{"id":"ASB-A-265431505","details":"In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-265431505","CVE-2023-21281"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/badb243574d7fca9aa89152d9d25eeb4f8615385"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-08-01"}]}],"versions":["13-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"},"deprecated":false,"digest":{"line_hashes":["39689452442272565971453877497751893524","25307676321278645062288265663908796245","7126838083485310030333911645021887272","329967580688749719186970430467551999062","275712561779024352939463625905345362089","260001323114698046348111294318812881405","92885252033579864700461838307405739932","16997948821922028804669429965704681353","148108479212846542151523964273568860188","44515452398227537616293316968546412561","62955029567051782759864073557872053134","153487917297176115130128064257690950561","332222086054823375604207172406661778732","260831415211971711176607302846435592979","122089986153144273567193581275727672468"],"threshold":0.9},"id":"ASB-A-265431505-6f8e044c"},{"digest":{"function_hash":"148841041184183105348486301472293289503","length":718},"id":"ASB-A-265431505-8367963c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"playSound"},"deprecated":false},{"digest":{"function_hash":"183527245861175790704734003490401276672","length":600},"id":"ASB-A-265431505-a950c309","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"getLockTimeout"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2"],"severity":"High","spl":"2023-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-08-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17"],"severity":"High","spl":"2023-08-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"183527245861175790704734003490401276672","length":600},"id":"ASB-A-265431505-509735ea","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"getLockTimeout"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"},"deprecated":false,"digest":{"line_hashes":["39689452442272565971453877497751893524","25307676321278645062288265663908796245","7126838083485310030333911645021887272","329967580688749719186970430467551999062","275712561779024352939463625905345362089","260001323114698046348111294318812881405","92885252033579864700461838307405739932","16997948821922028804669429965704681353","148108479212846542151523964273568860188","44515452398227537616293316968546412561","62955029567051782759864073557872053134","153487917297176115130128064257690950561","332222086054823375604207172406661778732","260831415211971711176607302846435592979","122089986153144273567193581275727672468"],"threshold":0.9},"id":"ASB-A-265431505-840dc114"},{"target":{"function":"playSound","file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"},"deprecated":false,"digest":{"function_hash":"148841041184183105348486301472293289503","length":718},"id":"ASB-A-265431505-b6ae24d2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-08-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f37a92b8c8c98ca40f858782fe3720362565c16c"],"severity":"High","spl":"2023-08-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"digest":{"length":600,"function_hash":"183527245861175790704734003490401276672"},"id":"ASB-A-265431505-05515eef","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"getLockTimeout"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e","target":{"function":"playSound","file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"},"deprecated":false,"digest":{"length":718,"function_hash":"148841041184183105348486301472293289503"},"id":"ASB-A-265431505-0e3acf33"},{"digest":{"threshold":0.9,"line_hashes":["39689452442272565971453877497751893524","25307676321278645062288265663908796245","7126838083485310030333911645021887272","329967580688749719186970430467551999062","275712561779024352939463625905345362089","260001323114698046348111294318812881405","92885252033579864700461838307405739932","16997948821922028804669429965704681353","148108479212846542151523964273568860188","44515452398227537616293316968546412561","62955029567051782759864073557872053134","153487917297176115130128064257690950561","332222086054823375604207172406661778732","260831415211971711176607302846435592979","122089986153144273567193581275727672468"]},"id":"ASB-A-265431505-8a897228","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e"],"severity":"High","spl":"2023-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-08-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2023-08-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"getLockTimeout"},"deprecated":false,"digest":{"function_hash":"183527245861175790704734003490401276672","length":600},"id":"ASB-A-265431505-5d78ec34","signature_type":"Function"},{"digest":{"function_hash":"148841041184183105348486301472293289503","length":718},"id":"ASB-A-265431505-764dea84","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e","target":{"function":"playSound","file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"},"deprecated":false},{"id":"ASB-A-265431505-9fbf19b8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"},"deprecated":false,"digest":{"line_hashes":["39689452442272565971453877497751893524","25307676321278645062288265663908796245","7126838083485310030333911645021887272","329967580688749719186970430467551999062","275712561779024352939463625905345362089","260001323114698046348111294318812881405","92885252033579864700461838307405739932","16997948821922028804669429965704681353","148108479212846542151523964273568860188","44515452398227537616293316968546412561","62955029567051782759864073557872053134","153487917297176115130128064257690950561","332222086054823375604207172406661778732","260831415211971711176607302846435592979","122089986153144273567193581275727672468"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"}}],"schema_version":"1.9.0"}