ASB-A-153879813

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-153879813.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-153879813
Aliases
Published
2020-11-01T00:00:00Z
Modified
2026-04-21T15:25:42.831358Z
Summary
[none]
Details

In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/apps/PackageInstaller

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11-next:0
Fixed
11-next:2020-11-01

Affected versions

Other
11-next

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "37925561105198431630717745790828790684",
                    "219287598882371033529806209618474068027",
                    "298763219835494780669175459853844982874",
                    "209655467123332919768863699961963627156",
                    "40114476709787190422983461599401703534",
                    "247353648771061224465061843466230902834",
                    "76352909448916489125446734972169222230",
                    "181897413462654198924741599906239203466",
                    "287533071508793355115780566379354344535",
                    "71171353936523782008731091691351139718",
                    "56064697485911087042407131353651945496"
                ]
            },
            "id": "ASB-A-153879813-09ab3b44",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "file": "src/com/android/packageinstaller/permission/ui/AppPermissionActivity.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "315632021902950073329438787307376568481",
                    "261916289649077366168711332859027657550",
                    "312666148479856056165833947207930468263",
                    "195274880116815738658686983971960448149",
                    "304364707912588388963284692455970177592",
                    "169008971192786616617681705135161989896",
                    "261759793356371998045026300995922035658",
                    "70910198186196192214606322475080963584",
                    "101210631309914025099179111628005223085",
                    "78568229840689730595097465199250759032",
                    "268690232495153323947015627442530225006",
                    "144232311752542731695671407028254779303",
                    "258490661488857709760280150728044743506",
                    "127998766776323917095608392885645692069",
                    "182874484485167770165689928578842610386",
                    "119806966164046371368007162585019497215",
                    "178202993728459695866790588932346413683",
                    "277097042280809402697502777302815815355",
                    "235307374399567114252592690014191648561",
                    "223410786167399526904708904927790308484",
                    "201733335352420824795653814057274395036",
                    "100225958177266062541135526911531198889",
                    "215471952254974892038785341178838995569",
                    "60513016204536019508541297369582452455",
                    "211744090877283438027651630079088559126",
                    "38727064947208784485551288058278673731",
                    "26429971252028574250485110051578280831",
                    "209661605481822543987240273134127280467",
                    "161972996676335062437501776225066573507",
                    "76201354548455460964940916669867334675",
                    "175991905828121461065502542088594567986",
                    "240219597786972104956372912372852174579",
                    "278087052742512136192999115683898963316",
                    "75686290068209577439597857272780025855",
                    "23402386752393102897487032946079120352"
                ]
            },
            "id": "ASB-A-153879813-134ae616",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java"
            }
        },
        {
            "digest": {
                "length": 63.0,
                "function_hash": "97638338110788014445327403786247247325"
            },
            "id": "ASB-A-153879813-1ca899ac",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "function": "onCreate",
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java"
            }
        },
        {
            "digest": {
                "length": 44.0,
                "function_hash": "77508562250161306438632359657420739590"
            },
            "id": "ASB-A-153879813-48ce92d7",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "function": "getPermissions",
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
            }
        },
        {
            "digest": {
                "length": 43.0,
                "function_hash": "177043306142393696012957388116413227996"
            },
            "id": "ASB-A-153879813-66f07063",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "function": "updatePermissionsUi",
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManageCustomPermissionsFragment.java"
            }
        },
        {
            "digest": {
                "length": 1612.0,
                "function_hash": "265275345214550851928026134854060496519"
            },
            "id": "ASB-A-153879813-7533ab72",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "function": "onCreate",
                "file": "src/com/android/packageinstaller/permission/ui/AppPermissionActivity.java"
            }
        },
        {
            "digest": {
                "length": 420.0,
                "function_hash": "137029480368865936152179341224023352446"
            },
            "id": "ASB-A-153879813-8c518ad5",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "function": "onCreate",
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "240421885281523220504737685699711607772",
                    "133354012011649426688162836859297628638",
                    "25028548583884681085987705913039428237",
                    "69758756908463145193305519404754820027",
                    "275542392431003576653830777602722618246",
                    "168908835039623807735102151135103618432",
                    "281605528389519518340692967754458886837",
                    "94931240325969579977278641106554102332",
                    "98679556559382798801416737210061356470",
                    "330821720142973818836467177343221116263",
                    "261512736778151672603723003679402458732",
                    "96656247510146617664616861570430156625",
                    "221278426452134745709784690705762199815",
                    "248723125539946056433034484526563710787",
                    "38643054319455062848419412135673511789",
                    "276505574018708649404093798535526013816",
                    "168987274960068579136661251256333743730",
                    "21413999799850174146843212392083567212",
                    "248243721026397703906763323299333520053",
                    "30154083117587905605945493552034046400",
                    "150158541092085987314545093814444774336",
                    "253352426661235099776316685435256914049",
                    "132856444806108926521627483339596441515",
                    "67226570156706152626174148739501866073",
                    "89115162934441166927156231714146684864",
                    "317790907848113193071553698658452212246",
                    "156616898090401647040918786932045401634",
                    "42249644254584273393259405587853602333",
                    "29950546620506361516550174430781394968",
                    "37359656501852956259305044897301679331",
                    "325031903715653389434578030197016753048",
