{"id":"ASB-A-282932362", "published":"2023-09-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2023-35667", "A-282932362"], "details":"In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13-next:0"}, {"fixed":"13-next:2023-09-01"}]}], "versions":["13-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584"], "severity":"High", "spl":"2023-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["294634124367052248394386169020166284332", "88978324236892491589589473784292263755", "338648485654313087033711728065430332615", "23490566985865722460150269654695484889", "311102167549770408879217341121839656861", "169463383663347648238209179806123155112", "50095465476844736254488280357616909642", "311979823625657768011505661099237700423", "31475890204875172956866694110480993125", "161995774345632681254635797589659718457", "164806847262468580437277558392722777872", "267856684840699630275303187950722349617", "86302340247680539963635686592900572666", "148902671344144800006931471106531470431", "233836032053406092975279555218148150058", "248617778258688144593508837074603140508", "232931942805321005549525985093687694157", "319954440759973053585703265865772051211", "79225239066849275162562687857509757244", "283818049274769867037035755030254039312", "256926395637488356157908408455088463188", "50144567922314070038319525632061107406", "305654933404569180227289694336132042047", "44065827442217306034033007115848906613", "206512885198128945474527575338259788624", "200912777762029283255840870451978826290", "60811113481700690404943496240128455469", "10446807632321441200596594366663099475", "109217972755243278935936864671528543551", "260414775887767581580501615675157495936", "52632036557187475069681974316393234387", "60789226259898073242313770178947129931", "291946532229831602515538084239604602921", "105391211794244050679731883062424017587", "76595963237905621111179196260539904080"], "threshold":0.9}, "id":"ASB-A-282932362-341cccd0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java"}}, {"deprecated":false, "digest":{"line_hashes":["133677757676520135314588694683370645133", "299221302668883357005184746557149656155", "280187265363326819776817186053931184879", "225667133675634608932135500009042086062"], "threshold":0.9}, "id":"ASB-A-282932362-366506c2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationBackend.java"}}, {"deprecated":false, "digest":{"function_hash":"288807591368520171509556197179534220001", "length":653}, "id":"ASB-A-282932362-3a960fba", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationBackend.java", "function":"getDeviceList"}}, {"deprecated":false, "digest":{"function_hash":"96784778302604530250323795759933278269", "length":2329}, "id":"ASB-A-282932362-61e93623", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java", "function":"updateList"}}, {"deprecated":false, "digest":{"function_hash":"319666683386069641356650172409346123272", "length":885}, "id":"ASB-A-282932362-70e618e6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java", "function":"onCreate"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2023-09-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/173cc267e0fb854cc7247e9f1e3acff0a325c4af"], "severity":"High", "spl":"2023-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["233836032053406092975279555218148150058", "248617778258688144593508837074603140508", "232931942805321005549525985093687694157", "319954440759973053585703265865772051211", "79225239066849275162562687857509757244", "283818049274769867037035755030254039312", "256926395637488356157908408455088463188", "50144567922314070038319525632061107406", "122105133364015045938597796779026425921", "179532852425826326692299436443241249389", "109217972755243278935936864671528543551", "260414775887767581580501615675157495936", "52632036557187475069681974316393234387", "129410244608970101961765586454956640494", "71646175992933871088672163936187901605", "329191465414273302375331598533272454494", "85424555280039072357891418297497513005"], "threshold":0.9}, "id":"ASB-A-282932362-25d36b27", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/173cc267e0fb854cc7247e9f1e3acff0a325c4af", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java"}}, {"deprecated":false, "digest":{"function_hash":"106937410198888050500698919619882963327", "length":1986}, "id":"ASB-A-282932362-5cf12009", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/173cc267e0fb854cc7247e9f1e3acff0a325c4af", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java", "function":"updateList"}}, {"deprecated":false, "digest":{"function_hash":"237566696159920372272111111547487334546", "length":937}, "id":"ASB-A-282932362-ba5c0a06", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/173cc267e0fb854cc7247e9f1e3acff0a325c4af", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java", "function":"onCreate"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2023-09-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584"], "severity":"High", "spl":"2023-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"319666683386069641356650172409346123272", "length":885}, "id":"ASB-A-282932362-12b6ef45", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["294634124367052248394386169020166284332", "88978324236892491589589473784292263755", "338648485654313087033711728065430332615", "23490566985865722460150269654695484889", "311102167549770408879217341121839656861", "169463383663347648238209179806123155112", "50095465476844736254488280357616909642", "311979823625657768011505661099237700423", "31475890204875172956866694110480993125", "161995774345632681254635797589659718457", "164806847262468580437277558392722777872", "267856684840699630275303187950722349617", "86302340247680539963635686592900572666", "148902671344144800006931471106531470431", "233836032053406092975279555218148150058", "248617778258688144593508837074603140508", "232931942805321005549525985093687694157", "319954440759973053585703265865772051211", "79225239066849275162562687857509757244", "283818049274769867037035755030254039312", "256926395637488356157908408455088463188", "50144567922314070038319525632061107406", "305654933404569180227289694336132042047", "44065827442217306034033007115848906613", "206512885198128945474527575338259788624", "200912777762029283255840870451978826290", "60811113481700690404943496240128455469", "10446807632321441200596594366663099475", "109217972755243278935936864671528543551", "260414775887767581580501615675157495936", "52632036557187475069681974316393234387", "60789226259898073242313770178947129931", "291946532229831602515538084239604602921", "105391211794244050679731883062424017587", "76595963237905621111179196260539904080"], "threshold":