ASB-A-260570119 — Vulnetix

ASB-A-260570119 PUBLISHED

In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	packages/apps/Settings	13-next:0, 13-next, 11:0
platform	frameworks/base	11, 13-next:0, 13-next

Timeline

Jun 1, 2023 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2023-06-01 advisory
https://android.googlesource.com/platform/packages/apps/Settings/+/5569a796551a070de685cc5df040f6a1501e4370 patch
https://android.googlesource.com/platform/frameworks/base/+/e4e2fbe1e38ce20b55326cecf18066790dcc5813 patch

Open in Interactive Console →