{"id":"ASB-A-293301736","details":"In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-293301736","CVE-2024-23708"],"modified":"2026-04-10T16:16:18.068628Z","published":"2024-05-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-05-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/0c095c365ede36257e829769194f9596a598e560"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2024-05-01"}]}],"versions":["14-next"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595","signature_version":"v1","signature_type":"Function","deprecated":false,"digest":{"length":1860,"function_hash":"140153105100582210719064882995352522392"},"id":"ASB-A-293301736-439c565d","target":{"function":"showAccessNotificationLocked","file":"services/core/java/com/android/server/clipboard/ClipboardService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595","signature_version":"v1","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["125599800300640038754283766824678389395","3023639384543577288562536460166227898","8963212570310550905245133942830702436","4526041545684604913922208798118986461","298346877194448923487418883407950380948","160740365947827704916635276698930127768","239153161959907254205043043208137548203","49579684893671908030064883749971197156"],"threshold":0.9},"id":"ASB-A-293301736-5a47489d","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595","signature_version":"v1","signature_type":"Function","deprecated":false,"digest":{"length":2182,"function_hash":"145575933447579522652520267726728119690"},"id":"ASB-A-293301736-c47277be","target":{"function":"enqueueToast","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595","signature_version":"v1","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["16611719256377645983705321024960876530","117412489361192054082462128599202202669","327375500565017324979474791578469601077","268091315116038178718845494633414811208","271717791748026080633539960008347998961","33302268204333460697797465021037210175","214371846999978358185522176872997427511","339994169504411628922283014169364048797"],"threshold":0.9},"id":"ASB-A-293301736-e2b77b06","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/af5fcacd4bb2c45347fc2db6ed6dbbbb7dc78595"],"severity":"High","types":["EoP"],"spl":"2024-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-293301736.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-05-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","signature_version":"v1","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["148183948512628701485280756920349622278","166077678838537786944914696536831747595","165604897802186618009002619732948475636","148325104774793000025904769572606837950"],"threshold":0.9},"id":"ASB-A-293301736-64d11196","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","signature_version":"v1","signature_type":"Function","deprecated":false,"digest":{"length":1817,"function_hash":"58557464394478024950270382125085909310"},"id":"ASB-A-293301736-8404304a","target":{"function":"enqueueToast","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","signature_version":"v1","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["125599800300640038754283766824678389395","3023639384543577288562536460166227898","8963212570310550905245133942830702436","4526041545684604913922208798118986461","298346877194448923487418883407950380948","298352797132916608215461151575427450436","319685266089544305277604211166019926183","48013361902388822231982465596199263183"],"threshold":0.9},"id":"ASB-A-293301736-b21dc6ba","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","signature_version":"v1","signature_type":"Function","deprecated":false,"digest":{"length":1166,"function_hash":"162520886564088941042872260154283953673"},"id":"ASB-A-293301736-b9ea1e0a","target":{"function":"showAccessNotificationLocked","file":"services/core/java/com/android/server/clipboard/ClipboardService.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6"],"severity":"High","types":["EoP"],"spl":"2024-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-293301736.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-05-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","signature_version":"v1","signature_type":"Function","deprecated":false,"digest":{"length":1817,"function_hash":"58557464394478024950270382125085909310"},"id":"ASB-A-293301736-adac3c40","target":{"function":"enqueueToast","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","signature_version":"v1","signature_type":"Function","deprecated":false,"digest":{"length":1166,"function_hash":"162520886564088941042872260154283953673"},"id":"ASB-A-293301736-da5a45ff","target":{"function":"showAccessNotificationLocked","file":"services/core/java/com/android/server/clipboard/ClipboardService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","signature_version":"v1","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["148183948512628701485280756920349622278","166077678838537786944914696536831747595","165604897802186618009002619732948475636","148325104774793000025904769572606837950"],"threshold":0.9},"id":"ASB-A-293301736-e30b7119","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6","signature_version":"v1","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["125599800300640038754283766824678389395","3023639384543577288562536460166227898","8963212570310550905245133942830702436","4526041545684604913922208798118986461","298346877194448923487418883407950380948","298352797132916608215461151575427450436","319685266089544305277604211166019926183","48013361902388822231982465596199263183"],"threshold":0.9},"id":"ASB-A-293301736-f5fb0b62","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/67721fcfb3198f220c90c976f870407a0bb8d6c6"],"severity":"High","types":["EoP"],"spl":"2024-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-293301736.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-05-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80","signature_version":"v1","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["148183948512628701485280756920349622278","166077678838537786944914696536831747595","165604897802186618009002619732948475636","148325104774793000025904769572606837950"],"threshold":0.9},"id":"ASB-A-293301736-31305b67","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80","signature_version":"v1","signature_type":"Function","deprecated":false,"digest":{"length":1817,"function_hash":"58557464394478024950270382125085909310"},"id":"ASB-A-293301736-3eaa6049","target":{"function":"enqueueToast","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80","signature_version":"v1","signature_type":"Function","deprecated":false,"digest":{"length":1315,"function_hash":"25192570982462651463085555734020786691"},"id":"ASB-A-293301736-688bc3f4","target":{"function":"showAccessNotificationLocked","file":"services/core/java/com/android/server/clipboard/ClipboardService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80","signature_version":"v1","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["125599800300640038754283766824678389395","3023639384543577288562536460166227898","8963212570310550905245133942830702436","4526041545684604913922208798118986461","298346877194448923487418883407950380948","298352797132916608215461151575427450436","319685266089544305277604211166019926183","48013361902388822231982465596199263183"],"threshold":0.9},"id":"ASB-A-293301736-99a29437","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/58d89b491668663963e66906196fd93b9c73ee80"],"severity":"High","types":["EoP"],"spl":"2024-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-293301736.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-05-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db","signature_version":"v1","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["125599800300640038754283766824678389395","3023639384543577288562536460166227898","8963212570310550905245133942830702436","4526041545684604913922208798118986461","298346877194448923487418883407950380948","160740365947827704916635276698930127768","239153161959907254205043043208137548203","49579684893671908030064883749971197156"],"threshold":0.9},"id":"ASB-A-293301736-3ee1c82d","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db","signature_version":"v1","signature_type":"Line","deprecated":false,"digest":{"line_hashes":["16611719256377645983705321024960876530","117412489361192054082462128599202202669","327375500565017324979474791578469601077","268091315116038178718845494633414811208","271717791748026080633539960008347998961","33302268204333460697797465021037210175","214371846999978358185522176872997427511","339994169504411628922283014169364048797"],"threshold":0.9},"id":"ASB-A-293301736-79a7f58a","target":{"file":"services/core/java/com/android/server/clipboard/ClipboardService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db","signature_version":"v1","signature_type":"Function","deprecated":false,"digest":{"length":2182,"function_hash":"145575933447579522652520267726728119690"},"id":"ASB-A-293301736-912e8e8d","target":{"function":"enqueueToast","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db","signature_version":"v1","signature_type":"Function","deprecated":false,"digest":{"length":1860,"function_hash":"140153105100582210719064882995352522392"},"id":"ASB-A-293301736-f5a6836c","target":{"function":"showAccessNotificationLocked","file":"services/core/java/com/android/server/clipboard/ClipboardService.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/939612739c280b0204fe36d7549a77b94d55f3db"],"severity":"High","types":["EoP"],"spl":"2024-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-293301736.json"}}],"schema_version":"1.7.5"}