{"id":"ASB-A-252762941", "published":"2023-04-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2023-21083", "A-252762941"], "details":"In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/services/Telecomm", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13-next:0"}, {"fixed":"13-next:2023-04-01"}]}], "versions":["13-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97"], "severity":"High", "spl":"2023-04-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"338648352086149527100499374510372632256", "length":309}, "id":"ASB-A-252762941-0491c532", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java", "function":"onServiceDisconnected"}}, {"deprecated":false, "digest":{"function_hash":"120562527713875321562491172127154338355", "length":135}, "id":"ASB-A-252762941-389f8d19", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java", "function":"onServiceDisconnected"}}, {"deprecated":false, "digest":{"function_hash":"336258356887302573331064480651611557665", "length":127}, "id":"ASB-A-252762941-5e0d6fd6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java", "function":"onBindingDied"}}, {"deprecated":false, "digest":{"line_hashes":["93138640784470167329690777748229323496", "63659522462177018524502730833184707231", "221352119823462935609529477489016598561", "25006135446868165074748325266048463470", "317718284322286336306459607661067067600", "46883327502752481797982597445200861609", "22267128855893681361825919778626530847", "150664494464330869492374344664841387753", "233455445762780446044602025550781883204"], "threshold":0.9}, "id":"ASB-A-252762941-65b2c755", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"}}, {"deprecated":false, "digest":{"function_hash":"209371112732447835114921646363933542613", "length":1763}, "id":"ASB-A-252762941-a6de4bd1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java", "function":"bindAndGetCallIdentification"}}, {"deprecated":false, "digest":{"line_hashes":["50597268355645420433777563493224433987", "248425411295318334669297501175840080626", "204579555969700246112803004237674141628", "108473673675401684701075550158319777465"], "threshold":0.9}, "id":"ASB-A-252762941-d6991d9f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/c915b8782b0d4a2c944fa55afbb48a262c93ee97", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"}}]}}, {"package":{"name":"platform/packages/services/Telecomm", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2023-04-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"], "severity":"High", "spl":"2023-04-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"120562527713875321562491172127154338355", "length":135}, "id":"ASB-A-252762941-ae4eff45", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java", "function":"onServiceDisconnected"}}, {"deprecated":false, "digest":{"function_hash":"336258356887302573331064480651611557665", "length":127}, "id":"ASB-A-252762941-b1d1468d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java", "function":"onBindingDied"}}, {"deprecated":false, "digest":{"line_hashes":["93138640784470167329690777748229323496", "63659522462177018524502730833184707231", "221352119823462935609529477489016598561", "25006135446868165074748325266048463470", "317718284322286336306459607661067067600", "46883327502752481797982597445200861609", "22267128855893681361825919778626530847", "150664494464330869492374344664841387753", "233455445762780446044602025550781883204"], "threshold":0.9}, "id":"ASB-A-252762941-b768e05b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"}}, {"deprecated":false, "digest":{"function_hash":"308477138216609990425240453918711753581", "length":1763}, "id":"ASB-A-252762941-c552d493", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java", "function":"bindAndGetCallIdentification"}}, {"deprecated":false, "digest":{"line_hashes":["50597268355645420433777563493224433987", "248425411295318334669297501175840080626", "204579555969700246112803004237674141628", "108473673675401684701075550158319777465"], "threshold":0.9}, "id":"ASB-A-252762941-d6e83e36", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"}}, {"deprecated":false, "digest":{"function_hash":"338648352086149527100499374510372632256", "length":309}, "id":"ASB-A-252762941-ee735b9e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java", "function":"onServiceDisconnected"}}]}}, {"package":{"name":"platform/packages/services/Telecomm", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2023-04-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"], "severity":"High", "spl":"2023-04-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"120562527713875321562491172127154338355", "length":135}, "id":"ASB-A-252762941-06e8ce0d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java", "function":"onServiceDisconnected"}}, {"deprecated":false, "digest":{"function_hash":"336258356887302573331064480651611557665", "length":127}, "id":"ASB-A-252762941-14b9ec38", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java", "function":"onBindingDied"}}, {"deprecated":false, "digest":{"function_hash":"338648352086149527100499374510372632256", "length":309}, "id":"ASB-A-252762941-19343a41", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java", "function":"onServiceDisconnected"}}, {"deprecated":false, "digest":{"line_hashes":["50597268355645420433777563493224433987", "248425411295318334669