{"id":"PUB-A-230358834","details":"In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-230358834","CVE-2023-21034"],"modified":"2026-09-22T15:22:15.314525410Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/native/+/0d4ac562fbf70ea385de91a3e56bd4183f00052e"}],"affected":[{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"id":"PUB-A-230358834-4c26203c","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/0d4ac562fbf70ea385de91a3e56bd4183f00052e","target":{"file":"services/sensorservice/SensorService.cpp","function":"SensorService::getSensorList"},"deprecated":false,"digest":{"length":648,"function_hash":"95929185004822044776792633806983186796"}},{"source":"https://android.googlesource.com/platform/frameworks/native/+/0d4ac562fbf70ea385de91a3e56bd4183f00052e","target":{"file":"services/sensorservice/SensorService.cpp","function":"SensorService::cleanupConnection"},"deprecated":false,"digest":{"length":1655,"function_hash":"335395096918327956489695257050384213004"},"id":"PUB-A-230358834-570df20b","signature_type":"Function","signature_version":"v1"},{"id":"PUB-A-230358834-574aa618","match_only_versions":["13"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/0d4ac562fbf70ea385de91a3e56bd4183f00052e","target":{"file":"services/sensorservice/SensorService.cpp"},"deprecated":false,"digest":{"line_hashes":["18858919996167810629383358003661492680","138624642762636962254155078672982754433","319578502927198867821395651790315562829","107803966520829695002172477507883346058","156265734571643149119952210232319290704","96417332505452503821519452936031902554","82866231107641528475451148760939958745","307256031208266680564463774131146475309","140041921813126514071055019466841335987","245629087494485642239833939421808207517","225295537703253715297688247147375476219","333173894555105631489970910507891752668","286015091591139449682791256228962849001","109704704078313224022905065401029259028","139416543594737666384920023813782317029","101657537824057914391486053899391208205","208623788991466193201324350193912275415","43559927922634652969838255830048311253","205565432490429215695588719299630620545","90408966403754094972291368728136531109","149320299434808276025970196501295485789","223361326080403475251921777964679694324","115488390222873727435793365206467671367","230807403001007778159997142358304196290"],"threshold":0.9}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/0d4ac562fbf70ea385de91a3e56bd4183f00052e","target":{"file":"services/sensorservice/SensorService.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["220143044502489136319106494797705744955","286370615999076828764243727902451018109","245793387865345791587209302876249125648","290096041095681133094177925575465189021"]},"id":"PUB-A-230358834-761e64b3","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"32361011372169983368554508567860673412","length":2159},"id":"PUB-A-230358834-b2a76182","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/0d4ac562fbf70ea385de91a3e56bd4183f00052e","target":{"file":"services/sensorservice/SensorService.cpp","function":"SensorService::createSensorDirectConnection"}},{"digest":{"function_hash":"285787525828569780466667683554023451044","length":894},"id":"PUB-A-230358834-ca58ffd0","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/0d4ac562fbf70ea385de91a3e56bd4183f00052e","target":{"file":"services/sensorservice/SensorService.cpp","function":"SensorService::createSensorEventConnection"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/native/+/0d4ac562fbf70ea385de91a3e56bd4183f00052e"],"severity":"Moderate","spl":"2023-03-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-230358834.json"}}],"schema_version":"1.9.0"}