{"id":"ASB-A-264880895","details":"In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-264880895","CVE-2023-21268"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2023-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca4c9a19635119d95900793e7a41b820cd1d94d9"}],"affected":[{"package":{"name":"platform/packages/providers/TelephonyProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-08-01"}]}],"versions":["13-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"],"vanir_signatures":[{"signature_version":"v1","id":"ASB-A-264880895-684bfacc","signature_type":"Function","deprecated":false,"digest":{"function_hash":"157104286834053058667808334963109926916","length":2447},"target":{"function":"update","file":"src/com/android/providers/telephony/MmsProvider.java"},"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"},{"target":{"file":"src/com/android/providers/telephony/MmsProvider.java"},"id":"ASB-A-264880895-dfbed74f","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["281253907639525144025299373930782407033","132876137314617094737140570055861165390","4690526999091256758990293462794369238","7544939645273274879206324847218671046","12071255814901493088040976794853679443","164998211426005178073519557115678279380","224677706242864877018902563102024141642","33215650706164921697314748434731617263","123209350887477386788433845434072400276","9931110887952007559812108128041600154","214728215846428908470951434899761443372","278832171060732843206969616038814260467"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c","signature_version":"v1"}],"types":["DoS"],"spl":"2023-08-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-264880895.json"}},{"package":{"name":"platform/packages/providers/TelephonyProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-08-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"],"vanir_signatures":[{"target":{"function":"update","file":"src/com/android/providers/telephony/MmsProvider.java"},"id":"ASB-A-264880895-0825b9fe","signature_type":"Function","deprecated":false,"digest":{"function_hash":"157104286834053058667808334963109926916","length":2447},"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c","signature_version":"v1"},{"signature_version":"v1","id":"ASB-A-264880895-8bbb028b","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["281253907639525144025299373930782407033","132876137314617094737140570055861165390","4690526999091256758990293462794369238","7544939645273274879206324847218671046","12071255814901493088040976794853679443","164998211426005178073519557115678279380","224677706242864877018902563102024141642","33215650706164921697314748434731617263","123209350887477386788433845434072400276","9931110887952007559812108128041600154","214728215846428908470951434899761443372","278832171060732843206969616038814260467"],"threshold":0.9},"target":{"file":"src/com/android/providers/telephony/MmsProvider.java"},"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"}],"types":["DoS"],"spl":"2023-08-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-264880895.json"}},{"package":{"name":"platform/packages/providers/TelephonyProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-08-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["DoS"],"spl":"2023-08-01","vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c","id":"ASB-A-264880895-65fd960f","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["281253907639525144025299373930782407033","132876137314617094737140570055861165390","4690526999091256758990293462794369238","7544939645273274879206324847218671046","12071255814901493088040976794853679443","164998211426005178073519557115678279380","224677706242864877018902563102024141642","33215650706164921697314748434731617263","123209350887477386788433845434072400276","9931110887952007559812108128041600154","214728215846428908470951434899761443372","278832171060732843206969616038814260467"],"threshold":0.9},"signature_version":"v1","target":{"file":"src/com/android/providers/telephony/MmsProvider.java"}},{"signature_version":"v1","id":"ASB-A-264880895-8d4acadd","signature_type":"Function","deprecated":false,"digest":{"function_hash":"157104286834053058667808334963109926916","length":2447},"target":{"function":"update","file":"src/com/android/providers/telephony/MmsProvider.java"},"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"}],"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-264880895.json"}},{"package":{"name":"platform/packages/providers/TelephonyProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","id":"ASB-A-264880895-bd1a1eaf","signature_type":"Function","deprecated":false,"digest":{"function_hash":"157104286834053058667808334963109926916","length":2447},"target":{"function":"update","file":"src/com/android/providers/telephony/MmsProvider.java"},"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"},{"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c","id":"ASB-A-264880895-c4fc9a17","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["281253907639525144025299373930782407033","132876137314617094737140570055861165390","4690526999091256758990293462794369238","7544939645273274879206324847218671046","12071255814901493088040976794853679443","164998211426005178073519557115678279380","224677706242864877018902563102024141642","33215650706164921697314748434731617263","123209350887477386788433845434072400276","9931110887952007559812108128041600154","214728215846428908470951434899761443372","278832171060732843206969616038814260467"],"threshold":0.9},"signature_version":"v1","target":{"file":"src/com/android/providers/telephony/MmsProvider.java"}}],"spl":"2023-08-01","types":["DoS"],"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-264880895.json"}},{"package":{"name":"platform/packages/providers/TelephonyProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-08-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-08-01","vanir_signatures":[{"target":{"file":"src/com/android/providers/telephony/MmsProvider.java"},"id":"ASB-A-264880895-78ae990a","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["281253907639525144025299373930782407033","132876137314617094737140570055861165390","4690526999091256758990293462794369238","7544939645273274879206324847218671046","12071255814901493088040976794853679443","164998211426005178073519557115678279380","224677706242864877018902563102024141642","33215650706164921697314748434731617263","123209350887477386788433845434072400276","9931110887952007559812108128041600154","214728215846428908470951434899761443372","278832171060732843206969616038814260467"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c","signature_version":"v1"},{"signature_version":"v1","id":"ASB-A-264880895-fdc3403f","signature_type":"Function","deprecated":false,"digest":{"function_hash":"157104286834053058667808334963109926916","length":2447},"target":{"function":"update","file":"src/com/android/providers/telephony/MmsProvider.java"},"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"}],"types":["DoS"],"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-264880895.json"}}],"schema_version":"1.7.5"}