In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"37925561105198431630717745790828790684",
"219287598882371033529806209618474068027",
"298763219835494780669175459853844982874",
"209655467123332919768863699961963627156",
"40114476709787190422983461599401703534",
"247353648771061224465061843466230902834",
"76352909448916489125446734972169222230",
"181897413462654198924741599906239203466",
"287533071508793355115780566379354344535",
"71171353936523782008731091691351139718",
"56064697485911087042407131353651945496"
]
},
"id": "ASB-A-153879813-09ab3b44",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"file": "src/com/android/packageinstaller/permission/ui/AppPermissionActivity.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"315632021902950073329438787307376568481",
"261916289649077366168711332859027657550",
"312666148479856056165833947207930468263",
"195274880116815738658686983971960448149",
"304364707912588388963284692455970177592",
"169008971192786616617681705135161989896",
"261759793356371998045026300995922035658",
"70910198186196192214606322475080963584",
"101210631309914025099179111628005223085",
"78568229840689730595097465199250759032",
"268690232495153323947015627442530225006",
"144232311752542731695671407028254779303",
"258490661488857709760280150728044743506",
"127998766776323917095608392885645692069",
"182874484485167770165689928578842610386",
"119806966164046371368007162585019497215",
"178202993728459695866790588932346413683",
"277097042280809402697502777302815815355",
"235307374399567114252592690014191648561",
"223410786167399526904708904927790308484",
"201733335352420824795653814057274395036",
"100225958177266062541135526911531198889",
"215471952254974892038785341178838995569",
"60513016204536019508541297369582452455",
"211744090877283438027651630079088559126",
"38727064947208784485551288058278673731",
"26429971252028574250485110051578280831",
"209661605481822543987240273134127280467",
"161972996676335062437501776225066573507",
"76201354548455460964940916669867334675",
"175991905828121461065502542088594567986",
"240219597786972104956372912372852174579",
"278087052742512136192999115683898963316",
"75686290068209577439597857272780025855",
"23402386752393102897487032946079120352"
]
},
"id": "ASB-A-153879813-134ae616",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java"
}
},
{
"digest": {
"length": 63.0,
"function_hash": "97638338110788014445327403786247247325"
},
"id": "ASB-A-153879813-1ca899ac",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"function": "onCreate",
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java"
}
},
{
"digest": {
"length": 44.0,
"function_hash": "77508562250161306438632359657420739590"
},
"id": "ASB-A-153879813-48ce92d7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"function": "getPermissions",
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
}
},
{
"digest": {
"length": 43.0,
"function_hash": "177043306142393696012957388116413227996"
},
"id": "ASB-A-153879813-66f07063",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"function": "updatePermissionsUi",
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManageCustomPermissionsFragment.java"
}
},
{
"digest": {
"length": 1612.0,
"function_hash": "265275345214550851928026134854060496519"
},
"id": "ASB-A-153879813-7533ab72",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"function": "onCreate",
"file": "src/com/android/packageinstaller/permission/ui/AppPermissionActivity.java"
}
},
{
"digest": {
"length": 420.0,
"function_hash": "137029480368865936152179341224023352446"
},
"id": "ASB-A-153879813-8c518ad5",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"function": "onCreate",
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"240421885281523220504737685699711607772",
"133354012011649426688162836859297628638",
"25028548583884681085987705913039428237",
"69758756908463145193305519404754820027",
"275542392431003576653830777602722618246",
"168908835039623807735102151135103618432",
"281605528389519518340692967754458886837",
"94931240325969579977278641106554102332",
"98679556559382798801416737210061356470",
"330821720142973818836467177343221116263",
"261512736778151672603723003679402458732",
"96656247510146617664616861570430156625",
"221278426452134745709784690705762199815",
"248723125539946056433034484526563710787",
"38643054319455062848419412135673511789",
"276505574018708649404093798535526013816",
"168987274960068579136661251256333743730",
"21413999799850174146843212392083567212",
"248243721026397703906763323299333520053",
"30154083117587905605945493552034046400",
"150158541092085987314545093814444774336",
"253352426661235099776316685435256914049",
"132856444806108926521627483339596441515",
"67226570156706152626174148739501866073",
"89115162934441166927156231714146684864",
"317790907848113193071553698658452212246",
"156616898090401647040918786932045401634",
"42249644254584273393259405587853602333",
"29950546620506361516550174430781394968",
"37359656501852956259305044897301679331",
"325031903715653389434578030197016753048",
"107790734375637638403041833638143865738",
"188315162464040997967792144609126303629",
"209065030976753715376694121495634329938",
"126664468216838655130284199776972278678",
"234453886225269847878285348963026183434",
"309231848129758958582587949422103313807",
"161760655162483629612550961537987333475",
"281318861011048426723543960756078887132",
"49257161228209947466390173692829946194",
"206148232200886207759694016645808523312",
"91615939155803316952164922375811166473",
"2440771630730657362233805257221300552",
"307450721061485424692793785229964889838",
"58933388320043690982168261429130660557",
"67660034922338739407562148616264764771",
"15032390110756356597189892254947851697",
"191197004601953152390210658693312256515",
"70556117699155999567490026638785557847",
"30550012090436760585487627536411960023",
"157891645500743814206343216225000712175",
"236625591762049778969221982855620946523",
"55987373683958908957739053327409640092",
"72284964350901152879245029171661512011",
"269662719625918520261262134303043136905",
"231131478662582047306267489594937787393",
"231197660515699879566363531401410138648",
"156017262202790837782151132751556589191",
"214786656202815865377903246378114347517",
"63611131708361068021078992448707462127",
"269078685590062059480691661441620337093",
"99260633492693603214009222294315847351",
