{"id":"ASB-A-299614635","details":"In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a confused deputy. This could lead to local information disclosure across users of a device with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-299614635","CVE-2024-0020"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2024-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/87f791f2351e366f842a0fd6fcb744069160d9a1"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2024-01-01"}]}],"versions":["14-next"],"ecosystem_specific":{"severity":"High","spl":"2024-01-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-299614635-065acc3c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/323fbda20e89f63de04432b73013168c601f9371","target":{"file":"src/com/android/settings/notification/app/NotificationSoundPreference.java"},"deprecated":false,"digest":{"line_hashes":["244902813052434661842441485994452268576","1470265332337816125180220308793965086","57769804188352913709452536410860732710","267030987409959330674181068354685961395","239305203939156505812503286064928414236","210274156540886564805206091300809974517","2276028966102486484124259244053844366","217693135701666993123833913915722737707","312814133840902754760257003548861556248","267666985439306411126055387894822910154","241253833600781509530847200327621739247"],"threshold":0.9}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/323fbda20e89f63de04432b73013168c601f9371","target":{"file":"src/com/android/settings/RingtonePreference.java"},"deprecated":false,"digest":{"line_hashes":["67497560578317127014272045548594946588","195307199094616503186745427404903767874","53844599271050986242836430920595201619","37161716100543129556808127249257550518","283393144688084524470517776860081466364","136108818125593654822997226755940533740","224743663338094736879323808168505154197","215498194041969910921109400779397566644","102715412356406950219770955940244365114"],"threshold":0.9},"id":"ASB-A-299614635-18fe407e"},{"target":{"file":"src/com/android/settings/notification/app/NotificationSoundPreference.java","function":"onActivityResult"},"deprecated":false,"digest":{"function_hash":"120472722574177565222090470095145432473","length":218},"id":"ASB-A-299614635-7039f3ad","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/323fbda20e89f63de04432b73013168c601f9371"},{"digest":{"threshold":0.9,"line_hashes":["299972317650352794714791699217783284608","191844759722648929479782295911552421845","153430676208536616323236930810652706374","194178792919112547590568262861829891188","68915302699121723208937599008582868508","101480845280434923836623065347101635008","108337442171598139649327533813201820898","25389244318409445479859519828427270334","339622259409124140851138065484563742370","50773108494218319629162492334728557952","88857652973540671063265222619278666318","34661713343624674485090555886414022635"]},"id":"ASB-A-299614635-870aebad","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/323fbda20e89f63de04432b73013168c601f9371","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/323fbda20e89f63de04432b73013168c601f9371","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java","function":"onSaveRingtone"},"deprecated":false,"digest":{"function_hash":"300803909963677125547592355207599431048","length":558},"id":"ASB-A-299614635-b9214ea2","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/323fbda20e89f63de04432b73013168c601f9371"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-299614635.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2024-01-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c"],"severity":"High","spl":"2024-01-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-299614635-0af506b0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"function":"onActivityResult","file":"src/com/android/settings/notification/app/NotificationSoundPreference.java"},"deprecated":false,"digest":{"function_hash":"120472722574177565222090470095145432473","length":218}},{"digest":{"line_hashes":["299972317650352794714791699217783284608","191844759722648929479782295911552421845","153430676208536616323236930810652706374","194178792919112547590568262861829891188","68915302699121723208937599008582868508","101480845280434923836623065347101635008","108337442171598139649327533813201820898","25389244318409445479859519828427270334","339622259409124140851138065484563742370","50773108494218319629162492334728557952","88857652973540671063265222619278666318","34661713343624674485090555886414022635"],"threshold":0.9},"id":"ASB-A-299614635-5f092177","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/RingtonePreference.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["67497560578317127014272045548594946588","195307199094616503186745427404903767874","53844599271050986242836430920595201619","37161716100543129556808127249257550518","283393144688084524470517776860081466364","136108818125593654822997226755940533740","224743663338094736879323808168505154197","215498194041969910921109400779397566644","102715412356406950219770955940244365114"]},"id":"ASB-A-299614635-7aa3c2c0"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"function":"onSaveRingtone","file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"function_hash":"300803909963677125547592355207599431048","length":558},"id":"ASB-A-299614635-9932920d","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/notification/app/NotificationSoundPreference.