{"id":"PUB-A-251586912","details":"In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-251586912","CVE-2023-21237"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d"],"severity":"Moderate","spl":"2023-06-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","target":{"function":"applyRemoteView","file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java"},"deprecated":false,"digest":{"length":1977,"function_hash":"74403138303714375476512796034804000766"},"id":"PUB-A-251586912-1ccdb21b","match_only_versions":["13-next"],"signature_type":"Function","signature_version":"v1"},{"target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java","function":"onViewApplied"},"deprecated":false,"digest":{"length":342,"function_hash":"1536913032323148982607048829285413764"},"id":"PUB-A-251586912-aa95f46b","match_only_versions":["13-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java"},"deprecated":false,"digest":{"line_hashes":["135894404551378205592092327680114469617","310156876502755440925070285766601563877","321312798908533936547803923385196107002","149735234374929821705592724461451488137","284157225260360714255511415421498588648","167973201682567474807437150399979293328","139082224674730999618959375370652506310","233453523975678847497599861200769385464","121201981239241598286147116540010167124","295974109373460832942324721440508773939","32248982511373745904326764791187533733","66448217957726579632563405669658884291","7672394593319704551628127419882056581","300400493073610509647262231467919814528","55094073232794703800071105841102673612","159888761516334274831932597174840351461","146090525292635333918128059714806553607","169684363524839291657704286893528174874","343937213539453118319616424177614650","44739116556510939107339367226087166230","162687479879004707694132695228340697923","193471030567496673804638947291416461041","12178150521670643020078398177856401776","251991969926866857654559599117104441408","211337172226973361842754304951372267370"],"threshold":0.9},"id":"PUB-A-251586912-b0b6989a","match_only_versions":["13-next"],"signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-251586912.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"Moderate","spl":"2023-06-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"length":342,"function_hash":"1536913032323148982607048829285413764"},"id":"PUB-A-251586912-3a3253ad","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java","function":"onViewApplied"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java"},"deprecated":false,"digest":{"line_hashes":["135894404551378205592092327680114469617","310156876502755440925070285766601563877","321312798908533936547803923385196107002","149735234374929821705592724461451488137","284157225260360714255511415421498588648","167973201682567474807437150399979293328","139082224674730999618959375370652506310","233453523975678847497599861200769385464","121201981239241598286147116540010167124","295974109373460832942324721440508773939","32248982511373745904326764791187533733","66448217957726579632563405669658884291","7672394593319704551628127419882056581","300400493073610509647262231467919814528","55094073232794703800071105841102673612","159888761516334274831932597174840351461","146090525292635333918128059714806553607","169684363524839291657704286893528174874","343937213539453118319616424177614650","44739116556510939107339367226087166230","162687479879004707694132695228340697923","193471030567496673804638947291416461041","12178150521670643020078398177856401776","251991969926866857654559599117104441408","211337172226973361842754304951372267370"],"threshold":0.9},"id":"PUB-A-251586912-41677629","match_only_versions":["13"],"signature_type":"Line","signature_version":"v1"},{"digest":{"length":1977,"function_hash":"74403138303714375476512796034804000766"},"id":"PUB-A-251586912-bd594584","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java","function":"applyRemoteView"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-251586912.json"}}],"schema_version":"1.9.0"}