{"id":"ASB-A-363248394","details":"In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-363248394","CVE-2024-49742"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2025-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/b0eec6fdfd5b4f9ba81750da468d26440904142e"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-01-01"}]}],"versions":["15-next"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"id":"ASB-A-363248394-36eab0ab","digest":{"function_hash":"45178275718944758447062834043860974696","length":22},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ae59a42eb13f643d842525208619037c074371a","target":{"function":"onBackPressed","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","signature_type":"Function"},{"deprecated":false,"signature_version":"v1","id":"ASB-A-363248394-49871e68","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ae59a42eb13f643d842525208619037c074371a","target":{"function":"onAllow","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"digest":{"function_hash":"158058501711243768092335401639404740954","length":534},"signature_type":"Function"},{"deprecated":false,"id":"ASB-A-363248394-6ebed7ad","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ae59a42eb13f643d842525208619037c074371a","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"digest":{"line_hashes":["57727154343770777405582517321238337154","240299413138754236445741587685939021564","56485816086395040808892777746068628670","141220926358305337894019062638802357885","227002494228847845254187301756915597624","330638076505241857648771747028368404776","99092410661102412195360826873398395171","14103810232702175623170287818503365343","317202621517561104950015159086261898572","191479634492722483872519470832523952093","197714015620490234314031268762055085156","119365618824003008288156991754343644937","123749577098740968685961213750306873985","177362007595037873971564041011192325357","53591544466251393366937668994109452227","305088722976120007750667000500426231436","306209512473516296155736136729834633101","118550500567950120178115643643381551211","302397935007188022697211775042314056052","232950848787682393215759979238303333680","40005311771178354065038403669416926752","211775574209560010576260318010958178028","266881839522848279143316692961588307042","280167219989943914343817339763513038756","267211863654729794929081226421728462297","270694349273209714412497048716314078843","144025403237800394119601872020402640883","37501214243172625515734330041113614766","53958031742443912502115050690555681788","262103182444260585763988288681127480223","274554937747220808834387043439148808182","9870317711005571778903137631517401320","38503349405693615785621802973413453701","96913160311998657077363225236442605664","159311489985207720856506450665721091486","172494747311373234724771676784500986050","298619143740932187285643586510739257434","281331493451922174030551833738246710447"],"threshold":0.9},"signature_type":"Line"},{"deprecated":false,"target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ae59a42eb13f643d842525208619037c074371a","id":"ASB-A-363248394-cac91c5c","digest":{"function_hash":"263292827110599531548209042734242461098","length":2095},"signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/7ae59a42eb13f643d842525208619037c074371a"],"spl":"2025-01-01","severity":"High","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-01-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"target":{"function":"onBackPressed","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","id":"ASB-A-363248394-256d3dac","digest":{"function_hash":"45178275718944758447062834043860974696","length":22},"signature_type":"Function"},{"deprecated":false,"id":"ASB-A-363248394-954c2211","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"digest":{"line_hashes":["328114276595521853336613073004655899917","240299413138754236445741587685939021564","56485816086395040808892777746068628670","141220926358305337894019062638802357885","227002494228847845254187301756915597624","330638076505241857648771747028368404776","99092410661102412195360826873398395171","106690650067377600027213558808887643996","129862251475411717454851089808599565352","338911370750416462991039382607241916756","119365618824003008288156991754343644937","123749577098740968685961213750306873985","177362007595037873971564041011192325357","53591544466251393366937668994109452227","305088722976120007750667000500426231436","306209512473516296155736136729834633101","118550500567950120178115643643381551211","302397935007188022697211775042314056052","232950848787682393215759979238303333680","40005311771178354065038403669416926752","211775574209560010576260318010958178028","266881839522848279143316692961588307042","280167219989943914343817339763513038756","267211863654729794929081226421728462297","270694349273209714412497048716314078843","144025403237800394119601872020402640883","