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["244902813052434661842441485994452268576","1470265332337816125180220308793965086","57769804188352913709452536410860732710","267030987409959330674181068354685961395","239305203939156505812503286064928414236","210274156540886564805206091300809974517","2276028966102486484124259244053844366","217693135701666993123833913915722737707","312814133840902754760257003548861556248","267666985439306411126055387894822910154","241253833600781509530847200327621739247"]},"id":"ASB-A-299614635-c67ea556","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-299614635.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-01-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","spl":"2024-01-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"line_hashes":["299972317650352794714791699217783284608","191844759722648929479782295911552421845","153430676208536616323236930810652706374","194178792919112547590568262861829891188","68915302699121723208937599008582868508","101480845280434923836623065347101635008","108337442171598139649327533813201820898","25389244318409445479859519828427270334","339622259409124140851138065484563742370","50773108494218319629162492334728557952","88857652973540671063265222619278666318","34661713343624674485090555886414022635"],"threshold":0.9},"id":"ASB-A-299614635-1def7cae","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"300803909963677125547592355207599431048","length":558},"id":"ASB-A-299614635-7edb62a1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java","function":"onSaveRingtone"}},{"digest":{"line_hashes":["244902813052434661842441485994452268576","1470265332337816125180220308793965086","57769804188352913709452536410860732710","267030987409959330674181068354685961395","239305203939156505812503286064928414236","210274156540886564805206091300809974517","2276028966102486484124259244053844366","217693135701666993123833913915722737707","312814133840902754760257003548861556248","267666985439306411126055387894822910154","241253833600781509530847200327621739247"],"threshold":0.9},"id":"ASB-A-299614635-ccbfce1b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/notification/app/NotificationSoundPreference.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/RingtonePreference.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["67497560578317127014272045548594946588","195307199094616503186745427404903767874","53844599271050986242836430920595201619","37161716100543129556808127249257550518","283393144688084524470517776860081466364","136108818125593654822997226755940533740","224743663338094736879323808168505154197","215498194041969910921109400779397566644","102715412356406950219770955940244365114"]},"id":"ASB-A-299614635-e8006ced","signature_type":"Line"},{"id":"ASB-A-299614635-fefa0fbb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/notification/app/NotificationSoundPreference.java","function":"onActivityResult"},"deprecated":false,"digest":{"function_hash":"120472722574177565222090470095145432473","length":218}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-299614635.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-01-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2024-01-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/RingtonePreference.java"},"deprecated":false,"digest":{"line_hashes":["67497560578317127014272045548594946588","195307199094616503186745427404903767874","53844599271050986242836430920595201619","37161716100543129556808127249257550518","283393144688084524470517776860081466364","136108818125593654822997226755940533740","224743663338094736879323808168505154197","215498194041969910921109400779397566644","102715412356406950219770955940244365114"],"threshold":0.9},"id":"ASB-A-299614635-4631d24c","signature_type":"Line"},{"target":{"function":"onActivityResult","file":"src/com/android/settings/notification/app/NotificationSoundPreference.java"},"deprecated":false,"digest":{"function_hash":"120472722574177565222090470095145432473","length":218},"id":"ASB-A-299614635-5d5512bf","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"line_hashes":["299972317650352794714791699217783284608","191844759722648929479782295911552421845","153430676208536616323236930810652706374","194178792919112547590568262861829891188","68915302699121723208937599008582868508","101480845280434923836623065347101635008","108337442171598139649327533813201820898","25389244318409445479859519828427270334","339622259409124140851138065484563742370","50773108494218319629162492334728557952","88857652973540671063265222619278666318","34661713343624674485090555886414022635"],"threshold":0.9},"id":"ASB-A-299614635-70cd22c2","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java","function":"onSaveRingtone"},"deprecated":false,"digest":{"function_hash":"300803909963677125547592355207599431048","length":558},"id":"ASB-A-299614635-93f39304","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/notification/app/NotificationSoundPreference.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["244902813052434661842441485994452268576","1470265332337816125180220308793965086","57769804188352913709452536410860732710","267030987409959330674181068354685961395","239305203939156505812503286064928414236","210274156540886564805206091300809974517","2276028966102486484124259244053844366","217693135701666993123833913915722737707","312814133840902754760257003548861556248","267666985439306411126055387894822910154","241253833600781509530847200327621739247"]},"id":"ASB-A-299614635-e176c3e2","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-299614635.