{"id":"ASB-A-265431505","details":"In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-265431505","CVE-2023-21281"],"modified":"2026-04-03T15:37:31.002635Z","published":"2023-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/badb243574d7fca9aa89152d9d25eeb4f8615385"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-08-01"}]}],"versions":["13-next"],"ecosystem_specific":{"types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["39689452442272565971453877497751893524","25307676321278645062288265663908796245","7126838083485310030333911645021887272","329967580688749719186970430467551999062","275712561779024352939463625905345362089","260001323114698046348111294318812881405","92885252033579864700461838307405739932","16997948821922028804669429965704681353","148108479212846542151523964273568860188","44515452398227537616293316968546412561","62955029567051782759864073557872053134","153487917297176115130128064257690950561","332222086054823375604207172406661778732","260831415211971711176607302846435592979","122089986153144273567193581275727672468"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2","signature_version":"v1","deprecated":false,"signature_type":"Line","id":"ASB-A-265431505-6f8e044c","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"}},{"digest":{"function_hash":"148841041184183105348486301472293289503","length":718},"source":"https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2","signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-265431505-8367963c","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"playSound"}},{"digest":{"function_hash":"183527245861175790704734003490401276672","length":600},"source":"https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2","signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-265431505-a950c309","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"getLockTimeout"}}],"spl":"2023-08-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-08-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17"],"vanir_signatures":[{"digest":{"function_hash":"183527245861175790704734003490401276672","length":600},"source":"https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17","signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-265431505-509735ea","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"getLockTimeout"}},{"digest":{"threshold":0.9,"line_hashes":["39689452442272565971453877497751893524","25307676321278645062288265663908796245","7126838083485310030333911645021887272","329967580688749719186970430467551999062","275712561779024352939463625905345362089","260001323114698046348111294318812881405","92885252033579864700461838307405739932","16997948821922028804669429965704681353","148108479212846542151523964273568860188","44515452398227537616293316968546412561","62955029567051782759864073557872053134","153487917297176115130128064257690950561","332222086054823375604207172406661778732","260831415211971711176607302846435592979","122089986153144273567193581275727672468"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17","signature_version":"v1","deprecated":false,"signature_type":"Line","id":"ASB-A-265431505-840dc114","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"}},{"digest":{"function_hash":"148841041184183105348486301472293289503","length":718},"source":"https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17","signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-265431505-b6ae24d2","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"playSound"}}],"spl":"2023-08-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-08-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f37a92b8c8c98ca40f858782fe3720362565c16c"],"spl":"2023-08-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e"],"vanir_signatures":[{"digest":{"function_hash":"183527245861175790704734003490401276672","length":600},"source":"https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e","signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-265431505-05515eef","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"getLockTimeout"}},{"digest":{"function_hash":"148841041184183105348486301472293289503","length":718},"source":"https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e","signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-265431505-0e3acf33","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"playSound"}},{"digest":{"threshold":0.9,"line_hashes":["39689452442272565971453877497751893524","25307676321278645062288265663908796245","7126838083485310030333911645021887272","329967580688749719186970430467551999062","275712561779024352939463625905345362089","260001323114698046348111294318812881405","92885252033579864700461838307405739932","16997948821922028804669429965704681353","148108479212846542151523964273568860188","44515452398227537616293316968546412561","62955029567051782759864073557872053134","153487917297176115130128064257690950561","332222086054823375604207172406661778732","260831415211971711176607302846435592979","122089986153144273567193581275727672468"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e","signature_version":"v1","deprecated":false,"signature_type":"Line","id":"ASB-A-265431505-8a897228","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"}}],"spl":"2023-08-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-08-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e"],"vanir_signatures":[{"digest":{"function_hash":"183527245861175790704734003490401276672","length":600},"source":"https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e","signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-265431505-5d78ec34","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"getLockTimeout"}},{"digest":{"function_hash":"148841041184183105348486301472293289503","length":718},"source":"https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e","signature_version":"v1","deprecated":false,"signature_type":"Function","id":"ASB-A-265431505-764dea84","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java","function":"playSound"}},{"digest":{"threshold":0.9,"line_hashes":["39689452442272565971453877497751893524","25307676321278645062288265663908796245","7126838083485310030333911645021887272","329967580688749719186970430467551999062","275712561779024352939463625905345362089","260001323114698046348111294318812881405","92885252033579864700461838307405739932","16997948821922028804669429965704681353","148108479212846542151523964273568860188","44515452398227537616293316968546412561","62955029567051782759864073557872053134","153487917297176115130128064257690950561","332222086054823375604207172406661778732","260831415211971711176607302846435592979","122089986153144273567193581275727672468"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e","signature_version":"v1","deprecated":false,"signature_type":"Line","id":"ASB-A-265431505-9fbf19b8","target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"}}],"spl":"2023-08-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-265431505.json"}}],"schema_version":"1.7.5"}