{"id":"ASB-A-272020068","details":"In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-272020068","CVE-2023-21289"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2023-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/7a5e51c918b7097be3c7e669e1825a4d159c4185"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-08-01"}]}],"versions":["13-next"],"ecosystem_specific":{"types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c"],"vanir_signatures":[{"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["154024289320809624274946460578804696757","151588659087965012770835819375748979376","280364402766476244468737029756931468904","11057617847484421365866785521485864046","308960376137552327290394868068852179052"]},"id":"ASB-A-272020068-03f41490","deprecated":false},{"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"81702766632057871562352111814049922870","length":673},"id":"ASB-A-272020068-4bb9dbd2","deprecated":false},{"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["184641559218894618212227008777356932071","258488567682341411313240920445946856462","288065892403114452316990344918332207873","86684942475027882702316005456625254702"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","id":"ASB-A-272020068-63eb63b2","deprecated":false},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"321485103869401293967141542063908118035","length":235},"id":"ASB-A-272020068-c7ef98a4","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"}}],"spl":"2023-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-272020068.json"}},{"package":{"name":"platform/packages/apps/QuickAccessWallet","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-08-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/apps/QuickAccessWallet/+/36284852414f25d2977100fc98d1b1db4f7e6482"],"severity":"High","vanir_signatures":[{"deprecated":false,"signature_type":"Function","digest":{"function_hash":"245266871400380683230443391127046152544","length":239},"match_only_versions":["11"],"source":"https://android.googlesource.com/platform/packages/apps/QuickAccessWallet/+/36284852414f25d2977100fc98d1b1db4f7e6482","signature_version":"v1","id":"ASB-A-272020068-141d9e90","target":{"file":"src/com/android/systemui/plugin/globalactions/wallet/WalletPanelViewController.java","function":"QAWalletCardViewInfo"}},{"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["73742276252965827634920533043700763320","240890450615297895378835783092766574491","193037111863378980735374553742452417935","40472249060584533601300591027013008216","275951776690968169302265799332597296180","176061753774235849630070741735145956856","181051966795297764024482497327111189936","56247703958925250325187635788824166336"]},"match_only_versions":["11"],"source":"https://android.googlesource.com/platform/packages/apps/QuickAccessWallet/+/36284852414f25d2977100fc98d1b1db4f7e6482","signature_version":"v1","id":"ASB-A-272020068-d70b157c","target":{"file":"src/com/android/systemui/plugin/globalactions/wallet/WalletPanelViewController.java"}}],"spl":"2023-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-272020068.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-08-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c"],"vanir_signatures":[{"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"digest":{"function_hash":"81702766632057871562352111814049922870","length":673},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_type":"Function","signature_version":"v1","id":"ASB-A-272020068-57912457","deprecated":false},{"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"digest":{"threshold":0.9,"line_hashes":["154024289320809624274946460578804696757","151588659087965012770835819375748979376","280364402766476244468737029756931468904","11057617847484421365866785521485864046","308960376137552327290394868068852179052"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_type":"Line","signature_version":"v1","id":"ASB-A-272020068-8bd98fb8","deprecated":false},{"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["184641559218894618212227008777356932071","258488567682341411313240920445946856462","288065892403114452316990344918332207873","86684942475027882702316005456625254702"]},"id":"ASB-A-272020068-bd6f8cd6","deprecated":false},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"321485103869401293967141542063908118035","length":235},"id":"ASB-A-272020068-dbe5c40b","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"}}],"spl":"2023-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-272020068.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c"],"vanir_signatures":[{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["184641559218894618212227008777356932071","258488567682341411313240920445946856462","288065892403114452316990344918332207873","86684942475027882702316005456625254702"]},"id":"ASB-A-272020068-07a8563b","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"}},{"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"digest":{"function_hash":"81702766632057871562352111814049922870","length":673},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_type":"Function","signature_version":"v1","id":"ASB-A-272020068-0bb643a7","deprecated":false},{"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","digest":{"threshold":0.9,"line_hashes":["154024289320809624274946460578804696757","151588659087965012770835819375748979376","280364402766476244468737029756931468904","11057617847484421365866785521485864046","308960376137552327290394868068852179052"]},"id":"ASB-A-272020068-bb06105e","deprecated":false},{"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"digest":{"function_hash":"321485103869401293967141542063908118035","length":235},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_type":"Function","signature_version":"v1","id":"ASB-A-272020068-d039ff23","deprecated":false}],"spl":"2023-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-272020068.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-08-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c"],"vanir_signatures":[{"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","signature_type":"Function","digest":{"function_hash":"81702766632057871562352111814049922870","length":673},"id":"ASB-A-272020068-9feddd9a","deprecated":false},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["154024289320809624274946460578804696757","151588659087965012770835819375748979376","280364402766476244468737029756931468904","11057617847484421365866785521485864046","308960376137552327290394868068852179052"]},"id":"ASB-A-272020068-c8554155","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"}},{"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"signature_type":"Function","digest":{"function_hash":"321485103869401293967141542063908118035","length":235},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","id":"ASB-A-272020068-ef3b032e","deprecated":false},{"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["184641559218894618212227008777356932071","258488567682341411313240920445946856462","288065892403114452316990344918332207873","86684942475027882702316005456625254702"]},"id":"ASB-A-272020068-eff5af57","deprecated":false}],"spl":"2023-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-272020068.json"}}],"schema_version":"1.7.5"}