{"id":"ASB-A-341886134","details":"In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-341886134","CVE-2024-40657"],"modified":"2026-04-13T15:04:09.269232Z","published":"2024-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/8261e0ade3b414fea61d7fe9d8bc6df7a3fc8603"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2024-09-01"}]}],"versions":["15-next"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2cb9b10ed97b1b9b29661115789605a762f3c2ef","signature_version":"v1","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"addPreferencesForType"},"signature_type":"Function","digest":{"length":1006,"function_hash":"7928059090134792495836311604727565765"},"deprecated":false,"id":"ASB-A-341886134-8c06b381"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2cb9b10ed97b1b9b29661115789605a762f3c2ef","signature_version":"v1","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["116159570667149066438513721319523770520","15187236630171667384877655672379953714","47010250795352050450613253991698385311","213861242580948616203595746471641040115","104443188972081370040743785257368431352","269157357178476633296502023571864281715","334351114689869329178129039599676779337","222132524490563603886792480049819180119","294252797493706180167075659508313992486","28952066461465902020416713843837662470","254967401633031109266301443063538926669","137766489743747210585819631384922383781","7069050857304589735339236764032673548","257075798218447214675853020340324388316","71125938467091698570980315168261251420","99985113270951985539927909697017026260","46167360946225016189541062569585315829"]},"deprecated":false,"id":"ASB-A-341886134-e5e4fb89"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/2cb9b10ed97b1b9b29661115789605a762f3c2ef"],"severity":"High","spl":"2024-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-341886134.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-09-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7e0b376b11318e1e79b31bac6aafc0c923868bc4","signature_version":"v1","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"addPreferencesForType"},"signature_type":"Function","digest":{"length":959,"function_hash":"124731057811841337735006470403937802891"},"deprecated":false,"id":"ASB-A-341886134-4120cdd9"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7e0b376b11318e1e79b31bac6aafc0c923868bc4","signature_version":"v1","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["116159570667149066438513721319523770520","15187236630171667384877655672379953714","47010250795352050450613253991698385311","213861242580948616203595746471641040115","104443188972081370040743785257368431352","269157357178476633296502023571864281715","334351114689869329178129039599676779337","222132524490563603886792480049819180119","294252797493706180167075659508313992486","28952066461465902020416713843837662470","254967401633031109266301443063538926669","137766489743747210585819631384922383781","7069050857304589735339236764032673548","257075798218447214675853020340324388316","71125938467091698570980315168261251420","99985113270951985539927909697017026260","46167360946225016189541062569585315829"]},"deprecated":false,"id":"ASB-A-341886134-e48d5485"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/7e0b376b11318e1e79b31bac6aafc0c923868bc4"],"severity":"High","spl":"2024-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-341886134.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-09-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e2dc98c21db7ac35137417bf72f33177a1b70b48","signature_version":"v1","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["116159570667149066438513721319523770520","15187236630171667384877655672379953714","47010250795352050450613253991698385311","213861242580948616203595746471641040115","104443188972081370040743785257368431352","269157357178476633296502023571864281715","334351114689869329178129039599676779337","222132524490563603886792480049819180119","294252797493706180167075659508313992486","28952066461465902020416713843837662470","254967401633031109266301443063538926669","137766489743747210585819631384922383781","7069050857304589735339236764032673548","257075798218447214675853020340324388316","71125938467091698570980315168261251420","99985113270951985539927909697017026260","46167360946225016189541062569585315829"]},"deprecated":false,"id":"ASB-A-341886134-5cc797b2"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e2dc98c21db7ac35137417bf72f33177a1b70b48","signature_version":"v1","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"addPreferencesForType"},"signature_type":"Function","digest":{"length":959,"function_hash":"124731057811841337735006470403937802891"},"deprecated":false,"id":"ASB-A-341886134-5d81b609"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/e2dc98c21db7ac35137417bf72f33177a1b70b48"],"severity":"High","spl":"2024-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-341886134.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-09-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/24e2f2d2f65d233527e1f50e3e215c266f040792","signature_version":"v1","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"addPreferencesForType"},"signature_type":"Function","digest":{"length":959,"function_hash":"124731057811841337735006470403937802891"},"deprecated":false,"id":"ASB-A-341886134-cc7fa951"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/24e2f2d2f65d233527e1f50e3e215c266f040792","signature_version":"v1","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["116159570667149066438513721319523770520","15187236630171667384877655672379953714","47010250795352050450613253991698385311","213861242580948616203595746471641040115","104443188972081370040743785257368431352","269157357178476633296502023571864281715","334351114689869329178129039599676779337","222132524490563603886792480049819180119","294252797493706180167075659508313992486","28952066461465902020416713843837662470","254967401633031109266301443063538926669","137766489743747210585819631384922383781","7069050857304589735339236764032673548","257075798218447214675853020340324388316","71125938467091698570980315168261251420","99985113270951985539927909697017026260","46167360946225016189541062569585315829"]},"deprecated":false,"id":"ASB-A-341886134-fd4011a0"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/24e2f2d2f65d233527e1f50e3e215c266f040792"],"severity":"High","spl":"2024-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-341886134.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-09-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d43f82be7a1d2fc5659afeb9d7eca45bf4ba3a8e","signature_version":"v1","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["116159570667149066438513721319523770520","15187236630171667384877655672379953714","47010250795352050450613253991698385311","213861242580948616203595746471641040115","104443188972081370040743785257368431352","269157357178476633296502023571864281715","334351114689869329178129039599676779337","222132524490563603886792480049819180119","294252797493706180167075659508313992486","28952066461465902020416713843837662470","254967401633031109266301443063538926669","137766489743747210585819631384922383781","7069050857304589735339236764032673548","257075798218447214675853020340324388316","71125938467091698570980315168261251420","99985113270951985539927909697017026260","46167360946225016189541062569585315829"]},"deprecated":false,"id":"ASB-A-341886134-6d94808a"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d43f82be7a1d2fc5659afeb9d7eca45bf4ba3a8e","signature_version":"v1","target":{"file":"src/com/android/settings/accounts/AccountTypePreferenceLoader.java","function":"addPreferencesForType"},"signature_type":"Function","digest":{"length":959,"function_hash":"124731057811841337735006470403937802891"},"deprecated":false,"id":"ASB-A-341886134-a363f902"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/d43f82be7a1d2fc5659afeb9d7eca45bf4ba3a8e"],"severity":"High","spl":"2024-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-341886134.json"}}],"schema_version":"1.7.5"}