37501214243172625515734330041113614766","53958031742443912502115050690555681788","262103182444260585763988288681127480223","274554937747220808834387043439148808182","9870317711005571778903137631517401320","38503349405693615785621802973413453701","96913160311998657077363225236442605664","159311489985207720856506450665721091486","172494747311373234724771676784500986050","298619143740932187285643586510739257434","281331493451922174030551833738246710447"],"threshold":0.9},"signature_type":"Line"},{"deprecated":false,"target":{"function":"onAllow","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","id":"ASB-A-363248394-b2bb2adb","digest":{"function_hash":"158058501711243768092335401639404740954","length":534},"signature_type":"Function"},{"deprecated":false,"id":"ASB-A-363248394-d604a1b1","digest":{"function_hash":"206317504436942739198941523319335007103","length":1654},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16"],"spl":"2025-01-01","severity":"High","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-01-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"signature_version":"v1","id":"ASB-A-363248394-59f47f2a","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"function":"onAllow","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"digest":{"function_hash":"158058501711243768092335401639404740954","length":534},"signature_type":"Function"},{"deprecated":false,"id":"ASB-A-363248394-b40caec6","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"function":"onBackPressed","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"digest":{"function_hash":"45178275718944758447062834043860974696","length":22},"signature_type":"Function"},{"deprecated":false,"target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","id":"ASB-A-363248394-cdb560e9","digest":{"line_hashes":["328114276595521853336613073004655899917","240299413138754236445741587685939021564","56485816086395040808892777746068628670","141220926358305337894019062638802357885","227002494228847845254187301756915597624","330638076505241857648771747028368404776","99092410661102412195360826873398395171","106690650067377600027213558808887643996","129862251475411717454851089808599565352","338911370750416462991039382607241916756","119365618824003008288156991754343644937","123749577098740968685961213750306873985","177362007595037873971564041011192325357","53591544466251393366937668994109452227","305088722976120007750667000500426231436","306209512473516296155736136729834633101","118550500567950120178115643643381551211","302397935007188022697211775042314056052","232950848787682393215759979238303333680","40005311771178354065038403669416926752","211775574209560010576260318010958178028","266881839522848279143316692961588307042","280167219989943914343817339763513038756","267211863654729794929081226421728462297","270694349273209714412497048716314078843","144025403237800394119601872020402640883","37501214243172625515734330041113614766","53958031742443912502115050690555681788","262103182444260585763988288681127480223","274554937747220808834387043439148808182","9870317711005571778903137631517401320","38503349405693615785621802973413453701","96913160311998657077363225236442605664","159311489985207720856506450665721091486","172494747311373234724771676784500986050","298619143740932187285643586510739257434","281331493451922174030551833738246710447"],"threshold":0.9},"signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"206317504436942739198941523319335007103","length":1654},"target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","id":"ASB-A-363248394-edb4ed58","signature_version":"v1","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16"],"spl":"2025-01-01","severity":"High","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-01-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/2b3a057d23dc929e7d4b593550974368ea4f83ef"],"spl":"2025-01-01","severity":"High","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-01-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"target":{"function":"onAllow","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d440f2ef05c20f81e1b1cad447cca427a25d77ec","id":"ASB-A-363248394-611393ec","digest":{"function_hash":"158058501711243768092335401639404740954","length":534},"signature_type":"Function"},{"deprecated":false,"id":"ASB-A-363248394-80d66f1d","digest":{"line_hashes":["57727154343770777405582517321238337154","240299413138754236445741587685939021564","56485816086395040808892777746068628670","141220926358305337894019062638802357885","227002494228847845254187301756915597624","330638076505241857648771747028368404776","99092410661102412195360826873398395171","14103810232702175623170287818503365343","317202621517561104950015159086261898572","191479634492722483872519470832523952093","197714015620490234314031268762055085156","119365618824003008288156991754343644937","123749577098740968685961213750306