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-01-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2024-01-01","types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/settings/DefaultRingtonePreference.java","function":"onSaveRingtone"},"deprecated":false,"digest":{"function_hash":"300803909963677125547592355207599431048","length":558},"id":"ASB-A-299614635-10220db9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/RingtonePreference.java"},"deprecated":false,"digest":{"line_hashes":["67497560578317127014272045548594946588","195307199094616503186745427404903767874","53844599271050986242836430920595201619","37161716100543129556808127249257550518","283393144688084524470517776860081466364","136108818125593654822997226755940533740","224743663338094736879323808168505154197","215498194041969910921109400779397566644","102715412356406950219770955940244365114"],"threshold":0.9},"id":"ASB-A-299614635-25c47147","signature_type":"Line"},{"digest":{"line_hashes":["299972317650352794714791699217783284608","191844759722648929479782295911552421845","153430676208536616323236930810652706374","194178792919112547590568262861829891188","68915302699121723208937599008582868508","101480845280434923836623065347101635008","108337442171598139649327533813201820898","25389244318409445479859519828427270334","339622259409124140851138065484563742370","50773108494218319629162492334728557952","88857652973540671063265222619278666318","34661713343624674485090555886414022635"],"threshold":0.9},"id":"ASB-A-299614635-aa9573ee","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false},{"deprecated":false,"digest":{"length":218,"function_hash":"120472722574177565222090470095145432473"},"id":"ASB-A-299614635-c517a3ff","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/notification/app/NotificationSoundPreference.java","function":"onActivityResult"}},{"digest":{"line_hashes":["244902813052434661842441485994452268576","1470265332337816125180220308793965086","57769804188352913709452536410860732710","267030987409959330674181068354685961395","239305203939156505812503286064928414236","210274156540886564805206091300809974517","2276028966102486484124259244053844366","217693135701666993123833913915722737707","312814133840902754760257003548861556248","267666985439306411126055387894822910154","241253833600781509530847200327621739247"],"threshold":0.9},"id":"ASB-A-299614635-d56a6b78","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c","target":{"file":"src/com/android/settings/notification/app/NotificationSoundPreference.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/7ba175eaeb6e8f1ea54e2ec13685d1cf1e9aad1c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-299614635.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-01-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"digest":{"line_hashes":["299972317650352794714791699217783284608","191844759722648929479782295911552421845","153430676208536616323236930810652706374","194178792919112547590568262861829891188","68915302699121723208937599008582868508","101480845280434923836623065347101635008","108337442171598139649327533813201820898","25389244318409445479859519828427270334","339622259409124140851138065484563742370","50773108494218319629162492334728557952","88857652973540671063265222619278666318","34661713343624674485090555886414022635"],"threshold":0.9},"id":"ASB-A-299614635-05cee757","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1876c449915c764242976280918758585689c82d","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false},{"target":{"file":"src/com/android/settings/DefaultRingtonePreference.java","function":"onSaveRingtone"},"deprecated":false,"digest":{"length":558,"function_hash":"300803909963677125547592355207599431048"},"id":"ASB-A-299614635-1b725e37","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1876c449915c764242976280918758585689c82d"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1876c449915c764242976280918758585689c82d","target":{"file":"src/com/android/settings/notification/app/NotificationSoundPreference.java","function":"onActivityResult"},"deprecated":false,"digest":{"function_hash":"120472722574177565222090470095145432473","length":218},"id":"ASB-A-299614635-424f897f","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1876c449915c764242976280918758585689c82d","target":{"file":"src/com/android/settings/notification/app/NotificationSoundPreference.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["244902813052434661842441485994452268576","1470265332337816125180220308793965086","57769804188352913709452536410860732710","267030987409959330674181068354685961395","239305203939156505812503286064928414236","210274156540886564805206091300809974517","2276028966102486484124259244053844366","217693135701666993123833913915722737707","312814133840902754760257003548861556248","267666985439306411126055387894822910154","241253833600781509530847200327621739247"]},"id":"ASB-A-299614635-48e4628e","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1876c449915c764242976280918758585689c82d","target":{"file":"src/com/android/settings/RingtonePreference.java"},"deprecated":false,"digest":{"line_hashes":["67497560578317127014272045548594946588","195307199094616503186745427404903767874","53844599271050986242836430920595201619","37161716100543129556808127249257550518","283393144688084524470517776860081466364","136108818125593654822997226755940533740","224743663338094736879323808168505154197","215498194041969910921109400779397566644","102715412356406950219770955940244365114"],"threshold":0.9},"id":"ASB-A-299614635-778c9eb7"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/1876c449915c764242976280918758585689c82d"],"severity":"High","spl":"2024-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-299614635.json"}}],"schema_version":"1.9.0"}