{"id":"ASB-A-264880689", "published":"2023-08-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2023-21290", "A-264880689"], "details":"In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/providers/TelephonyProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13-next:0"}, {"fixed":"13-next:2023-08-01"}]}], "versions":["13-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"], "severity":"High", "spl":"2023-08-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"157104286834053058667808334963109926916", "length":2447}, "id":"ASB-A-264880689-684bfacc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c", "target":{"file":"src/com/android/providers/telephony/MmsProvider.java", "function":"update"}}, {"deprecated":false, "digest":{"line_hashes":["281253907639525144025299373930782407033", "132876137314617094737140570055861165390", "4690526999091256758990293462794369238", "7544939645273274879206324847218671046", "12071255814901493088040976794853679443", "164998211426005178073519557115678279380", "224677706242864877018902563102024141642", "33215650706164921697314748434731617263", "123209350887477386788433845434072400276", "9931110887952007559812108128041600154", "214728215846428908470951434899761443372", "278832171060732843206969616038814260467"], "threshold":0.9}, "id":"ASB-A-264880689-dfbed74f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c", "target":{"file":"src/com/android/providers/telephony/MmsProvider.java"}}]}}, {"package":{"name":"platform/packages/providers/TelephonyProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2023-08-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"], "severity":"High", "spl":"2023-08-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"157104286834053058667808334963109926916", "length":2447}, "id":"ASB-A-264880689-0825b9fe", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c", "target":{"file":"src/com/android/providers/telephony/MmsProvider.java", "function":"update"}}, {"deprecated":false, "digest":{"line_hashes":["281253907639525144025299373930782407033", "132876137314617094737140570055861165390", "4690526999091256758990293462794369238", "7544939645273274879206324847218671046", "12071255814901493088040976794853679443", "164998211426005178073519557115678279380", "224677706242864877018902563102024141642", "33215650706164921697314748434731617263", "123209350887477386788433845434072400276", "9931110887952007559812108128041600154", "214728215846428908470951434899761443372", "278832171060732843206969616038814260467"], "threshold":0.9}, "id":"ASB-A-264880689-8bbb028b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c", "target":{"file":"src/com/android/providers/telephony/MmsProvider.java"}}]}}, {"package":{"name":"platform/packages/providers/TelephonyProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2023-08-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"], "severity":"High", "spl":"2023-08-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["281253907639525144025299373930782407033", "132876137314617094737140570055861165390", "4690526999091256758990293462794369238", "7544939645273274879206324847218671046", "12071255814901493088040976794853679443", "164998211426005178073519557115678279380", "224677706242864877018902563102024141642", "33215650706164921697314748434731617263", "123209350887477386788433845434072400276", "9931110887952007559812108128041600154", "214728215846428908470951434899761443372", "278832171060732843206969616038814260467"], "threshold":0.9}, "id":"ASB-A-264880689-65fd960f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c", "target":{"file":"src/com/android/providers/telephony/MmsProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"157104286834053058667808334963109926916", "length":2447}, "id":"ASB-A-264880689-8d4acadd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c", "target":{"file":"src/com/android/providers/telephony/MmsProvider.java", "function":"update"}}]}}, {"package":{"name":"platform/packages/providers/TelephonyProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2023-08-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"], "severity":"High", "spl":"2023-08-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"157104286834053058667808334963109926916", "length":2447}, "id":"ASB-A-264880689-bd1a1eaf", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c", "target":{"file":"src/com/android/providers/telephony/MmsProvider.java", "function":"update"}}, {"deprecated":false, "digest":{"line_hashes":["281253907639525144025299373930782407033", "132876137314617094737140570055861165390", "4690526999091256758990293462794369238", "7544939645273274879206324847218671046", "12071255814901493088040976794853679443", "164998211426005178073519557115678279380", "224677706242864877018902563102024141642", "33215650706164921697314748434731617263", "123209350887477386788433845434072400276", "9931110887952007559812108128041600154", "214728215846428908470951434899761443372", "278832171060732843206969616038814260467"], "threshold":0.9}, "id":"ASB-A-264880689-c4fc9a17", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c", "target":{"file":"src/com/android/providers/telephony/MmsProvider.java"}}]}}, {"package":{"name":"platform/packages/providers/TelephonyProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-08-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c"], "severity":"High", "spl":"2023-08-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["281253907639525144025299373930782407033", "132876137314617094737140570055861165390", "4690526999091256758990293462794369238", "7544939645273274879206324847218671046", "12071255814901493088040976794853679443", "164998211426005178073519557115678279380", "224677706242864877018902563102024141642", "33215650706164921697314748434731617263", "123209350887477386788433845434072400276", "9931110887952007559812108128041600154", "214728215846428908470951434899761443372", "278832171060732843206969616038814260467"], "threshold":0.9}, "id":"ASB-A-264880689-78ae990a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c", "target":{"file":"src/com/android/providers/telephony/MmsProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"157104286834053058667808334963109926916", "length":2447}, "id":"ASB-A-264880689-fdc3403f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/6743638a096c32627f398efd2ea78f08b8a2db8c", "target":{"file":"src/com/android/providers/telephony/MmsProvider.java", "function":"update"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-08-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca4c9a19635119d95900793e7a41b820cd1d94d9"}]}