{"id":"ASB-A-299931761","details":"In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-299931761","CVE-2024-23704"],"modified":"2026-05-27T15:53:17.428190120Z","published":"2024-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/2e90322bab7de1deaf3c82e207bf4404b92743d7"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2024-04-01"}]}],"versions":["14-next"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-299931761-93e577ee","signature_version":"v1","deprecated":false,"digest":{"line_hashes":["304908083314054415826178321478903199900","92829774652229226396613894627617119109","165283700952960222520899569461947905195","272867405623721607522721949130899071488","47094200591307887012498369411850846673","332087609072455182703974401199847417928","267063775795884427666077931740735262588","308336175154960398757381536582125074328","98804998587821721315467228299898039967"],"threshold":0.9},"signature_type":"Line","target":{"file":"src/com/android/settings/wifi/WifiDialogActivity.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/51fa3d798ad0397122bbb2143bc24efe1a705be9"},{"id":"ASB-A-299931761-f109cd99","deprecated":false,"signature_version":"v1","digest":{"function_hash":"12017830568597260975719184582897496976","length":1115},"signature_type":"Function","target":{"file":"src/com/android/settings/wifi/WifiDialogActivity.java","function":"onCreate"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/51fa3d798ad0397122bbb2143bc24efe1a705be9"}],"types":["EoP"],"spl":"2024-04-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/51fa3d798ad0397122bbb2143bc24efe1a705be9"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-299931761.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-04-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-299931761-951e4eed","target":{"file":"src/com/android/settings/wifi/WifiDialogActivity.java"},"signature_version":"v1","digest":{"line_hashes":["331680241548120640732637950813423618419","330625712644560439905665376406109280763","214416774826381198887431004990514828941","123464542501830518251302421673961665693","100383292714303344328591006572568725033","53914481670964070342629675062259607123","290489390437304356837269100143485880537","145218590775382854201468427449450430113","85670028455605829055933677344838523182","4793110726557626096114028258196273961","79339572396844216866429910254617453268","179679681544337826586295570893219464756","98804998587821721315467228299898039967"],"threshold":0.9},"signature_type":"Line","deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/aabb15de74d4d24a81ed1f5b7789fe0a8407b256"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/aabb15de74d4d24a81ed1f5b7789fe0a8407b256","signature_version":"v1","digest":{"function_hash":"22540778110885899099295149132315098659","length":1070},"signature_type":"Function","deprecated":false,"match_only_versions":["13"],"target":{"file":"src/com/android/settings/wifi/WifiDialogActivity.java","function":"onCreate"},"id":"ASB-A-299931761-ea412ef0"}],"types":["EoP"],"spl":"2024-04-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/aabb15de74d4d24a81ed1f5b7789fe0a8407b256"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-299931761.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-04-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-299931761-81d91778","deprecated":false,"signature_version":"v1","digest":{"function_hash":"300529575560052376725951945053325304123","length":1120},"signature_type":"Function","target":{"file":"src/com/android/settings/wifi/WifiDialogActivity.java","function":"onCreate"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/a0409e582c30d2d6ff347eefd173ae169963df75"},{"id":"ASB-A-299931761-ea9b660e","signature_version":"v1","deprecated":false,"digest":{"line_hashes":["304908083314054415826178321478903199900","92829774652229226396613894627617119109","165283700952960222520899569461947905195","272867405623721607522721949130899071488","47094200591307887012498369411850846673","332087609072455182703974401199847417928","267063775795884427666077931740735262588","308336175154960398757381536582125074328","98804998587821721315467228299898039967"],"threshold":0.9},"signature_type":"Line","target":{"file":"src/com/android/settings/wifi/WifiDialogActivity.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/a0409e582c30d2d6ff347eefd173ae169963df75"}],"types":["EoP"],"spl":"2024-04-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/a0409e582c30d2d6ff347eefd173ae169963df75"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-299931761.json"}}],"schema_version":"1.7.5"}