{"id":"ASB-A-353700779","details":"In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in the accessibility service settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-353700779","CVE-2024-43087"],"modified":"2026-04-17T15:55:28.020024Z","published":"2024-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/6253b87704bb097ad9963941bdddf3b86906a73e"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2024-11-01"}]}],"versions":["15-next"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"285217736839927846104457915613120063281","length":586},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59","target":{"function":"getInstalledAccessibilityPreferences","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-25407cd0","signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["53643916469238259854452842988089730024","204265615377755217008589766975429388409","224552377136192462414401324488823375021","300083948815293452740340559232823979128","151777093721093528519530941537586595011","227348184122705479764642046504563910938","309430992087905021959649753283495140069","154770167411320167871371466617305623942","283071587301044400978471877772411704024","238903126193692026002511292991439891563","23361965122673009338575945133464245890","322953361758059982968100930586045004616","297790052984669952356559188841740293899","136443585717022516651906898419346400312","291592497918444445045727609359281311139","294110705814170783188288414522890755284","286221995654019383477634097910676211337","29267644997104994178370439238980952909","231590730793634362835012547783006036433","157670959015415467435765265188968216195","166057002036976466685725911128549964206","167454418962087896468027446602216180308","47377734622387932219082867656242349283","29885222256389208818865732216592845603","252860654942489349840093374137536901795","336899545689661739715103336492359543259","270173845205473864919217312202549150302","199094980942431697736108256036597428971","329564856147238746096377231085346821371","135650350224906798138903084304606579469","39440192737140534685181176184129327863","22726738467314657543028235757086015848","136820200302208206752982668860368131397","110197140603571614223346042250493807142","159575296239032874854001524805330534609","157689259942631077750991062474842373331","248941801438301735415338249995250328489","35255370932940251654034679384895165268","190515898744714854494049044164210198663","14359388727780284010830083510877994071","338071805652869803460497078876804230421","86406938043031531806109904128794914518","271804081414488647122234091971213311408","310544204605694634424337129207603545393","171630429241967655806318385188031477839","298987347333534547850525962331963791021","96531097385401763076648393808317494475","299487251314348296712938856167263783288","310876815043111588651615434367469656936","129268457449606612113116987205451647942","330707914275439605711014643505052668095","106840940535445474879717452109830213001","108281749985512031164616665559814617661","122473974629179491822729504958904654734","253454171945359541081648152741858653481"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59","target":{"file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Line","id":"ASB-A-353700779-3a61a49f","signature_version":"v1"},{"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59","target":{"file":"tests/robotests/src/com/android/settings/testutils/shadow/ShadowAccessibilityManager.java"},"digest":{"threshold":0.9,"line_hashes":["194611633686722999555843548120577447485","115177135498374500904052280419752696217","38815743889678716215398042049143720876","85116599841194138409239524860305909097","74851957185353664166667888334619845821","142157034503368663470470606306342602405","18191261222624075535279877560652234984","68413762186512236323614607183639971278","145071561646955445252423865444955940272","258941197841696008466606404099171758077","86454360718502623583724216880150005122","58455381986457782748276469341535820313","311728547441014078871566530114690790578","173058008182030071905961775938048934246"]},"signature_version":"v1","match_only_versions":["15-next"],"signature_type":"Line","id":"ASB-A-353700779-5c5c5f06"},{"digest":{"function_hash":"155448054326667516544572275453033287639","length":2628},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59","target":{"function":"updateServicePreferences","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-6af15dcc","signature_version":"v1"},{"digest":{"function_hash":"165781523433872076764536556235650935883","length":242},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59","target":{"function":"containsPackageAndLabelInList","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-71926db3","signature_version":"v1"}],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/c38fd822ba27224c179b80de2b89a1e9ab8bee59"],"types":["EoP"],"spl":"2024-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353700779.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-11-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["144422750009371951600995196731036689622","155690637582515572617715167374539253670","60601569844597957729357498125277242461","111614628546416402698955181079145405406","294849969966961275002540312770227921085","31242838117669534691129301776187435189","9575903934300010857870388392986166443","257417760387597684732748376338482846517","332273860880998348933578912512777202152","63556312701202719457586516950924316929","78497599825161441577520928516283979155","289088847707262081491973581258519553518","135153836155980582756306013224028003918","306013477803140523853759126857236477915","312644131033760342415660335805232055346","69663769005949117252957252365175778868","63634561811135092964965095453685181067","129268457449606612113116987205451647942","279821722700640267769812859122951679057","143688957664535955797666872411459068603","81261708505312857542778728954142508842","150505307782422924855497374380983079670","278110562919455909216344619553282986499","168241266802551248217366618837482422812","196952287101980436559155027255620106751","253220766386414055761430999996545414847","130014035008290283032687500810472033193","102773042227712380051185624212894701760","193945555105656936453847297800470789796","24312057217877174375154752207075989864","5747207037135602253424381473973468446","253454171945359541081648152741858653481"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c4963a73f0d9266a246330527ef9422b336db91d","target":{"file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Line","id":"ASB-A-353700779-63daab78","signature_version":"v1"},{"digest":{"function_hash":"298404758624910439096961776660560705406","length":503},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c4963a73f0d9266a246330527ef9422b336db91d","target":{"function":"getInstalledAccessibilityList","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-c102603e","signature_version":"v1"},{"digest":{"function_hash":"14471867451777370060218690595941141253","length":500},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c4963a73f0d9266a246330527ef9422b336db91d","target":{"function":"containsTargetNameInList","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-daecfe0a","signature_version":"v1"}],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/c4963a73f0d9266a246330527ef9422b336db91d"],"types":["EoP"],"spl":"2024-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353700779.