{"id":"ASB-A-272020068","details":"In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-272020068","CVE-2023-21289"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/7a5e51c918b7097be3c7e669e1825a4d159c4185"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-08-01"}]}],"versions":["13-next"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-272020068-03f41490","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"deprecated":false,"digest":{"line_hashes":["154024289320809624274946460578804696757","151588659087965012770835819375748979376","280364402766476244468737029756931468904","11057617847484421365866785521485864046","308960376137552327290394868068852179052"],"threshold":0.9}},{"digest":{"function_hash":"81702766632057871562352111814049922870","length":673},"id":"ASB-A-272020068-4bb9dbd2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"function":"onWalletCardsRetrieved","file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"deprecated":false,"digest":{"line_hashes":["184641559218894618212227008777356932071","258488567682341411313240920445946856462","288065892403114452316990344918332207873","86684942475027882702316005456625254702"],"threshold":0.9},"id":"ASB-A-272020068-63eb63b2","signature_type":"Line"},{"digest":{"function_hash":"321485103869401293967141542063908118035","length":235},"id":"ASB-A-272020068-c7ef98a4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c"],"severity":"High","spl":"2023-08-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-272020068.json"}},{"package":{"name":"platform/packages/apps/QuickAccessWallet","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-08-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","spl":"2023-08-01","types":["ID"],"vanir_signatures":[{"target":{"function":"QAWalletCardViewInfo","file":"src/com/android/systemui/plugin/globalactions/wallet/WalletPanelViewController.java"},"deprecated":false,"digest":{"length":239,"function_hash":"245266871400380683230443391127046152544"},"id":"ASB-A-272020068-141d9e90","match_only_versions":["11"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/QuickAccessWallet/+/36284852414f25d2977100fc98d1b1db4f7e6482"},{"deprecated":false,"digest":{"line_hashes":["73742276252965827634920533043700763320","240890450615297895378835783092766574491","193037111863378980735374553742452417935","40472249060584533601300591027013008216","275951776690968169302265799332597296180","176061753774235849630070741735145956856","181051966795297764024482497327111189936","56247703958925250325187635788824166336"],"threshold":0.9},"id":"ASB-A-272020068-d70b157c","match_only_versions":["11"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/QuickAccessWallet/+/36284852414f25d2977100fc98d1b1db4f7e6482","target":{"file":"src/com/android/systemui/plugin/globalactions/wallet/WalletPanelViewController.java"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/QuickAccessWallet/+/36284852414f25d2977100fc98d1b1db4f7e6482"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-272020068.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-08-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"length":673,"function_hash":"81702766632057871562352111814049922870"},"id":"ASB-A-272020068-57912457","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"function":"onWalletCardsRetrieved","file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"deprecated":false,"digest":{"line_hashes":["154024289320809624274946460578804696757","151588659087965012770835819375748979376","280364402766476244468737029756931468904","11057617847484421365866785521485864046","308960376137552327290394868068852179052"],"threshold":0.9},"id":"ASB-A-272020068-8bd98fb8","signature_type":"Line"},{"id":"ASB-A-272020068-bd6f8cd6","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["184641559218894618212227008777356932071","258488567682341411313240920445946856462","288065892403114452316990344918332207873","86684942475027882702316005456625254702"]}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"deprecated":false,"digest":{"function_hash":"321485103869401293967141542063908118035","length":235},"id":"ASB-A-272020068-dbe5c40b"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c"],"severity":"High","spl":"2023-08-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-272020068.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","spl":"2023-08-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"deprecated":false,"digest":{"line_hashes":["184641559218894618212227008777356932071","258488567682341411313240920445946856462","288065892403114452316990344918332207873","86684942475027882702316005456625254702"],"threshold":0.9},"id":"ASB-A-272020068-07a8563b"},{"id":"ASB-A-272020068-0bb643a7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"deprecated":false,"digest":{"function_hash":"81702766632057871562352111814049922870","length":673}},{"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"deprecated":false,"digest":{"line_hashes":["154024289320809624274946460578804696757","151588659087965012770835819375748979376","280364402766476244468737029756931468904","11057617847484421365866785521485864046","308960376137552327290394868068852179052"],"threshold":0.9},"id":"ASB-A-272020068-bb06105e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c"},{"target":{"function":"QAWalletCardViewInfo","file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"deprecated":false,"digest":{"length":235,"function_hash":"321485103869401293967141542063908118035"},"id":"ASB-A-272020068-d039ff23","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-272020068.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-08-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c"],"severity":"High","spl":"2023-08-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"deprecated":false,"digest":{"length":673,"function_hash":"81702766632057871562352111814049922870"},"id":"ASB-A-272020068-9feddd9a","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["154024289320809624274946460578804696757","151588659087965012770835819375748979376","280364402766476244468737029756931468904","11057617847484421365866785521485864046","308960376137552327290394868068852179052"],"threshold":0.9},"id":"ASB-A-272020068-c8554155","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"}},{"id":"ASB-A-272020068-ef3b032e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"deprecated":false,"digest":{"function_hash":"321485103869401293967141542063908118035","length":235}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/ff753ae693065685d85bbda6af2953905fdf434c","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"deprecated":false,"digest":{"line_hashes":["184641559218894618212227008777356932071","258488567682341411313240920445946856462","288065892403114452316990344918332207873","86684942475027882702316005456625254702"],"threshold":0.9},"id":"ASB-A-272020068-eff5af57","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-272020068.json"}}],"schema_version":"1.9.0"}