"273519930856175810104219443053804647120",
"199326235507753559172400817120390676364",
"11995834029232317693757157597574476796",
"161347243583608689717915535235880491817",
"7261633179225423013425236374354277522",
"183663134470502461380912674462487810956",
"146224542669151959093025228705316451319",
"178645576261877285419209672062826544963",
"320800175989783525817083741037613574991",
"3909593436085849150221466120503982378",
"168583469155591975393374374793447944927",
"234985698718584228430379092668016110384",
"113885355849063439600296448097371970809",
"165067328281243776711567823522485275418",
"69915225373839479242231542521371760173"
]
},
"id": "ASB-A-153879813-91648bda",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"110099095951763546534456953554164949511",
"192661012282718645500055210439664582322",
"108409893385006154114697267565505121947",
"5594895317219537006712694639670392148",
"56973588922552945113402326847348679294",
"97980882823056707073981587727983692870",
"4439615171372414052146478269376545725",
"61418336610958516805053548442293889981",
"146031582152571818741982535435403937867",
"220830402357624645707541772088021142512",
"64770946434387703184095910757083661301"
]
},
"id": "ASB-A-153879813-945a761b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"file": "src/com/android/packageinstaller/permission/utils/Utils.java"
}
},
{
"digest": {
"length": 1224.0,
"function_hash": "227845937029046851892533576030166535850"
},
"id": "ASB-A-153879813-96a3d553",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"function": "updatePermissionsUi",
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"268161710305744900132231279765458430802",
"66779987153428475293412003723736464654",
"287047369144279941626281801633306636001",
"26102362043560212234854302899996703792",
"337482907000638804251220540090491886041",
"53267559892298747375929259396119512255",
"75844506737463162174135050609710425133",
"287523481456116284029263113434566365612",
"109193520002395164497285531273961489193",
"235307374399567114252592690014191648561",
"221709491476990488272978692603337461265",
"46899209564565260189249461678550389599",
"190413120792584766526414646190547651925"
]
},
"id": "ASB-A-153879813-c7adc430",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManageCustomPermissionsFragment.java"
}
},
{
"digest": {
"length": 37.0,
"function_hash": "208972022311035733844886350694903749572"
},
"id": "ASB-A-153879813-c96a1676",
"deprecated": false,
"target": {
"function": "onPermissionGroupsChanged",
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
},
"signature_type": "Function",
"match_only_versions": [
"11-next"
],
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"signature_version": "v1"
},
{
"digest": {
"length": 211.0,
"function_hash": "266955580306784250954883025052735837438"
},
"id": "ASB-A-153879813-ceecbae7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"function": "getPermissionInfosForGroup",
"file": "src/com/android/packageinstaller/permission/utils/Utils.java"
}
},
{
"digest": {
"length": 20.0,
"function_hash": "304993889737481510896831156289748759116"
},
"id": "ASB-A-153879813-d042f902",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"function": "updatePermissionsUi",
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
}
},
{
"digest": {
"length": 1176.0,
"function_hash": "303283544610584327529046130986039057895"
},
"id": "ASB-A-153879813-eacff4ba",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"function": "updatePermissionsUi",
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java"
}
},
{
"digest": {
"length": 525.0,
"function_hash": "142374556800398351345354105549699687048"
},
"id": "ASB-A-153879813-fdb50305",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
"target": {
"function": "onPreferenceClick",
"file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"
],
"types": [
"EoP"
],
"spl": "2020-11-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"234313598412056486043284828466060306736",
"21923750258978695531762103156272468378",
"6124665663430185512169264032751165363"
]
},
"id": "ASB-A-153879813-2a0f26a8",
"deprecated": false,
"target": {
"file": "src/com/android/packageinstaller/permission/ui/GrantPermissionsActivity.java"
},
"signature_type": "Line",
"match_only_versions": [
"10"
],
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a",
"signature_version": "v1"
},
{
"digest": {
"length": 211.0,
"function_hash": "266955580306784250954883025052735837438"
},
"id": "ASB-A-153879813-6848562a",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a",
"target": {
"function": "getPermissionInfosForGroup",
"file": "src/com/android/packageinstaller/permission/utils/Utils.java"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"306958079687056447884669764837349335261",
"248415811608635560014478564784839317575",
"39397916374352069445815716002098561740",
"283162938228251623632314616422175742691",
"47434107548427479256198968945616336465",
"201646817754642558195316124291070889862",
"110959809400831136447195181045651190208",
"224724940023597329410643627561444504074",
"246941056700526996886870170761768140662",
"10973729175679088721493329227948590012",
"68827460266646834950380429093531413092"
]
},
"id": "ASB-A-153879813-9db935c7",
"deprecated": false,
"target": {
"file": "src/com/android/packageinstaller/permission/utils/SafetyNetLogger.java"
},
"signature_type": "Line",
"match_only_versions": [
"10"
],
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a",
"signature_version": "v1"
},
{
"digest": {
"length": 3441.0,
"function_hash": "155269418000446953758025949038387156254"
},
"id": "ASB-A-153879813-c4c3bef7",
"deprecated": false,
"target": {
"function": "onCreate",
"file": "src/com/android/packageinstaller/permission/ui/GrantPermissionsActivity.java"
},
"signature_type": "Function",
"match_only_versions": [
"10"
],
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"327884605714745277504937997217095596897",
"230459611331252932704968786228486782408",
"4439615171372414052146478269376545725",
"61418336610958516805053548442293889981"
]
},
"id": "ASB-A-153879813-e0e5551c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a",
"target": {
"file": "src/com/android/packageinstaller/permission/utils/Utils.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a"
],
"types": [
"EoP"
],
"spl": "2020-11-01",
"severity": "High"
}