{"id":"ASB-A-265431505", "published":"2023-08-01T00:00:00Z", "modified":"2026-04-03T15:37:31.002635057Z", "aliases":["CVE-2023-21281", "A-265431505"], "details":"In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13-next:0"}, {"fixed":"13-next:2023-08-01"}]}], "versions":["13-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2"], "severity":"High", "spl":"2023-08-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["39689452442272565971453877497751893524", "25307676321278645062288265663908796245", "7126838083485310030333911645021887272", "329967580688749719186970430467551999062", "275712561779024352939463625905345362089", "260001323114698046348111294318812881405", "92885252033579864700461838307405739932", "16997948821922028804669429965704681353", "148108479212846542151523964273568860188", "44515452398227537616293316968546412561", "62955029567051782759864073557872053134", "153487917297176115130128064257690950561", "332222086054823375604207172406661778732", "260831415211971711176607302846435592979", "122089986153144273567193581275727672468"], "threshold":0.9}, "id":"ASB-A-265431505-6f8e044c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"}}, {"deprecated":false, "digest":{"function_hash":"148841041184183105348486301472293289503", "length":718}, "id":"ASB-A-265431505-8367963c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java", "function":"playSound"}}, {"deprecated":false, "digest":{"function_hash":"183527245861175790704734003490401276672", "length":600}, "id":"ASB-A-265431505-a950c309", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b441621b396541f822e29dc6fde627308c1444b2", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java", "function":"getLockTimeout"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2023-08-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17"], "severity":"High", "spl":"2023-08-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"183527245861175790704734003490401276672", "length":600}, "id":"ASB-A-265431505-509735ea", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java", "function":"getLockTimeout"}}, {"deprecated":false, "digest":{"line_hashes":["39689452442272565971453877497751893524", "25307676321278645062288265663908796245", "7126838083485310030333911645021887272", "329967580688749719186970430467551999062", "275712561779024352939463625905345362089", "260001323114698046348111294318812881405", "92885252033579864700461838307405739932", "16997948821922028804669429965704681353", "148108479212846542151523964273568860188", "44515452398227537616293316968546412561", "62955029567051782759864073557872053134", "153487917297176115130128064257690950561", "332222086054823375604207172406661778732", "260831415211971711176607302846435592979", "122089986153144273567193581275727672468"], "threshold":0.9}, "id":"ASB-A-265431505-840dc114", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"}}, {"deprecated":false, "digest":{"function_hash":"148841041184183105348486301472293289503", "length":718}, "id":"ASB-A-265431505-b6ae24d2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ce6510deba06bcb72a0e468294b483fc4ac4be17", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java", "function":"playSound"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2023-08-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f37a92b8c8c98ca40f858782fe3720362565c16c"], "severity":"High", "spl":"2023-08-01", "types":["EoP"]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2023-08-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e"], "severity":"High", "spl":"2023-08-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"183527245861175790704734003490401276672", "length":600}, "id":"ASB-A-265431505-05515eef", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java", "function":"getLockTimeout"}}, {"deprecated":false, "digest":{"function_hash":"148841041184183105348486301472293289503", "length":718}, "id":"ASB-A-265431505-0e3acf33", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java", "function":"playSound"}}, {"deprecated":false, "digest":{"line_hashes":["39689452442272565971453877497751893524", "25307676321278645062288265663908796245", "7126838083485310030333911645021887272", "329967580688749719186970430467551999062", "275712561779024352939463625905345362089", "260001323114698046348111294318812881405", "92885252033579864700461838307405739932", "16997948821922028804669429965704681353", "148108479212846542151523964273568860188", "44515452398227537616293316968546412561", "62955029567051782759864073557872053134", "153487917297176115130128064257690950561", "332222086054823375604207172406661778732", "260831415211971711176607302846435592979", "122089986153144273567193581275727672468"], "threshold":0.9}, "id":"ASB-A-265431505-8a897228", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/67e0292d0cb4350165117e03893aaee5c144c18e", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-08-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e"], "severity":"High", "spl":"2023-08-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"183527245861175790704734003490401276672", "length":600}, "id":"ASB-A-265431505-5d78ec34", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java", "function":"getLockTimeout"}}, {"deprecated":false, "digest":{"function_hash":"148841041184183105348486301472293289503", "length":718}, "id":"ASB-A-265431505-764dea84", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java", "function":"playSound"}}, {"deprecated":false, "digest":{"line_hashes":["39689452442272565971453877497751893524", "25307676321278645062288265663908796245", "7126838083485310030333911645021887272", "329967580688749719186970430467551999062", "275712561779024352939463625905345362089", "260001323114698046348111294318812881405", "92885252033579864700461838307405739932", "16997948821922028804669429965704681353", "148108479212846542151523964273568860188", "44515452398227537616293316968546412561", "62955029567051782759864073557872053134", "153487917297176115130128064257690950561", "332222086054823375604207172406661778732", "260831415211971711176607302846435592979", "122089986153144273567193581275727672468"], "threshold":0.9}, "id":"ASB-A-265431505-9fbf19b8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/dbdfadc24c81453c9c51e0d549b0ace924f4341e", "target":{"file":"packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-08-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/badb243574d7fca9aa89152d9d25eeb4f8615385"}]}