                    "107790734375637638403041833638143865738",
                    "188315162464040997967792144609126303629",
                    "209065030976753715376694121495634329938",
                    "126664468216838655130284199776972278678",
                    "234453886225269847878285348963026183434",
                    "309231848129758958582587949422103313807",
                    "161760655162483629612550961537987333475",
                    "281318861011048426723543960756078887132",
                    "49257161228209947466390173692829946194",
                    "206148232200886207759694016645808523312",
                    "91615939155803316952164922375811166473",
                    "2440771630730657362233805257221300552",
                    "307450721061485424692793785229964889838",
                    "58933388320043690982168261429130660557",
                    "67660034922338739407562148616264764771",
                    "15032390110756356597189892254947851697",
                    "191197004601953152390210658693312256515",
                    "70556117699155999567490026638785557847",
                    "30550012090436760585487627536411960023",
                    "157891645500743814206343216225000712175",
                    "236625591762049778969221982855620946523",
                    "55987373683958908957739053327409640092",
                    "72284964350901152879245029171661512011",
                    "269662719625918520261262134303043136905",
                    "231131478662582047306267489594937787393",
                    "231197660515699879566363531401410138648",
                    "156017262202790837782151132751556589191",
                    "214786656202815865377903246378114347517",
                    "63611131708361068021078992448707462127",
                    "269078685590062059480691661441620337093",
                    "99260633492693603214009222294315847351",
                    "273519930856175810104219443053804647120",
                    "199326235507753559172400817120390676364",
                    "11995834029232317693757157597574476796",
                    "161347243583608689717915535235880491817",
                    "7261633179225423013425236374354277522",
                    "183663134470502461380912674462487810956",
                    "146224542669151959093025228705316451319",
                    "178645576261877285419209672062826544963",
                    "320800175989783525817083741037613574991",
                    "3909593436085849150221466120503982378",
                    "168583469155591975393374374793447944927",
                    "234985698718584228430379092668016110384",
                    "113885355849063439600296448097371970809",
                    "165067328281243776711567823522485275418",
                    "69915225373839479242231542521371760173"
                ]
            },
            "id": "ASB-A-153879813-91648bda",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "110099095951763546534456953554164949511",
                    "192661012282718645500055210439664582322",
                    "108409893385006154114697267565505121947",
                    "5594895317219537006712694639670392148",
                    "56973588922552945113402326847348679294",
                    "97980882823056707073981587727983692870",
                    "4439615171372414052146478269376545725",
                    "61418336610958516805053548442293889981",
                    "146031582152571818741982535435403937867",
                    "220830402357624645707541772088021142512",
                    "64770946434387703184095910757083661301"
                ]
            },
            "id": "ASB-A-153879813-945a761b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "file": "src/com/android/packageinstaller/permission/utils/Utils.java"
            }
        },
        {
            "digest": {
                "length": 1224.0,
                "function_hash": "227845937029046851892533576030166535850"
            },
            "id": "ASB-A-153879813-96a3d553",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "function": "updatePermissionsUi",
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "268161710305744900132231279765458430802",
                    "66779987153428475293412003723736464654",
                    "287047369144279941626281801633306636001",
                    "26102362043560212234854302899996703792",
                    "337482907000638804251220540090491886041",
                    "53267559892298747375929259396119512255",
                    "75844506737463162174135050609710425133",
                    "287523481456116284029263113434566365612",
                    "109193520002395164497285531273961489193",
                    "235307374399567114252592690014191648561",
                    "221709491476990488272978692603337461265",
                    "46899209564565260189249461678550389599",
                    "190413120792584766526414646190547651925"
                ]
            },
            "id": "ASB-A-153879813-c7adc430",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManageCustomPermissionsFragment.java"
            }
        },
        {
            "digest": {
                "length": 37.0,
                "function_hash": "208972022311035733844886350694903749572"
            },
            "id": "ASB-A-153879813-c96a1676",
            "deprecated": false,
            "target": {
                "function": "onPermissionGroupsChanged",
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
            },
            "signature_type": "Function",
            "match_only_versions": [
                "11-next"
            ],
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "signature_version": "v1"
        },
        {
            "digest": {
                "length": 211.0,
                "function_hash": "266955580306784250954883025052735837438"
            },
            "id": "ASB-A-153879813-ceecbae7",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "function": "getPermissionInfosForGroup",
                "file": "src/com/android/packageinstaller/permission/utils/Utils.java"
            }
        },
        {
            "digest": {
                "length": 20.0,
                "function_hash": "304993889737481510896831156289748759116"
            },
            "id": "ASB-A-153879813-d042f902",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "function": "updatePermissionsUi",
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
            }
        },
        {
            "digest": {
                "length": 1176.0,
                "function_hash": "303283544610584327529046130986039057895"
            },
            "id": "ASB-A-153879813-eacff4ba",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "function": "updatePermissionsUi",
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java"
            }
        },
        {
            "digest": {
                "length": 525.0,
                "function_hash": "142374556800398351345354105549699687048"
            },
            "id": "ASB-A-153879813-fdb50305",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326",
            "target": {
                "function": "onPreferenceClick",
                "file": "src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2020-11-01",
    "severity": "High"
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-153879813.json"

