ASB-A-281044385

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-281044385.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-281044385

Aliases

A-281044385
CVE-2024-43084

Published

2024-11-01T00:00:00Z

Modified

2024-11-06T16:12:12.008079Z

Summary

[none]

Details

In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

15-next:0

Fixed

15-next:2024-11-01

Affected versions

Other

15-next

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "10510999966334574279305722242451318199",
                    "45624935327614318953256630095580261923",
                    "88862101754165718251039929288440973010",
                    "123442478213385419831478048965200226762",
                    "261571390405565706709003200902133125804",
                    "45883897862656844072827701537777195070",
                    "142764219807960318275023873616153889276",
                    "155373235451303780094325786996518966673",
                    "49981588967733474517399634290453951563",
                    "83286379831050784995635899275405895041",
                    "243555200852200659624259429292278405497",
                    "155373235451303780094325786996518966673",
                    "49981588967733474517399634290453951563",
                    "184378576880802386689416999093283739996",
                    "191806936659674396850792655262886060745",
                    "21235937052953042572597888800073948978",
                    "200180594152380276820622654550619540821",
                    "29079217341050940120791020350458989067",
                    "81595622362258368310746865327607710615",
                    "302086928097423432627172955140172345953",
                    "173993705994644571187001930534900680128",
                    "81713959684661101519637763887157616690",
                    "219374834455587785019446754860677867943",
                    "124672837057353313624121635866941804072",
                    "54451855161250744561465910213750156585",
                    "93626569860004836606333716824471718244",
                    "149247579473422910260981314518031220889",
                    "27219370413290196648737613963397520106",
                    "233859046065629953084836555122924572024",
                    "319564703865883751452108161908231449715",
                    "75407180318704451699303769443305508093",
                    "161647537139600399971971420418828399569",
                    "42215653947126611667948844128824813674",
                    "162365430782717823755100250245402003271",
                    "225668494625327505211209031266487151798",
                    "160613521035711799537827983944293222081",
                    "200322272169322909612143317388256242218",
                    "222512300424861850237015065106727888205",
                    "52959140454601314760806148885371656096"
                ]
            },
            "id": "ASB-A-281044385-832e8fce",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/57bf60dd7b6a0a0e9785231f8ec25a458fedde64",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 80.0,
                "function_hash": "288860386835197189624262581952663062056"
            },
            "id": "ASB-A-281044385-943db91a",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/47fa2f79584b0a4e9ca7e9c6b237c4e5cf699032",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/Person.java",
                "function": "visitUris"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "81780510925217913499770296184564214094",
                    "139543985378760233612091164945055767821",
                    "116210352605243371856843879751749052626",
                    "214019929480860862798213677602168558104"
                ]
            },
            "id": "ASB-A-281044385-e62b1f70",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/47fa2f79584b0a4e9ca7e9c6b237c4e5cf699032",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/Person.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/57bf60dd7b6a0a0e9785231f8ec25a458fedde64",
        "https://android.googlesource.com/platform/frameworks/base/+/47fa2f79584b0a4e9ca7e9c6b237c4e5cf699032"
    ],
    "spl": "2024-11-01",
    "severity": "High",
    "types": [
        "ID"
    ]
}