{"id":"ASB-A-363248394","details":"In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-363248394","CVE-2024-49742"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/b0eec6fdfd5b4f9ba81750da468d26440904142e"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-01-01"}]}],"versions":["15-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java","function":"onBackPressed"},"deprecated":false,"digest":{"function_hash":"45178275718944758447062834043860974696","length":22},"id":"ASB-A-363248394-36eab0ab","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ae59a42eb13f643d842525208619037c074371a"},{"deprecated":false,"digest":{"function_hash":"158058501711243768092335401639404740954","length":534},"id":"ASB-A-363248394-49871e68","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ae59a42eb13f643d842525208619037c074371a","target":{"function":"onAllow","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"}},{"target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"line_hashes":["57727154343770777405582517321238337154","240299413138754236445741587685939021564","56485816086395040808892777746068628670","141220926358305337894019062638802357885","227002494228847845254187301756915597624","330638076505241857648771747028368404776","99092410661102412195360826873398395171","14103810232702175623170287818503365343","317202621517561104950015159086261898572","191479634492722483872519470832523952093","197714015620490234314031268762055085156","119365618824003008288156991754343644937","123749577098740968685961213750306873985","177362007595037873971564041011192325357","53591544466251393366937668994109452227","305088722976120007750667000500426231436","306209512473516296155736136729834633101","118550500567950120178115643643381551211","302397935007188022697211775042314056052","232950848787682393215759979238303333680","40005311771178354065038403669416926752","211775574209560010576260318010958178028","266881839522848279143316692961588307042","280167219989943914343817339763513038756","267211863654729794929081226421728462297","270694349273209714412497048716314078843","144025403237800394119601872020402640883","37501214243172625515734330041113614766","53958031742443912502115050690555681788","262103182444260585763988288681127480223","274554937747220808834387043439148808182","9870317711005571778903137631517401320","38503349405693615785621802973413453701","96913160311998657077363225236442605664","159311489985207720856506450665721091486","172494747311373234724771676784500986050","298619143740932187285643586510739257434","281331493451922174030551833738246710447"],"threshold":0.9},"id":"ASB-A-363248394-6ebed7ad","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ae59a42eb13f643d842525208619037c074371a"},{"deprecated":false,"digest":{"function_hash":"263292827110599531548209042734242461098","length":2095},"id":"ASB-A-363248394-cac91c5c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/7ae59a42eb13f643d842525208619037c074371a","target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/7ae59a42eb13f643d842525208619037c074371a"],"severity":"High","spl":"2025-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-01-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16"],"severity":"High","spl":"2025-01-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-363248394-256d3dac","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"function":"onBackPressed","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"function_hash":"45178275718944758447062834043860974696","length":22}},{"digest":{"line_hashes":["328114276595521853336613073004655899917","240299413138754236445741587685939021564","56485816086395040808892777746068628670","141220926358305337894019062638802357885","227002494228847845254187301756915597624","330638076505241857648771747028368404776","99092410661102412195360826873398395171","106690650067377600027213558808887643996","129862251475411717454851089808599565352","338911370750416462991039382607241916756","119365618824003008288156991754343644937","123749577098740968685961213750306873985","177362007595037873971564041011192325357","53591544466251393366937668994109452227","305088722976120007750667000500426231436","306209512473516296155736136729834633101","118550500567950120178115643643381551211","302397935007188022697211775042314056052","232950848787682393215759979238303333680","40005311771178354065038403669416926752","211775574209560010576260318010958178028","266881839522848279143316692961588307042","280167219989943914343817339763513038756","267211863654729794929081226421728462297","270694349273209714412497048716314078843","144025403237800394119601872020402640883","37501214243172625515734330041113614766","53958031742443912502115050690555681788","262103182444260585763988288681127480223","274554937747220808834387043439148808182","9870317711005571778903137631517401320","38503349405693615785621802973413453701","96913160311998657077363225236442605664","159311489985207720856506450665721091486","172494747311373234724771676784500986050","298619143740932187285643586510739257434","281331493451922174030551833738246710447"],"threshold":0.9},"id":"ASB-A-363248394-954c2211","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false},{"digest":{"function_hash":"158058501711243768092335401639404740954","length":534},"id":"ASB-A-363248394-b2bb2adb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"function":"onAllow","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"206317504436942739198941523319335007103","length":1654},"id":"ASB-A-363248394-d604a1b1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java","function":"onCreate"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-01-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","spl":"2025-01-01","types":["EoP"],"vanir_signatures":[{"digest":{"length":534,"function_hash":"158058501711243768092335401639404740954"},"id":"ASB-A-363248394-59f47f2a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java","function":"onAllow"},"deprecated":false},{"id":"ASB-A-363248394-b40caec6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"function":"onBackPressed","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"function_hash":"45178275718944758447062834043860974696","length":22}},{"id":"ASB-A-363248394-cdb560e9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"line_hashes":["328114276595521853336613073004655899917","240299413138754236445741587685939021564","56485816086395040808892777746068628670","141220926358305337894019062638802357885","227002494228847845254187301756915597624","330638076505241857648771747028368404776","99092410661102412195360826873398395171","106690650067377600027213558808887643996","129862251475411717454851089808599565352","338911370750416462991039382607241916756","119365618824003008288156991754343644937","123749577098740968685961213750306873985","177362007595037873971564041011192325357","53591544466251393366937668994109452227","305088722976120007750667000500426231436","306209512473516296155736136729834633101","118550500567950120178115643643381551211","302397935007188022697211775042314056052","232950848787682393215759979238303333680","40005311771178354065