036999310139410942968040362157021577","290602891257173545752238467139289915371","294664921174415678229912484905515898893","74279495458936760821609821329788655163","252526685655093636312019913422936573375","338578860196150984499846657091454351207","219013295355096366763938351619815311009","297524077185614968785878626764790631484","75354462513111889104519551698780150970","299836337748063808446164496556756088509","53498460906247200945096950147860597530","148410791997027194435562706885463602364","6399668413602991100508848105403689796","68367167882388386044168338213239908334","148189913035040877105542052331892778733","25520128510059115042013909881488464365"]},"id":"ASB-A-258422365-88117d41","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"repost"},"source":"https://android.googlesource.com/platform/frameworks/base/+/37e748ab8a38b3e1ada63ee6321eb01d264229ec","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"116020863117182769389189458339551242870","length":854},"id":"ASB-A-258422365-94951c05","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"snooze"},"source":"https://android.googlesource.com/platform/frameworks/base/+/37e748ab8a38b3e1ada63ee6321eb01d264229ec","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"99311278616326413012635839657250076055","length":303},"id":"ASB-A-258422365-9e6fa59a","deprecated":false},{"target":{"file":"services/core/java/com/android/server/notification/SnoozeHelper.java","function":"getSnoozeTimeForUnpostedNotification"},"source":"https://android.googlesource.com/platform/frameworks/base/+/37e748ab8a38b3e1ada63ee6321eb01d264229ec","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"179712768751024727169228097046822972071","length":298},"id":"ASB-A-258422365-b36f8532","deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/37e748ab8a38b3e1ada63ee6321eb01d264229ec"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-258422365.json"}}],"schema_version":"1.7.5"}