{"id":"ASB-A-327749022","details":"In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-327749022","CVE-2024-40652"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2024-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/2909433f7d59dcdd0c74044b1c8e9f48927193dc"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2024-09-01"}]}],"versions":["15-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/70a5a0fd353cc6203d2926627de93786155ae5bc"],"severity":"High","spl":"2024-09-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/70a5a0fd353cc6203d2926627de93786155ae5bc","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["19362163005515750643544123919388329013","290741224690397986418975891065267248161","219738665414340179411321010363753811153"]},"id":"ASB-A-327749022-29e01610"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/70a5a0fd353cc6203d2926627de93786155ae5bc","target":{"function":"onCreate","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"deprecated":false,"digest":{"function_hash":"238781758302158020989358110392753045614","length":2115},"id":"ASB-A-327749022-eee848c8"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-327749022.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-09-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","spl":"2024-09-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7f1c4df02d153cb380a6147e86194bec2a564ab7","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java","function":"onCreate"},"deprecated":false,"digest":{"function_hash":"176407110612666438888725435408799119230","length":1116},"id":"ASB-A-327749022-b88389a4"},{"id":"ASB-A-327749022-fa66593f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7f1c4df02d153cb380a6147e86194bec2a564ab7","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["286508034715687416815902777443473931615","107208504080865737088335948576554403261","298868491214440637583172315063625393345","276588409617583572845412997902157823092"]}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/7f1c4df02d153cb380a6147e86194bec2a564ab7"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-327749022.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-09-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/2f0db305a6bb41d04ccab2ecd31a56bbff8e85fe"],"severity":"High","spl":"2024-09-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-327749022-20713dc7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2f0db305a6bb41d04ccab2ecd31a56bbff8e85fe","target":{"function":"onCreate","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"deprecated":false,"digest":{"length":1317,"function_hash":"212141030707619259850086931072691727014"}},{"id":"ASB-A-327749022-ad072e31","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2f0db305a6bb41d04ccab2ecd31a56bbff8e85fe","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["286508034715687416815902777443473931615","107208504080865737088335948576554403261","248930167963912118203140179375187790429","284029657598172104678731367095880218079"]}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-327749022.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-09-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2024-09-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["19362163005515750643544123919388329013","290741224690397986418975891065267248161","219738665414340179411321010363753811153"]},"id":"ASB-A-327749022-e43608ee","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d83f47397e61d5ec04866af20efcb935a58cbdff","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d83f47397e61d5ec04866af20efcb935a58cbdff","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java","function":"onCreate"},"deprecated":false,"digest":{"length":1985,"function_hash":"285333677698393631617662155273995837399"},"id":"ASB-A-327749022-f3483d58","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/d83f47397e61d5ec04866af20efcb935a58cbdff"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-327749022.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-09-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"238781758302158020989358110392753045614","length":2115},"id":"ASB-A-327749022-30c1b188","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c02f4ee1936ec5aea5231ebe5afcef27f4bd751c","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java","function":"onCreate"}},{"digest":{"line_hashes":["19362163005515750643544123919388329013","290741224690397986418975891065267248161","219738665414340179411321010363753811153"],"threshold":0.9},"id":"ASB-A-327749022-e85c1040","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c02f4ee1936ec5aea5231ebe5afcef27f4bd751c","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/c02f4ee1936ec5aea5231ebe5afcef27f4bd751c"],"severity":"High","spl":"2024-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-327749022.json"}}],"schema_version":"1.9.0"}