0.9}, "id":"ASB-A-282932362-6ce37603", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java"}}, {"deprecated":false, "digest":{"function_hash":"288807591368520171509556197179534220001", "length":653}, "id":"ASB-A-282932362-90e54c51", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationBackend.java", "function":"getDeviceList"}}, {"deprecated":false, "digest":{"line_hashes":["133677757676520135314588694683370645133", "299221302668883357005184746557149656155", "280187265363326819776817186053931184879", "225667133675634608932135500009042086062"], "threshold":0.9}, "id":"ASB-A-282932362-ef299240", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationBackend.java"}}, {"deprecated":false, "digest":{"function_hash":"96784778302604530250323795759933278269", "length":2329}, "id":"ASB-A-282932362-f5fb5512", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java", "function":"updateList"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2023-09-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584"], "severity":"High", "spl":"2023-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"288807591368520171509556197179534220001", "length":653}, "id":"ASB-A-282932362-21ee2402", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationBackend.java", "function":"getDeviceList"}}, {"deprecated":false, "digest":{"line_hashes":["133677757676520135314588694683370645133", "299221302668883357005184746557149656155", "280187265363326819776817186053931184879", "225667133675634608932135500009042086062"], "threshold":0.9}, "id":"ASB-A-282932362-5efc24d6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationBackend.java"}}, {"deprecated":false, "digest":{"function_hash":"319666683386069641356650172409346123272", "length":885}, "id":"ASB-A-282932362-8e93c0fd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["294634124367052248394386169020166284332", "88978324236892491589589473784292263755", "338648485654313087033711728065430332615", "23490566985865722460150269654695484889", "311102167549770408879217341121839656861", "169463383663347648238209179806123155112", "50095465476844736254488280357616909642", "311979823625657768011505661099237700423", "31475890204875172956866694110480993125", "161995774345632681254635797589659718457", "164806847262468580437277558392722777872", "267856684840699630275303187950722349617", "86302340247680539963635686592900572666", "148902671344144800006931471106531470431", "233836032053406092975279555218148150058", "248617778258688144593508837074603140508", "232931942805321005549525985093687694157", "319954440759973053585703265865772051211", "79225239066849275162562687857509757244", "283818049274769867037035755030254039312", "256926395637488356157908408455088463188", "50144567922314070038319525632061107406", "305654933404569180227289694336132042047", "44065827442217306034033007115848906613", "206512885198128945474527575338259788624", "200912777762029283255840870451978826290", "60811113481700690404943496240128455469", "10446807632321441200596594366663099475", "109217972755243278935936864671528543551", "260414775887767581580501615675157495936", "52632036557187475069681974316393234387", "60789226259898073242313770178947129931", "291946532229831602515538084239604602921", "105391211794244050679731883062424017587", "76595963237905621111179196260539904080"], "threshold":0.9}, "id":"ASB-A-282932362-acf1efc3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java"}}, {"deprecated":false, "digest":{"function_hash":"96784778302604530250323795759933278269", "length":2329}, "id":"ASB-A-282932362-d7a0d626", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java", "function":"updateList"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-09-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584"], "severity":"High", "spl":"2023-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"319666683386069641356650172409346123272", "length":885}, "id":"ASB-A-282932362-10d6f867", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"288807591368520171509556197179534220001", "length":653}, "id":"ASB-A-282932362-4925cc87", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationBackend.java", "function":"getDeviceList"}}, {"deprecated":false, "digest":{"line_hashes":["294634124367052248394386169020166284332", "88978324236892491589589473784292263755", "338648485654313087033711728065430332615", "23490566985865722460150269654695484889", "311102167549770408879217341121839656861", "169463383663347648238209179806123155112", "50095465476844736254488280357616909642", "311979823625657768011505661099237700423", "31475890204875172956866694110480993125", "161995774345632681254635797589659718457", "164806847262468580437277558392722777872", "267856684840699630275303187950722349617", "86302340247680539963635686592900572666", "148902671344144800006931471106531470431", "233836032053406092975279555218148150058", "248617778258688144593508837074603140508", "232931942805321005549525985093687694157", "319954440759973053585703265865772051211", "79225239066849275162562687857509757244", "283818049274769867037035755030254039312", "256926395637488356157908408455088463188", "50144567922314070038319525632061107406", "305654933404569180227289694336132042047", "44065827442217306034033007115848906613", "206512885198128945474527575338259788624", "200912777762029283255840870451978826290", "60811113481700690404943496240128455469", "10446807632321441200596594366663099475", "109217972755243278935936864671528543551", "260414775887767581580501615675157495936", "52632036557187475069681974316393234387", "60789226259898073242313770178947129931", "291946532229831602515538084239604602921", "105391211794244050679731883062424017587", "76595963237905621111179196260539904080"], "threshold":0.9}, "id":"ASB-A-282932362-92e992bc", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java"}}, {"deprecated":false, "digest":{"line_hashes":["133677757676520135314588694683370645133", "299221302668883357005184746557149656155", "280187265363326819776817186053931184879", "225667133675634608932135500009042086062"], "threshold":0.9}, "id":"ASB-A-282932362-beea9cc0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationBackend.java"}}, {"deprecated":false, "digest":{"function_hash":"96784778302604530250323795759933278269", "length":2329}, "id":"ASB-A-282932362-f8fcc6fd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ff255c6eda1528f01a167a9a65b7f8e414d28584", "target":{"file":"src/com/android/settings/notification/NotificationAccessSettings.java", "function":"updateList"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-09-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Settings/+/d8355ac47e068ad20c6a7b1602e72f0585ec0085"}]}