{"id":"PUB-A-261193711", "published":"2023-03-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2023-21003", "A-261193711"], "details":"In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-03-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195"], "severity":"Moderate", "spl":"2023-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"236674640356316981490238634542101464405", "length":41}, "id":"PUB-A-261193711-189d79bf", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195", "target":{"file":"src/com/android/settings/development/transcode/TranscodeUserControlPreferenceController.java", "function":"getAvailabilityStatus"}}, {"deprecated":false, "digest":{"line_hashes":["239880030475804735525045444825933912466", "65704351850078556813809948977535046342", "195873909572868069413272498223059350418", "268658970141709656488395093631520305436", "292715688784288596723357206484415551131", "57359629083677711734317689052449970984", "17658525698197149359312474093111707770", "99229433249471519821989055320866350730"], "threshold":0.9}, "id":"PUB-A-261193711-361081dc", "match_only_versions":["13"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195", "target":{"file":"src/com/android/settings/development/transcode/TranscodeDefaultOptionPreferenceController.java"}}, {"deprecated":false, "digest":{"line_hashes":["48768572421316594062312206303639621843", "301798775457644447576401298549072058616", "150738791912824412530217483185926606827", "133403862737260672454793960964894045193", "292715688784288596723357206484415551131", "57359629083677711734317689052449970984", "17658525698197149359312474093111707770", "99229433249471519821989055320866350730"], "threshold":0.9}, "id":"PUB-A-261193711-39e48bd7", "match_only_versions":["13"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195", "target":{"file":"src/com/android/settings/development/transcode/TranscodeDisableCachePreferenceController.java"}}, {"deprecated":false, "digest":{"line_hashes":["48768572421316594062312206303639621843", "34849504718725692069715510852686235342", "260370935935775650813883337895458227256", "131662718029329003361181297774797701169", "292715688784288596723357206484415551131", "57359629083677711734317689052449970984", "17658525698197149359312474093111707770", "99229433249471519821989055320866350730"], "threshold":0.9}, "id":"PUB-A-261193711-45a8bad8", "match_only_versions":["13"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195", "target":{"file":"src/com/android/settings/development/transcode/TranscodeNotificationPreferenceController.java"}}, {"deprecated":false, "digest":{"function_hash":"236674640356316981490238634542101464405", "length":41}, "id":"PUB-A-261193711-5e170185", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195", "target":{"file":"src/com/android/settings/development/transcode/TranscodeDisableCachePreferenceController.java", "function":"getAvailabilityStatus"}}, {"deprecated":false, "digest":{"line_hashes":["239880030475804735525045444825933912466", "62859097913664052776379718640344266149", "195155293114913528184689025863770529535", "44175000209319174538087884074594626186", "292715688784288596723357206484415551131", "57359629083677711734317689052449970984", "17658525698197149359312474093111707770", "268536318218162864781791918005771363384"], "threshold":0.9}, "id":"PUB-A-261193711-6a355bc5", "match_only_versions":["13"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195", "target":{"file":"src/com/android/settings/development/transcode/TranscodeGlobalTogglePreferenceController.java"}}, {"deprecated":false, "digest":{"function_hash":"236674640356316981490238634542101464405", "length":41}, "id":"PUB-A-261193711-bf170b53", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195", "target":{"file":"src/com/android/settings/development/transcode/TranscodeDefaultOptionPreferenceController.java", "function":"getAvailabilityStatus"}}, {"deprecated":false, "digest":{"line_hashes":["239880030475804735525045444825933912466", "298682993907660681430809088245915255082", "286521373903989292261427173267641386148", "337570814500351384600730464191709818310", "292715688784288596723357206484415551131", "57359629083677711734317689052449970984", "17658525698197149359312474093111707770", "99229433249471519821989055320866350730"], "threshold":0.9}, "id":"PUB-A-261193711-eebd2892", "match_only_versions":["13"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195", "target":{"file":"src/com/android/settings/development/transcode/TranscodeUserControlPreferenceController.java"}}, {"deprecated":false, "digest":{"function_hash":"236674640356316981490238634542101464405", "length":41}, "id":"PUB-A-261193711-efab6e41", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195", "target":{"file":"src/com/android/settings/development/transcode/TranscodeNotificationPreferenceController.java", "function":"getAvailabilityStatus"}}, {"deprecated":false, "digest":{"function_hash":"236674640356316981490238634542101464405", "length":41}, "id":"PUB-A-261193711-fc658b42", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195", "target":{"file":"src/com/android/settings/development/transcode/TranscodeGlobalTogglePreferenceController.java", "function":"getAvailabilityStatus"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-03-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Settings/+/49cd8d88d1911dc4a54545f4dadb8a36e9897195"}]}