{"id":"ASB-A-326057017","details":"In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the device due to a missing permission check. This could lead to local escalation of privilege across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-326057017","CVE-2024-43088"],"modified":"2026-05-01T15:24:27.653932Z","published":"2024-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/975c28535419be1cc45f66712f41e4a7a40e6001"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2024-11-01"}]}],"versions":["15-next"],"ecosystem_specific":{"spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/d3b3edd45167515579ab156533754e56ac813f35","https://android.googlesource.com/platform/packages/apps/Settings/+/78ee160c20eeb41bb7eccfde9af772a9b1a958d6"],"severity":"High","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","digest":{"function_hash":"195287210104496339890085245394357221293","length":1315},"target":{"function":"retrieveAppEntry","file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/78ee160c20eeb41bb7eccfde9af772a9b1a958d6","deprecated":false,"signature_type":"Function","id":"ASB-A-326057017-4d84780d"},{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["146468046810668391626191160772369193825","58214069278375581193240716053668016387","118458680043264427161078560444741096551","258340999341649564567845986161705016654","160218103706771944482748181118729855894","24161462096081758301042185106835946852","160513651410221718851601212210989974898","148895478068658423118081653364542686348","229576963873663300966969905449561113344","149175562642938948599377976695334832391","222445708500777444183075011016946619344","640951057105632582082164522887529747"]},"target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d3b3edd45167515579ab156533754e56ac813f35","deprecated":false,"signature_type":"Line","id":"ASB-A-326057017-60664c11"},{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["21351181494580230582457912368684138643","246104028227763312342528560995913456137","112447764429510990901677734720782893219","280719753542198840683446604616999483129","335390497914652248739796981457601185558","169628784901101339119707113841498106660","310435184706524923602167036726128903454","229576963873663300966969905449561113344","334330305333797608329864193959475347539","110570043621086428945814529144846361935","321798546454385257581027784768169491613","104753129509495944390815046349058120392","75082986712595943242923943073286406825","64486560918658915169091409835859581607","120275387461687019757958406461914187909"]},"target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/78ee160c20eeb41bb7eccfde9af772a9b1a958d6","deprecated":false,"signature_type":"Line","id":"ASB-A-326057017-9f9c521f"},{"signature_version":"v1","digest":{"function_hash":"239794650785354858716998708236409256045","length":1215},"target":{"function":"retrieveAppEntry","file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d3b3edd45167515579ab156533754e56ac813f35","deprecated":false,"signature_type":"Function","id":"ASB-A-326057017-af90b2fd"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-326057017.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-11-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/7d2552bf93e675b0a1d0acda718d9466fd8a4d47"],"severity":"High","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["146468046810668391626191160772369193825","58214069278375581193240716053668016387","70407893938082198783244595396619524615","118458680043264427161078560444741096551","258340999341649564567845986161705016654","160218103706771944482748181118729855894","148895478068658423118081653364542686348","229576963873663300966969905449561113344","334330305333797608329864193959475347539","110570043621086428945814529144846361935","321798546454385257581027784768169491613","149175562642938948599377976695334832391","222445708500777444183075011016946619344","640951057105632582082164522887529747"]},"target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7d2552bf93e675b0a1d0acda718d9466fd8a4d47","deprecated":false,"signature_type":"Line","id":"ASB-A-326057017-4d004175"},{"signature_version":"v1","digest":{"function_hash":"69398252931524318733979460612749742282","length":1123},"target":{"function":"retrieveAppEntry","file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7d2552bf93e675b0a1d0acda718d9466fd8a4d47","deprecated":false,"signature_type":"Function","id":"ASB-A-326057017-9c2034f0"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-326057017.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-11-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/ff4daf4bf4c98ed8aa79fd94eb39fc54bd559f19"],"severity":"High","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["146468046810668391626191160772369193825","58214069278375581193240716053668016387","118458680043264427161078560444741096551","258340999341649564567845986161705016654","160218103706771944482748181118729855894","148895478068658423118081653364542686348","229576963873663300966969905449561113344","334330305333797608329864193959475347539","110570043621086428945814529144846361935","321798546454385257581027784768169491613","149175562642938948599377976695334832391","222445708500777444183075011016946619344","640951057105632582082164522887529747"]},"target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff4daf4bf4c98ed8aa79fd94eb39fc54bd559f19","deprecated":false,"signature_type":"Line","id":"ASB-A-326057017-57d35a17"},{"signature_version":"v1","digest":{"function_hash":"69398252931524318733979460612749742282","length":1123},"target":{"function":"retrieveAppEntry","file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff4daf4bf4c98ed8aa79fd94eb39fc54bd559f19","deprecated":false,"signature_type":"Function","id":"ASB-A-326057017-b3b88d96"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-326057017.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-11-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/c24808f9b6b8851f2a1d95a38f72a958986aebbf"],"severity":"High","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","digest":{"function_hash":"69398252931524318733979460612749742282","length":1123},"target":{"function":"retrieveAppEntry","file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c24808f9b6b8851f2a1d95a38f72a958986aebbf","deprecated":false,"signature_type":"Function","id":"ASB-A-326057017-de4471bb"},{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["146468046810668391626191160772369193825","58214069278375581193240716053668016387","118458680043264427161078560444741096551","258340999341649564567845986161705016654","160218103706771944482748181118729855894","148895478068658423118081653364542686348","229576963873663300966969905449561113344","334330305333797608329864193959475347539","110570043621086428945814529144846361935","321798546454385257581027784768169491613","149175562642938948599377976695334832391","222445708500777444183075011016946619344","640951057105632582082164522887529747"]},"target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c24808f9b6b8851f2a1d95a38f72a958986aebbf","deprecated":false,"signature_type":"Line","id":"ASB-A-326057017-de57e55c"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-326057017.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-11-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2024-11-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/20024f00a530b676608c9d924dd71322fd9a54e3"],"severity":"High","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","digest":{"function_hash":"69398252931524318733979460612749742282","length":1123},"target":{"function":"retrieveAppEntry","file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/20024f00a530b676608c9d924dd71322fd9a54e3","deprecated":false,"signature_type":"Function","id":"ASB-A-326057017-05b5a128"},{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["146468046810668391626191160772369193825","58214069278375581193240716053668016387","118458680043264427161078560444741096551","258340999341649564567845986161705016654","160218103706771944482748181118729855894","148895478068658423118081653364542686348","229576963873663300966969905449561113344","334330305333797608329864193959475347539","110570043621086428945814529144846361935","321798546454385257581027784768169491613","149175562642938948599377976695334832391","222445708500777444183075011016946619344","640951057105632582082164522887529747"]},"target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/20024f00a530b676608c9d924dd71322fd9a54e3","deprecated":false,"signature_type":"Line","id":"ASB-A-326057017-dff982ec"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-326057017.json"}}],"schema_version":"1.7.5"}