{"id":"ASB-A-294104969","details":"In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-294104969","CVE-2024-0019"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2024-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/707fc94ec3df4cf6b985e6d06c2588690d1a025a"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2024-01-01"}]}],"versions":["14-next"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","id":"ASB-A-294104969-68f00462","target":{"function":"setListening","file":"packages/SystemUI/src/com/android/systemui/appops/AppOpsControllerImpl.java"},"deprecated":false,"digest":{"function_hash":"44267952099852795945745403279417787116","length":1021},"source":"https://android.googlesource.com/platform/frameworks/base/+/084a7afb4bb41e0cdfdbe67bdd60728d940b4331"},{"signature_type":"Line","signature_version":"v1","id":"ASB-A-294104969-ed13f5c6","target":{"file":"packages/SystemUI/src/com/android/systemui/appops/AppOpsControllerImpl.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["303754758545901031315053932279936667687","179369087026665857653461905514250036049","280073471401331953840175590183702213769","138083083650702768372487772377500431835","62881756389589885982293259922463705233","272344389666115478536605592910331469022","97064714606841024654540877629919399578","330829465082715374033114998556180328452","295747577431459138783214723720080232905","60324878586981643617013299950150862577","192324834949022730068228180094440535415"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/084a7afb4bb41e0cdfdbe67bdd60728d940b4331"}],"types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/084a7afb4bb41e0cdfdbe67bdd60728d940b4331"],"spl":"2024-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-294104969.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-01-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","id":"ASB-A-294104969-45d2dfa8","target":{"file":"packages/SystemUI/src/com/android/systemui/appops/AppOpsControllerImpl.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["101981006327478357457461249910970829546","179369087026665857653461905514250036049","280073471401331953840175590183702213769","138083083650702768372487772377500431835","62881756389589885982293259922463705233","272344389666115478536605592910331469022","97064714606841024654540877629919399578","330829465082715374033114998556180328452","295747577431459138783214723720080232905","60324878586981643617013299950150862577","192324834949022730068228180094440535415"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/dac02d61f8cf755f733ef6c2fbd0f939ea13ee23"},{"signature_type":"Function","target":{"function":"setListening","file":"packages/SystemUI/src/com/android/systemui/appops/AppOpsControllerImpl.java"},"id":"ASB-A-294104969-d180ff55","signature_version":"v1","deprecated":false,"digest":{"function_hash":"44267952099852795945745403279417787116","length":1021},"source":"https://android.googlesource.com/platform/frameworks/base/+/dac02d61f8cf755f733ef6c2fbd0f939ea13ee23"}],"types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/dac02d61f8cf755f733ef6c2fbd0f939ea13ee23"],"spl":"2024-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-294104969.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-01-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","target":{"file":"packages/SystemUI/src/com/android/systemui/appops/AppOpsControllerImpl.java"},"id":"ASB-A-294104969-3c049c20","signature_version":"v1","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["101981006327478357457461249910970829546","179369087026665857653461905514250036049","280073471401331953840175590183702213769","138083083650702768372487772377500431835","62881756389589885982293259922463705233","272344389666115478536605592910331469022","97064714606841024654540877629919399578","330829465082715374033114998556180328452","295747577431459138783214723720080232905","60324878586981643617013299950150862577","192324834949022730068228180094440535415"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/dac02d61f8cf755f733ef6c2fbd0f939ea13ee23"},{"signature_type":"Function","signature_version":"v1","id":"ASB-A-294104969-d1e42f11","target":{"function":"setListening","file":"packages/SystemUI/src/com/android/systemui/appops/AppOpsControllerImpl.java"},"deprecated":false,"digest":{"function_hash":"44267952099852795945745403279417787116","length":1021},"source":"https://android.googlesource.com/platform/frameworks/base/+/dac02d61f8cf755f733ef6c2fbd0f939ea13ee23"}],"types":["ID"],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/dac02d61f8cf755f733ef6c2fbd0f939ea13ee23"],"spl":"2024-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-294104969.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-01-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","id":"ASB-A-294104969-bf48d8e8","target":{"file":"packages/SystemUI/src/com/android/systemui/appops/AppOpsControllerImpl.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["101981006327478357457461249910970829546","179369087026665857653461905514250036049","280073471401331953840175590183702213769","138083083650702768372487772377500431835","62881756389589885982293259922463705233","272344389666115478536605592910331469022","97064714606841024654540877629919399578","330829465082715374033114998556180328452","295747577431459138783214723720080232905","60324878586981643617013299950150862577","192324834949022730068228180094440535415"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/dac02d61f8cf755f733ef6c2fbd0f939ea13ee23"},{"signature_type":"Function","signature_version":"v1","id":"ASB-A-294104969-f76b57f9","target":{"function":"setListening","file":"packages/SystemUI/src/com/android/systemui/appops/AppOpsControllerImpl.java"},"deprecated":false,"digest":{"function_hash":"44267952099852795945745403279417787116","length":1021},"source":"https://android.googlesource.com/platform/frameworks/base/+/dac02d61f8cf755f733ef6c2fbd0f939ea13ee23"}],"spl":"2024-01-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/dac02d61f8cf755f733ef6c2fbd0f939ea13ee23"],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-294104969.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-01-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","target":{"function":"setListening","file":"packages/SystemUI/src/com/android/systemui/appops/AppOpsControllerImpl.java"},"id":"ASB-A-294104969-689adc90","signature_version":"v1","deprecated":false,"digest":{"function_hash":"44267952099852795945745403279417787116","length":1021},"source":"https://android.googlesource.com/platform/frameworks/base/+/12d0064ef788844afbb85ac7e65f8d4b1d37bc5c"},{"signature_type":"Line","signature_version":"v1","id":"ASB-A-294104969-703699ec","target":{"file":"packages/SystemUI/src/com/android/systemui/appops/AppOpsControllerImpl.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["303754758545901031315053932279936667687","179369087026665857653461905514250036049","280073471401331953840175590183702213769","138083083650702768372487772377500431835","62881756389589885982293259922463705233","272344389666115478536605592910331469022","97064714606841024654540877629919399578","330829465082715374033114998556180328452","295747577431459138783214723720080232905","60324878586981643617013299950150862577","192324834949022730068228180094440535415"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/12d0064ef788844afbb85ac7e65f8d4b1d37bc5c"}],"spl":"2024-01-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/12d0064ef788844afbb85ac7e65f8d4b1d37bc5c"],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-294104969.json"}}],"schema_version":"1.7.5"}