{"id":"ASB-A-293301736","details":"In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-293301736","CVE-2024-23708"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2024-05-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-05-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/0c095c365ede36257e829769194f9596a598e560"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2024-05-01"}]}],"versions":["14-next"],"ecosystem_specific":{"severity":"High","spl":"2024-05-01","types":["EoP"],"vanir_signatures":[{"digest":{"length":1860,"function_hash":"140153105100582210719064882995352522392"},"id":"ASB-A-293301736-439c565d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java","function":"showAccessNotificationLocked"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["125599800300640038754283766824678389395","3023639384543577288562536460166227898","8963212570310550905245133942830702436","4526041545684604913922208798118986461","298346877194448923487418883407950380948","160740365947827704916635276698930127768","239153161959907254205043043208137548203","49579684893671908030064883749971197156"],"threshold":0.9},"id":"ASB-A-293301736-5a47489d"},{"deprecated":false,"digest":{"length":2182,"function_hash":"145575933447579522652520267726728119690"},"id":"ASB-A-293301736-c47277be","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueToast"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java"},"deprecated":false,"digest":{"line_hashes":["16611719256377645983705321024960876530","117412489361192054082462128599202202669","327375500565017324979474791578469601077","268091315116038178718845494633414811208","271717791748026080633539960008347998961","33302268204333460697797465021037210175","214371846999978358185522176872997427511","339994169504411628922283014169364048797"],"threshold":0.9},"id":"ASB-A-293301736-e2b77b06"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-293301736.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-05-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","spl":"2024-05-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["148183948512628701485280756920349622278","166077678838537786944914696536831747595","165604897802186618009002619732948475636","148325104774793000025904769572606837950"],"threshold":0.9},"id":"ASB-A-293301736-64d11196","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueToast"},"deprecated":false,"digest":{"function_hash":"58557464394478024950270382125085909310","length":1817},"id":"ASB-A-293301736-8404304a","signature_type":"Function"},{"id":"ASB-A-293301736-b21dc6ba","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["125599800300640038754283766824678389395","3023639384543577288562536460166227898","8963212570310550905245133942830702436","4526041545684604913922208798118986461","298346877194448923487418883407950380948","298352797132916608215461151575427450436","319685266089544305277604211166019926183","48013361902388822231982465596199263183"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java","function":"showAccessNotificationLocked"},"deprecated":false,"digest":{"function_hash":"162520886564088941042872260154283953673","length":1166},"id":"ASB-A-293301736-b9ea1e0a"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-293301736.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-05-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","spl":"2024-05-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"length":1817,"function_hash":"58557464394478024950270382125085909310"},"id":"ASB-A-293301736-adac3c40","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueToast"}},{"target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java","function":"showAccessNotificationLocked"},"deprecated":false,"digest":{"function_hash":"162520886564088941042872260154283953673","length":1166},"id":"ASB-A-293301736-da5a45ff","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java"},"deprecated":false,"digest":{"line_hashes":["148183948512628701485280756920349622278","166077678838537786944914696536831747595","165604897802186618009002619732948475636","148325104774793000025904769572606837950"],"threshold":0.9},"id":"ASB-A-293301736-e30b7119","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["125599800300640038754283766824678389395","3023639384543577288562536460166227898","8963212570310550905245133942830702436","4526041545684604913922208798118986461","298346877194448923487418883407950380948","298352797132916608215461151575427450436","319685266089544305277604211166019926183","48013361902388822231982465596199263183"],"threshold":0.9},"id":"ASB-A-293301736-f5fb0b62","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-293301736.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-05-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java"},"deprecated":false,"digest":{"line_hashes":["148183948512628701485280756920349622278","166077678838537786944914696536831747595","165604897802186618009002619732948475636","148325104774793000025904769572606837950"],"threshold":0.9},"id":"ASB-A-293301736-31305b67","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueToast"},"deprecated":false,"digest":{"length":1817,"function_hash":"58557464394478024950270382125085909310"},"id":"ASB-A-293301736-3eaa6049","signature_type":"Function"},{"target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java","function":"showAccessNotificationLocked"},"deprecated":false,"digest":{"function_hash":"25192570982462651463085555734020786691","length":1315},"id":"ASB-A-293301736-688bc3f4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80"},{"digest":{"threshold":0.9,"line_hashes":["125599800300640038754283766824678389395","3023639384543577288562536460166227898","8963212570310550905245133942830702436","4526041545684604913922208798118986461","298346877194448923487418883407950380948","298352797132916608215461151575427450436","319685266089544305277604211166019926183","48013361902388822231982465596199263183"]},"id":"ASB-A-293301736-99a29437","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80"],"severity":"High","spl":"2024-05-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-293301736.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-05-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["125599800300640038754283766824678389395","3023639384543577288562536460166227898","8963212570310550905245133942830702436","4526041545684604913922208798118986461","298346877194448923487418883407950380948","160740365947827704916635276698930127768","239153161959907254205043043208137548203","49579684893671908030064883749971197156"],"threshold":0.9},"id":"ASB-A-293301736-3ee1c82d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db"},{"target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["16611719256377645983705321024960876530","117412489361192054082462128599202202669","327375500565017324979474791578469601077","268091315116038178718845494633414811208","271717791748026080633539960008347998961","33302268204333460697797465021037210175","214371846999978358185522176872997427511","339994169504411628922283014169364048797"]},"id":"ASB-A-293301736-79a7f58a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db"},{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueToast"},"deprecated":false,"digest":{"function_hash":"145575933447579522652520267726728119690","length":2182},"id":"ASB-A-293301736-912e8e8d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java","function":"showAccessNotificationLocked"},"deprecated":false,"digest":{"function_hash":"140153105100582210719064882995352522392","length":1860},"id":"ASB-A-293301736-f5a6836c","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db"],"severity":"High","spl":"2024-05-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-293301736.json"}}],"schema_version":"1.9.0"}