{"id":"ASB-A-267231571","details":"In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-267231571","CVE-2023-21113"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2024-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/build/soong/+/e7b7f0833dc47ade981eddfbf462dcc143dddd10"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/17dd11248a66b2722aa3ef07701b7f09a64160e5"},{"type":"FIX","url":"https://android.googlesource.com/platform/prebuilts/module_sdk/Wifi/+/c705bae1a4d50bd7b4f8cc919097d1aae568dd22"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2024-06-01"}]}],"versions":["14-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/922e52bc3d2a6576cc3e45268dfc3ecd3550f45f"],"severity":"High","spl":"2024-06-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["195550402797816292588254912733162168417","222726315588530079562870485722224082572","78024095867342747406732826113626643203"],"threshold":0.9},"id":"ASB-A-267231571-50be1bb8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/922e52bc3d2a6576cc3e45268dfc3ecd3550f45f","target":{"file":"core/java/android/content/AttributionSource.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/922e52bc3d2a6576cc3e45268dfc3ecd3550f45f","target":{"file":"core/java/android/content/AttributionSource.java","function":"AttributionSource"},"deprecated":false,"digest":{"function_hash":"65482561538392167503070118561692593568","length":118},"id":"ASB-A-267231571-a7437eb9"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-267231571.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-06-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2024-06-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-267231571-214cc72e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/694ba52858703c3959e6811edb9b3df32aeca702","target":{"file":"core/java/android/content/AttributionSource.java","function":"AttributionSource"},"deprecated":false,"digest":{"length":118,"function_hash":"65482561538392167503070118561692593568"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["85608146440550624711451569515011265786","134667738726446689465885015204823379435","193516609944774318276346078664239869520","72504497297320099541759337590342829110","143564837106201668626758104559472530739","81080628058858943913114647875447428095","62910983559400613884819492693008982423","35496733709311527721067366405464355179","195550402797816292588254912733162168417","222726315588530079562870485722224082572","78024095867342747406732826113626643203","184341647606462936188424543868571227788"]},"id":"ASB-A-267231571-eaab9820","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/694ba52858703c3959e6811edb9b3df32aeca702","target":{"file":"core/java/android/content/AttributionSource.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/694ba52858703c3959e6811edb9b3df32aeca702"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-267231571.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-06-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"file":"core/java/android/content/AttributionSource.java","function":"AttributionSource"},"deprecated":false,"digest":{"function_hash":"65482561538392167503070118561692593568","length":118},"id":"ASB-A-267231571-3449e761","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/694ba52858703c3959e6811edb9b3df32aeca702"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/694ba52858703c3959e6811edb9b3df32aeca702","target":{"file":"core/java/android/content/AttributionSource.java"},"deprecated":false,"digest":{"line_hashes":["85608146440550624711451569515011265786","134667738726446689465885015204823379435","193516609944774318276346078664239869520","72504497297320099541759337590342829110","143564837106201668626758104559472530739","81080628058858943913114647875447428095","62910983559400613884819492693008982423","35496733709311527721067366405464355179","195550402797816292588254912733162168417","222726315588530079562870485722224082572","78024095867342747406732826113626643203","184341647606462936188424543868571227788"],"threshold":0.9},"id":"ASB-A-267231571-dd46d33b","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/694ba52858703c3959e6811edb9b3df32aeca702"],"severity":"High","spl":"2024-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-267231571.json"}},{"package":{"name":"platform/build/soong","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-06-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/build/soong/+/6fa44c197335a8bea4f96cce3296f5c92d8dd7e7"],"severity":"High","spl":"2024-06-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-267231571.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-06-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d79e535b9a802680062545e15fc1faaf779c0bf","target":{"file":"core/java/android/content/AttributionSource.java","function":"AttributionSource"},"deprecated":false,"digest":{"length":118,"function_hash":"65482561538392167503070118561692593568"},"id":"ASB-A-267231571-8d6d74a9"},{"id":"ASB-A-267231571-d5ae90aa","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d79e535b9a802680062545e15fc1faaf779c0bf","target":{"file":"core/java/android/content/AttributionSource.java"},"deprecated":false,"digest":{"line_hashes":["85608146440550624711451569515011265786","134667738726446689465885015204823379435","193516609944774318276346078664239869520","72504497297320099541759337590342829110","143564837106201668626758104559472530739","81080628058858943913114647875447428095","62910983559400613884819492693008982423","35496733709311527721067366405464355179","195550402797816292588254912733162168417","222726315588530079562870485722224082572","78024095867342747406732826113626643203","184341647606462936188424543868571227788"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5d79e535b9a802680062545e15fc1faaf779c0bf"],"severity":"High","spl":"2024-06-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-267231571.json"}},{"package":{"name":"platform/prebuilts/module_sdk/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-06-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2024-06-01","types":["EoP"],"fixes":["https://android.googlesource.com/platform/prebuilts/module_sdk/Wifi/+/2ff2726e38819c05769e09dee3e0dfe56ac7e857"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-267231571.json"}}],"schema_version":"1.9.0"}