{"id":"ASB-A-277740082","details":"In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-277740082","CVE-2023-21286"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/a65429742caf05205ea7f1c2fdd1119ca652b810"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-08-01"}]}],"versions":["13-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/70d27f1906eeb3c8ccda870b99a7aa2d5d723c7f"],"severity":"High","spl":"2023-08-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["32095979505812630558701452657068284543","229781224209199736726004838141330188622","333345535851202807775160130621069439181","214812194434898171383520507439417669984"],"threshold":0.9},"id":"ASB-A-277740082-96712ffd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/70d27f1906eeb3c8ccda870b99a7aa2d5d723c7f","target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-277740082.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-08-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2023-08-01","types":["EoP"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["32095979505812630558701452657068284543","229781224209199736726004838141330188622","329540396943763825222730691529652520502","259685038169542666681207967667241389"]},"id":"ASB-A-277740082-ce877ba5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/850fd984e5f346645b5a941ed7307387c7e4c4de","target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/850fd984e5f346645b5a941ed7307387c7e4c4de"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-277740082.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-08-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","spl":"2023-08-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/850fd984e5f346645b5a941ed7307387c7e4c4de","target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"line_hashes":["32095979505812630558701452657068284543","229781224209199736726004838141330188622","329540396943763825222730691529652520502","259685038169542666681207967667241389"],"threshold":0.9},"id":"ASB-A-277740082-89030d6f"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/850fd984e5f346645b5a941ed7307387c7e4c4de"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-277740082.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["32095979505812630558701452657068284543","229781224209199736726004838141330188622","329540396943763825222730691529652520502","259685038169542666681207967667241389"]},"id":"ASB-A-277740082-e49c71dc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/850fd984e5f346645b5a941ed7307387c7e4c4de"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/850fd984e5f346645b5a941ed7307387c7e4c4de"],"severity":"High","spl":"2023-08-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-277740082.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-08-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-08-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"line_hashes":["32095979505812630558701452657068284543","229781224209199736726004838141330188622","329540396943763825222730691529652520502","259685038169542666681207967667241389"],"threshold":0.9},"id":"ASB-A-277740082-805e0741","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/850fd984e5f346645b5a941ed7307387c7e4c4de"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/850fd984e5f346645b5a941ed7307387c7e4c4de"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-277740082.json"}}],"schema_version":"1.9.0"}