873985","177362007595037873971564041011192325357","53591544466251393366937668994109452227","305088722976120007750667000500426231436","306209512473516296155736136729834633101","118550500567950120178115643643381551211","302397935007188022697211775042314056052","232950848787682393215759979238303333680","40005311771178354065038403669416926752","211775574209560010576260318010958178028","266881839522848279143316692961588307042","280167219989943914343817339763513038756","267211863654729794929081226421728462297","270694349273209714412497048716314078843","144025403237800394119601872020402640883","37501214243172625515734330041113614766","53958031742443912502115050690555681788","262103182444260585763988288681127480223","274554937747220808834387043439148808182","9870317711005571778903137631517401320","38503349405693615785621802973413453701","96913160311998657077363225236442605664","159311489985207720856506450665721091486","172494747311373234724771676784500986050","298619143740932187285643586510739257434","281331493451922174030551833738246710447"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d440f2ef05c20f81e1b1cad447cca427a25d77ec","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"45178275718944758447062834043860974696","length":22},"target":{"function":"onBackPressed","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d440f2ef05c20f81e1b1cad447cca427a25d77ec","id":"ASB-A-363248394-b43614ca","signature_version":"v1","signature_type":"Function"},{"deprecated":false,"target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d440f2ef05c20f81e1b1cad447cca427a25d77ec","id":"ASB-A-363248394-f2be0d1c","digest":{"function_hash":"263292827110599531548209042734242461098","length":2095},"signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/d440f2ef05c20f81e1b1cad447cca427a25d77ec"],"spl":"2025-01-01","severity":"High","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-01-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"target":{"function":"onBackPressed","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e4fe2f5b8134c007e29345ae11a64d37e8ef214a","id":"ASB-A-363248394-571a3084","digest":{"function_hash":"45178275718944758447062834043860974696","length":22},"signature_type":"Function"},{"deprecated":false,"id":"ASB-A-363248394-a76460f3","digest":{"line_hashes":["57727154343770777405582517321238337154","240299413138754236445741587685939021564","56485816086395040808892777746068628670","141220926358305337894019062638802357885","227002494228847845254187301756915597624","330638076505241857648771747028368404776","99092410661102412195360826873398395171","14103810232702175623170287818503365343","317202621517561104950015159086261898572","191479634492722483872519470832523952093","197714015620490234314031268762055085156","119365618824003008288156991754343644937","123749577098740968685961213750306873985","177362007595037873971564041011192325357","53591544466251393366937668994109452227","305088722976120007750667000500426231436","306209512473516296155736136729834633101","118550500567950120178115643643381551211","302397935007188022697211775042314056052","232950848787682393215759979238303333680","40005311771178354065038403669416926752","211775574209560010576260318010958178028","266881839522848279143316692961588307042","280167219989943914343817339763513038756","267211863654729794929081226421728462297","270694349273209714412497048716314078843","144025403237800394119601872020402640883","37501214243172625515734330041113614766","53958031742443912502115050690555681788","262103182444260585763988288681127480223","274554937747220808834387043439148808182","9870317711005571778903137631517401320","38503349405693615785621802973413453701","96913160311998657077363225236442605664","159311489985207720856506450665721091486","172494747311373234724771676784500986050","298619143740932187285643586510739257434","281331493451922174030551833738246710447"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e4fe2f5b8134c007e29345ae11a64d37e8ef214a","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","signature_type":"Line"},{"deprecated":false,"signature_version":"v1","id":"ASB-A-363248394-b215ab80","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e4fe2f5b8134c007e29345ae11a64d37e8ef214a","target":{"function":"onAllow","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"digest":{"function_hash":"158058501711243768092335401639404740954","length":534},"signature_type":"Function"},{"deprecated":false,"target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e4fe2f5b8134c007e29345ae11a64d37e8ef214a","id":"ASB-A-363248394-b3993687","digest":{"function_hash":"263292827110599531548209042734242461098","length":2095},"signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/e4fe2f5b8134c007e29345ae11a64d37e8ef214a"],"spl":"2025-01-01","severity":"High","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}}],"schema_version":"1.7.5"}