038403669416926752","211775574209560010576260318010958178028","266881839522848279143316692961588307042","280167219989943914343817339763513038756","267211863654729794929081226421728462297","270694349273209714412497048716314078843","144025403237800394119601872020402640883","37501214243172625515734330041113614766","53958031742443912502115050690555681788","262103182444260585763988288681127480223","274554937747220808834387043439148808182","9870317711005571778903137631517401320","38503349405693615785621802973413453701","96913160311998657077363225236442605664","159311489985207720856506450665721091486","172494747311373234724771676784500986050","298619143740932187285643586510739257434","281331493451922174030551833738246710447"],"threshold":0.9}},{"id":"ASB-A-363248394-edb4ed58","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16","target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"function_hash":"206317504436942739198941523319335007103","length":1654}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/59cdc3e20ca4ac198b1c27e6a5372ececd155b16"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-01-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/2b3a057d23dc929e7d4b593550974368ea4f83ef"],"severity":"High","spl":"2025-01-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-01-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"158058501711243768092335401639404740954","length":534},"id":"ASB-A-363248394-611393ec","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d440f2ef05c20f81e1b1cad447cca427a25d77ec","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java","function":"onAllow"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d440f2ef05c20f81e1b1cad447cca427a25d77ec","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"line_hashes":["57727154343770777405582517321238337154","240299413138754236445741587685939021564","56485816086395040808892777746068628670","141220926358305337894019062638802357885","227002494228847845254187301756915597624","330638076505241857648771747028368404776","99092410661102412195360826873398395171","14103810232702175623170287818503365343","317202621517561104950015159086261898572","191479634492722483872519470832523952093","197714015620490234314031268762055085156","119365618824003008288156991754343644937","123749577098740968685961213750306873985","177362007595037873971564041011192325357","53591544466251393366937668994109452227","305088722976120007750667000500426231436","306209512473516296155736136729834633101","118550500567950120178115643643381551211","302397935007188022697211775042314056052","232950848787682393215759979238303333680","40005311771178354065038403669416926752","211775574209560010576260318010958178028","266881839522848279143316692961588307042","280167219989943914343817339763513038756","267211863654729794929081226421728462297","270694349273209714412497048716314078843","144025403237800394119601872020402640883","37501214243172625515734330041113614766","53958031742443912502115050690555681788","262103182444260585763988288681127480223","274554937747220808834387043439148808182","9870317711005571778903137631517401320","38503349405693615785621802973413453701","96913160311998657077363225236442605664","159311489985207720856506450665721091486","172494747311373234724771676784500986050","298619143740932187285643586510739257434","281331493451922174030551833738246710447"],"threshold":0.9},"id":"ASB-A-363248394-80d66f1d"},{"id":"ASB-A-363248394-b43614ca","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d440f2ef05c20f81e1b1cad447cca427a25d77ec","target":{"function":"onBackPressed","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"length":22,"function_hash":"45178275718944758447062834043860974696"}},{"deprecated":false,"digest":{"function_hash":"263292827110599531548209042734242461098","length":2095},"id":"ASB-A-363248394-f2be0d1c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d440f2ef05c20f81e1b1cad447cca427a25d77ec","target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/d440f2ef05c20f81e1b1cad447cca427a25d77ec"],"severity":"High","spl":"2025-01-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-01-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/e4fe2f5b8134c007e29345ae11a64d37e8ef214a"],"severity":"High","spl":"2025-01-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-363248394-571a3084","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e4fe2f5b8134c007e29345ae11a64d37e8ef214a","target":{"function":"onBackPressed","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"function_hash":"45178275718944758447062834043860974696","length":22}},{"id":"ASB-A-363248394-a76460f3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e4fe2f5b8134c007e29345ae11a64d37e8ef214a","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"line_hashes":["57727154343770777405582517321238337154","240299413138754236445741587685939021564","56485816086395040808892777746068628670","141220926358305337894019062638802357885","227002494228847845254187301756915597624","330638076505241857648771747028368404776","99092410661102412195360826873398395171","14103810232702175623170287818503365343","317202621517561104950015159086261898572","191479634492722483872519470832523952093","197714015620490234314031268762055085156","119365618824003008288156991754343644937","123749577098740968685961213750306873985","177362007595037873971564041011192325357","53591544466251393366937668994109452227","305088722976120007750667000500426231436","306209512473516296155736136729834633101","118550500567950120178115643643381551211","302397935007188022697211775042314056052","232950848787682393215759979238303333680","40005311771178354065038403669416926752","211775574209560010576260318010958178028","266881839522848279143316692961588307042","280167219989943914343817339763513038756","267211863654729794929081226421728462297","270694349273209714412497048716314078843","144025403237800394119601872020402640883","37501214243172625515734330041113614766","53958031742443912502115050690555681788","262103182444260585763988288681127480223","274554937747220808834387043439148808182","9870317711005571778903137631517401320","38503349405693615785621802973413453701","96913160311998657077363225236442605664","159311489985207720856506450665721091486","172494747311373234724771676784500986050","298619143740932187285643586510739257434","281331493451922174030551833738246710447"],"threshold":0.9}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e4fe2f5b8134c007e29345ae11a64d37e8ef214a","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java","function":"onAllow"},"deprecated":false,"digest":{"length":534,"function_hash":"158058501711243768092335401639404740954"},"id":"ASB-A-363248394-b215ab80","signature_type":"Function"},{"deprecated":false,"digest":{"length":2095,"function_hash":"263292827110599531548209042734242461098"},"id":"ASB-A-363248394-b3993687","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e4fe2f5b8134c007e29345ae11a64d37e8ef214a","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java","function":"onCreate"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-363248394.json"}}],"schema_version":"1.9.0"}