{"id":"ASB-A-274759612","details":"In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the background due to a BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-274759612","CVE-2023-21129"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/57a53361fd92767ac24e0409f00199c0389475d2"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/004002d625d84e88f73c73818e96be28601b196b"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"severity":"High","spl":"2023-06-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-274759612-498d5d4b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d6152a013c2941dcfc58f53b0f16f59f5f7b177","target":{"function":"getFullScreenIntentDecision","file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java"},"deprecated":false,"digest":{"length":1536,"function_hash":"65544917434259113952001034947210031747"}},{"target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProvider.java"},"deprecated":false,"digest":{"line_hashes":["41798199021805118422247646454527960554","88680274204632969662148220593288076171","296376126253310850540355810432477350321"],"threshold":0.9},"id":"ASB-A-274759612-50b80071","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d6152a013c2941dcfc58f53b0f16f59f5f7b177"},{"digest":{"function_hash":"193999231145687377342109744076993553520","length":1008},"id":"ASB-A-274759612-726aa02d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d6152a013c2941dcfc58f53b0f16f59f5f7b177","target":{"function":"logFullScreenIntentDecision","file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java"},"deprecated":false},{"digest":{"line_hashes":["247291974756218458065457002577327740700","126153532290169155951247703833832270112","325204627789186591080834563439233616921","87479642292905582079827001279485176644","77429336287496025662226619193404431208","86876303209031050898764889572875778696","325032885300232204102364722099171834572","108904166103786811473438341015830980887","289504772439195113573140439620033130559","257540948324937081754084800989621727542","201885650129991458274009552369561697812","106191448766803078244683190453173338294","139258219652626200403757301363139279363"],"threshold":0.9},"id":"ASB-A-274759612-9fbb8afc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d6152a013c2941dcfc58f53b0f16f59f5f7b177","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d6152a013c2941dcfc58f53b0f16f59f5f7b177"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-274759612.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-06-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","spl":"2023-06-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"286394845412138834036028669875194869315","length":1684},"id":"ASB-A-274759612-72b5d606","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c60e264a551df9f880fd73683321b7e821429da7","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java","function":"shouldLaunchFullScreenIntentWhenAdded"}},{"digest":{"line_hashes":["174199387206990589120251576554840835594","57122416322648986154298650842509915280","330054609502327632612331195037666621745","129656775351737482769718064272548545405","123266378606330503341156992142040456098"],"threshold":0.9},"id":"ASB-A-274759612-ad738d73","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c60e264a551df9f880fd73683321b7e821429da7","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c60e264a551df9f880fd73683321b7e821429da7"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-274759612.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-06-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["174199387206990589120251576554840835594","57122416322648986154298650842509915280","330054609502327632612331195037666621745","129656775351737482769718064272548545405","123266378606330503341156992142040456098"]},"id":"ASB-A-274759612-a1e6f03f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1bc1be92ce0d8bd8abd9efa13e85ac0d33556a3b"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1bc1be92ce0d8bd8abd9efa13e85ac0d33556a3b","target":{"function":"shouldLaunchFullScreenIntentWhenAdded","file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java"},"deprecated":false,"digest":{"function_hash":"286394845412138834036028669875194869315","length":1684},"id":"ASB-A-274759612-dd63e256"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1bc1be92ce0d8bd8abd9efa13e85ac0d33556a3b"],"severity":"High","spl":"2023-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-274759612.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-06-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/50c9d488021c0eb9663527caa06aad8b2e7c722c"],"severity":"High","spl":"2023-06-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/50c9d488021c0eb9663527caa06aad8b2e7c722c","target":{"function":"shouldLaunchFullScreenIntentWhenAdded","file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java"},"deprecated":false,"digest":{"length":1684,"function_hash":"286394845412138834036028669875194869315"},"id":"ASB-A-274759612-726df368","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["174199387206990589120251576554840835594","57122416322648986154298650842509915280","330054609502327632612331195037666621745","129656775351737482769718064272548545405","123266378606330503341156992142040456098"],"threshold":0.9},"id":"ASB-A-274759612-dc010c5f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/50c9d488021c0eb9663527caa06aad8b2e7c722c","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-274759612.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["174199387206990589120251576554840835594","57122416322648986154298650842509915280","291434209727768900991004090959767345673","77211922118499331366931169379514631802","275309448129093892626561762699673128410"]},"id":"ASB-A-274759612-39e28393","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e65f0c9643b52e2656ac2da21dfd0fb7395de04c"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e65f0c9643b52e2656ac2da21dfd0fb7395de04c","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/interruption/NotificationInterruptStateProviderImpl.java","function":"shouldLaunchFullScreenIntentWhenAdded"},"deprecated":false,"digest":{"length":1231,"function_hash":"251625850190279166080796893304347799501"},"id":"ASB-A-274759612-481cc72f","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ce645d80ba53587e1f9d1aa656e9ddc3dbfb21b0","https://android.googlesource.com/platform/frameworks/base/+/e65f0c9643b52e2656ac2da21dfd0fb7395de04c"],"severity":"High","spl":"2023-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-274759612.json"}}],"schema_version":"1.9.0"}