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-11-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"14471867451777370060218690595941141253","length":500},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1bcc4049583085522767c3da7866ee83d0f5e104","target":{"function":"containsTargetNameInList","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-1bda5fd7","signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["144422750009371951600995196731036689622","155690637582515572617715167374539253670","60601569844597957729357498125277242461","111614628546416402698955181079145405406","294849969966961275002540312770227921085","31242838117669534691129301776187435189","9575903934300010857870388392986166443","257417760387597684732748376338482846517","332273860880998348933578912512777202152","63556312701202719457586516950924316929","78497599825161441577520928516283979155","289088847707262081491973581258519553518","135153836155980582756306013224028003918","306013477803140523853759126857236477915","312644131033760342415660335805232055346","69663769005949117252957252365175778868","63634561811135092964965095453685181067","129268457449606612113116987205451647942","279821722700640267769812859122951679057","143688957664535955797666872411459068603","81261708505312857542778728954142508842","150505307782422924855497374380983079670","278110562919455909216344619553282986499","168241266802551248217366618837482422812","196952287101980436559155027255620106751","253220766386414055761430999996545414847","130014035008290283032687500810472033193","102773042227712380051185624212894701760","193945555105656936453847297800470789796","24312057217877174375154752207075989864","5747207037135602253424381473973468446","253454171945359541081648152741858653481"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1bcc4049583085522767c3da7866ee83d0f5e104","target":{"file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Line","id":"ASB-A-353700779-5e95aed3","signature_version":"v1"},{"digest":{"function_hash":"298404758624910439096961776660560705406","length":503},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1bcc4049583085522767c3da7866ee83d0f5e104","target":{"function":"getInstalledAccessibilityList","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-f2357385","signature_version":"v1"}],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/1bcc4049583085522767c3da7866ee83d0f5e104"],"types":["EoP"],"spl":"2024-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353700779.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-11-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"14471867451777370060218690595941141253","length":500},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/398ab199230563aabebbba61e1809306e478a0b9","target":{"function":"containsTargetNameInList","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-dfc7d599","signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["82630320983239367868995932347249873552","238720745101173363797345494215368416207","236567698392950522510091002694888408909","335240233360688362156751331580867261112","294849969966961275002540312770227921085","31242838117669534691129301776187435189","9575903934300010857870388392986166443","257417760387597684732748376338482846517","332273860880998348933578912512777202152","63556312701202719457586516950924316929","78497599825161441577520928516283979155","289088847707262081491973581258519553518","135153836155980582756306013224028003918","306013477803140523853759126857236477915","312644131033760342415660335805232055346","69663769005949117252957252365175778868","63634561811135092964965095453685181067","129268457449606612113116987205451647942","279821722700640267769812859122951679057","143688957664535955797666872411459068603","81261708505312857542778728954142508842","150505307782422924855497374380983079670","278110562919455909216344619553282986499","168241266802551248217366618837482422812","196952287101980436559155027255620106751","253220766386414055761430999996545414847","130014035008290283032687500810472033193","102773042227712380051185624212894701760","193945555105656936453847297800470789796","24312057217877174375154752207075989864","5747207037135602253424381473973468446","253454171945359541081648152741858653481"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/398ab199230563aabebbba61e1809306e478a0b9","target":{"file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Line","id":"ASB-A-353700779-e73be0a2","signature_version":"v1"},{"digest":{"function_hash":"298404758624910439096961776660560705406","length":503},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/398ab199230563aabebbba61e1809306e478a0b9","target":{"function":"getInstalledAccessibilityList","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-fea841fc","signature_version":"v1"}],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/398ab199230563aabebbba61e1809306e478a0b9"],"types":["EoP"],"spl":"2024-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353700779.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-11-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"298404758624910439096961776660560705406","length":503},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/25ecee0563a2c6f9f6a47dbf8e5b4d66043d4f67","target":{"function":"getInstalledAccessibilityList","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-47782eb2","signature_version":"v1"},{"digest":{"function_hash":"14471867451777370060218690595941141253","length":500},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/25ecee0563a2c6f9f6a47dbf8e5b4d66043d4f67","target":{"function":"containsTargetNameInList","file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Function","id":"ASB-A-353700779-9f5272e6","signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["82630320983239367868995932347249873552","238720745101173363797345494215368416207","236567698392950522510091002694888408909","335240233360688362156751331580867261112","294849969966961275002540312770227921085","31242838117669534691129301776187435189","9575903934300010857870388392986166443","257417760387597684732748376338482846517","332273860880998348933578912512777202152","63556312701202719457586516950924316929","78497599825161441577520928516283979155","289088847707262081491973581258519553518","135153836155980582756306013224028003918","306013477803140523853759126857236477915","312644131033760342415660335805232055346","69663769005949117252957252365175778868","63634561811135092964965095453685181067","129268457449606612113116987205451647942","279821722700640267769812859122951679057","143688957664535955797666872411459068603","81261708505312857542778728954142508842","150505307782422924855497374380983079670","278110562919455909216344619553282986499","168241266802551248217366618837482422812","196952287101980436559155027255620106751","253220766386414055761430999996545414847","130014035008290283032687500810472033193","102773042227712380051185624212894701760","193945555105656936453847297800470789796","24312057217877174375154752207075989864","5747207037135602253424381473973468446","253454171945359541081648152741858653481"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/25ecee0563a2c6f9f6a47dbf8e5b4d66043d4f67","target":{"file":"src/com/android/settings/accessibility/AccessibilitySettings.java"},"signature_type":"Line","id":"ASB-A-353700779-ee4939da","signature_version":"v1"}],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/25ecee0563a2c6f9f6a47dbf8e5b4d66043d4f67"],"types":["EoP"],"spl":"2024-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353700779.json"}}],"schema_version":"1.7.5"}