297501175840080626", "204579555969700246112803004237674141628", "108473673675401684701075550158319777465"], "threshold":0.9}, "id":"ASB-A-252762941-24a2a90e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"}}, {"deprecated":false, "digest":{"line_hashes":["93138640784470167329690777748229323496", "63659522462177018524502730833184707231", "221352119823462935609529477489016598561", "25006135446868165074748325266048463470", "317718284322286336306459607661067067600", "46883327502752481797982597445200861609", "22267128855893681361825919778626530847", "150664494464330869492374344664841387753", "233455445762780446044602025550781883204"], "threshold":0.9}, "id":"ASB-A-252762941-6d5800cd", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"}}, {"deprecated":false, "digest":{"function_hash":"308477138216609990425240453918711753581", "length":1763}, "id":"ASB-A-252762941-db51ad2d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java", "function":"bindAndGetCallIdentification"}}]}}, {"package":{"name":"platform/packages/services/Telecomm", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2023-04-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"], "severity":"High", "spl":"2023-04-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["50597268355645420433777563493224433987", "248425411295318334669297501175840080626", "204579555969700246112803004237674141628", "108473673675401684701075550158319777465"], "threshold":0.9}, "id":"ASB-A-252762941-668b09ba", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"}}, {"deprecated":false, "digest":{"line_hashes":["93138640784470167329690777748229323496", "63659522462177018524502730833184707231", "221352119823462935609529477489016598561", "25006135446868165074748325266048463470", "317718284322286336306459607661067067600", "46883327502752481797982597445200861609", "22267128855893681361825919778626530847", "150664494464330869492374344664841387753", "233455445762780446044602025550781883204"], "threshold":0.9}, "id":"ASB-A-252762941-8a2e2ff0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"}}, {"deprecated":false, "digest":{"function_hash":"120562527713875321562491172127154338355", "length":135}, "id":"ASB-A-252762941-a1b2f09e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java", "function":"onServiceDisconnected"}}, {"deprecated":false, "digest":{"function_hash":"336258356887302573331064480651611557665", "length":127}, "id":"ASB-A-252762941-f2ea59ce", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java", "function":"onBindingDied"}}, {"deprecated":false, "digest":{"function_hash":"308477138216609990425240453918711753581", "length":1763}, "id":"ASB-A-252762941-f79e24bc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java", "function":"bindAndGetCallIdentification"}}, {"deprecated":false, "digest":{"function_hash":"338648352086149527100499374510372632256", "length":309}, "id":"ASB-A-252762941-fd7572ba", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java", "function":"onServiceDisconnected"}}]}}, {"package":{"name":"platform/packages/services/Telecomm", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-04-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0"], "severity":"High", "spl":"2023-04-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["93138640784470167329690777748229323496", "63659522462177018524502730833184707231", "221352119823462935609529477489016598561", "25006135446868165074748325266048463470", "317718284322286336306459607661067067600", "46883327502752481797982597445200861609", "22267128855893681361825919778626530847", "150664494464330869492374344664841387753", "233455445762780446044602025550781883204"], "threshold":0.9}, "id":"ASB-A-252762941-27c490f5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java"}}, {"deprecated":false, "digest":{"function_hash":"120562527713875321562491172127154338355", "length":135}, "id":"ASB-A-252762941-652c0cf5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java", "function":"onServiceDisconnected"}}, {"deprecated":false, "digest":{"line_hashes":["50597268355645420433777563493224433987", "248425411295318334669297501175840080626", "204579555969700246112803004237674141628", "108473673675401684701075550158319777465"], "threshold":0.9}, "id":"ASB-A-252762941-786c864f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java"}}, {"deprecated":false, "digest":{"function_hash":"336258356887302573331064480651611557665", "length":127}, "id":"ASB-A-252762941-9d2570d9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/callfiltering/CallScreeningServiceFilter.java", "function":"onBindingDied"}}, {"deprecated":false, "digest":{"function_hash":"308477138216609990425240453918711753581", "length":1763}, "id":"ASB-A-252762941-a48d0a8e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java", "function":"bindAndGetCallIdentification"}}, {"deprecated":false, "digest":{"function_hash":"338648352086149527100499374510372632256", "length":309}, "id":"ASB-A-252762941-a877a0b2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/14927c6f0b4154ee31dc4e339ea4a692f73ad2e0", "target":{"file":"src/com/android/server/telecom/CallScreeningServiceHelper.java", "function":"onServiceDisconnected"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-04-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/services/Telecomm/+/8b32e15214910a310e5f7391e739ac1043af3bf9"}]}