{"id":"ASB-A-321941232", "published":"2024-06-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2024-31316", "A-321941232"], "details":"In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14-next:0"}, {"fixed":"14-next:2024-06-01"}]}], "versions":["14-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f"], "severity":"High", "spl":"2024-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["43017519177807145379844587256330931130", "139549962752152272045834324551080332683", "46166860129893155148489994109394520273", "151925316201904684545703073333062340217", "88177422329759679498275831166755363630", "333038691317117628589156366416045184805", "260091925435370503263492716894760897750", "81471061794916198013446098851041423573"], "threshold":0.9}, "id":"ASB-A-321941232-142d2ffa", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"286536814451441444959706260141745055461", "length":2544}, "id":"ASB-A-321941232-24472333", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java", "function":"onResult"}}, {"deprecated":false, "digest":{"function_hash":"89106852036193553990570587903130390372", "length":2142}, "id":"ASB-A-321941232-fb1cc60d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java", "function":"onResult"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2024-06-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f"], "severity":"High", "spl":"2024-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["43017519177807145379844587256330931130", "139549962752152272045834324551080332683", "46166860129893155148489994109394520273", "151925316201904684545703073333062340217", "88177422329759679498275831166755363630", "333038691317117628589156366416045184805", "260091925435370503263492716894760897750", "81471061794916198013446098851041423573"], "threshold":0.9}, "id":"ASB-A-321941232-2ac36f97", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"286536814451441444959706260141745055461", "length":2544}, "id":"ASB-A-321941232-5d58bec5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java", "function":"onResult"}}, {"deprecated":false, "digest":{"function_hash":"89106852036193553990570587903130390372", "length":2142}, "id":"ASB-A-321941232-74b5d60c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java", "function":"onResult"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2024-06-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f"], "severity":"High", "spl":"2024-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"286536814451441444959706260141745055461", "length":2544}, "id":"ASB-A-321941232-366e58f6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java", "function":"onResult"}}, {"deprecated":false, "digest":{"line_hashes":["43017519177807145379844587256330931130", "139549962752152272045834324551080332683", "46166860129893155148489994109394520273", "151925316201904684545703073333062340217", "88177422329759679498275831166755363630", "333038691317117628589156366416045184805", "260091925435370503263492716894760897750", "81471061794916198013446098851041423573"], "threshold":0.9}, "id":"ASB-A-321941232-6e4714d9", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"89106852036193553990570587903130390372", "length":2142}, "id":"ASB-A-321941232-884dad92", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java", "function":"onResult"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2024-06-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f"], "severity":"High", "spl":"2024-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"89106852036193553990570587903130390372", "length":2142}, "id":"ASB-A-321941232-20a2d5ce", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java", "function":"onResult"}}, {"deprecated":false, "digest":{"function_hash":"286536814451441444959706260141745055461", "length":2544}, "id":"ASB-A-321941232-864c50ef", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java", "function":"onResult"}}, {"deprecated":false, "digest":{"line_hashes":["43017519177807145379844587256330931130", "139549962752152272045834324551080332683", "46166860129893155148489994109394520273", "151925316201904684545703073333062340217", "88177422329759679498275831166755363630", "333038691317117628589156366416045184805", "260091925435370503263492716894760897750", "81471061794916198013446098851041423573"], "threshold":0.9}, "id":"ASB-A-321941232-d58f7b30", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2024-06-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f"], "severity":"High", "spl":"2024-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"89106852036193553990570587903130390372", "length":2142}, "id":"ASB-A-321941232-5a2eb393", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java", "function":"onResult"}}, {"deprecated":false, "digest":{"line_hashes":["43017519177807145379844587256330931130", "139549962752152272045834324551080332683", "46166860129893155148489994109394520273", "151925316201904684545703073333062340217", "88177422329759679498275831166755363630", "333038691317117628589156366416045184805", "260091925435370503263492716894760897750", "81471061794916198013446098851041423573"], "threshold":0.9}, "id":"ASB-A-321941232-5c681b33", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"286536814451441444959706260141745055461", "length":2544}, "id":"ASB-A-321941232-e51d7af9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36db8a1d61a881f89fdd3911886adcda6e1f0d7f", "target":{"file":"services/core/java/com/android/server/accounts/AccountManagerService.java", "function":"onResult"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2024-06-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/3457d82f8e265ad615b38f6a2aa3c33f1e100cb9"}]}