{"id":"PUB-A-251586912","details":"In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-251586912","CVE-2023-21237"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"types":["ID"],"spl":"2023-06-01","severity":"Moderate","vanir_signatures":[{"id":"PUB-A-251586912-1ccdb21b","source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","signature_type":"Function","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java","function":"applyRemoteView"},"signature_version":"v1","digest":{"function_hash":"74403138303714375476512796034804000766","length":1977},"deprecated":false,"match_only_versions":["13-next"]},{"id":"PUB-A-251586912-aa95f46b","source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","signature_type":"Function","digest":{"function_hash":"1536913032323148982607048829285413764","length":342},"signature_version":"v1","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java","function":"onViewApplied"},"deprecated":false,"match_only_versions":["13-next"]},{"id":"PUB-A-251586912-b0b6989a","signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java"},"signature_version":"v1","digest":{"line_hashes":["135894404551378205592092327680114469617","310156876502755440925070285766601563877","321312798908533936547803923385196107002","149735234374929821705592724461451488137","284157225260360714255511415421498588648","167973201682567474807437150399979293328","139082224674730999618959375370652506310","233453523975678847497599861200769385464","121201981239241598286147116540010167124","295974109373460832942324721440508773939","32248982511373745904326764791187533733","66448217957726579632563405669658884291","7672394593319704551628127419882056581","300400493073610509647262231467919814528","55094073232794703800071105841102673612","159888761516334274831932597174840351461","146090525292635333918128059714806553607","169684363524839291657704286893528174874","343937213539453118319616424177614650","44739116556510939107339367226087166230","162687479879004707694132695228340697923","193471030567496673804638947291416461041","12178150521670643020078398177856401776","251991969926866857654559599117104441408","211337172226973361842754304951372267370"],"threshold":0.9},"deprecated":false,"match_only_versions":["13-next"]}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-251586912.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d"],"spl":"2023-06-01","severity":"Moderate","vanir_signatures":[{"id":"PUB-A-251586912-3a3253ad","source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","signature_type":"Function","digest":{"function_hash":"1536913032323148982607048829285413764","length":342},"signature_version":"v1","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java","function":"onViewApplied"},"deprecated":false,"match_only_versions":["13"]},{"id":"PUB-A-251586912-41677629","signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java"},"signature_version":"v1","digest":{"line_hashes":["135894404551378205592092327680114469617","310156876502755440925070285766601563877","321312798908533936547803923385196107002","149735234374929821705592724461451488137","284157225260360714255511415421498588648","167973201682567474807437150399979293328","139082224674730999618959375370652506310","233453523975678847497599861200769385464","121201981239241598286147116540010167124","295974109373460832942324721440508773939","32248982511373745904326764791187533733","66448217957726579632563405669658884291","7672394593319704551628127419882056581","300400493073610509647262231467919814528","55094073232794703800071105841102673612","159888761516334274831932597174840351461","146090525292635333918128059714806553607","169684363524839291657704286893528174874","343937213539453118319616424177614650","44739116556510939107339367226087166230","162687479879004707694132695228340697923","193471030567496673804638947291416461041","12178150521670643020078398177856401776","251991969926866857654559599117104441408","211337172226973361842754304951372267370"],"threshold":0.9},"deprecated":false,"match_only_versions":["13"]},{"id":"PUB-A-251586912-bd594584","source":"https://android.googlesource.com/platform/frameworks/base/+/b8e05658946540774098848898a5047c56449a5d","signature_type":"Function","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/NotificationContentInflater.java","function":"applyRemoteView"},"signature_version":"v1","digest":{"function_hash":"74403138303714375476512796034804000766","length":1977},"deprecated":false,"match_only_versions":["13"]}],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-251586912.json"}}],"schema_version":"1.7.5"}