Android / platform/packages/apps/PackageInstaller

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2020-11-01

Affected versions

Other
10

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "234313598412056486043284828466060306736",
                    "21923750258978695531762103156272468378",
                    "6124665663430185512169264032751165363"
                ]
            },
            "id": "ASB-A-153879813-2a0f26a8",
            "deprecated": false,
            "target": {
                "file": "src/com/android/packageinstaller/permission/ui/GrantPermissionsActivity.java"
            },
            "signature_type": "Line",
            "match_only_versions": [
                "10"
            ],
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a",
            "signature_version": "v1"
        },
        {
            "digest": {
                "length": 211.0,
                "function_hash": "266955580306784250954883025052735837438"
            },
            "id": "ASB-A-153879813-6848562a",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a",
            "target": {
                "function": "getPermissionInfosForGroup",
                "file": "src/com/android/packageinstaller/permission/utils/Utils.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "306958079687056447884669764837349335261",
                    "248415811608635560014478564784839317575",
                    "39397916374352069445815716002098561740",
                    "283162938228251623632314616422175742691",
                    "47434107548427479256198968945616336465",
                    "201646817754642558195316124291070889862",
                    "110959809400831136447195181045651190208",
                    "224724940023597329410643627561444504074",
                    "246941056700526996886870170761768140662",
                    "10973729175679088721493329227948590012",
                    "68827460266646834950380429093531413092"
                ]
            },
            "id": "ASB-A-153879813-9db935c7",
            "deprecated": false,
            "target": {
                "file": "src/com/android/packageinstaller/permission/utils/SafetyNetLogger.java"
            },
            "signature_type": "Line",
            "match_only_versions": [
                "10"
            ],
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a",
            "signature_version": "v1"
        },
        {
            "digest": {
                "length": 3441.0,
                "function_hash": "155269418000446953758025949038387156254"
            },
            "id": "ASB-A-153879813-c4c3bef7",
            "deprecated": false,
            "target": {
                "function": "onCreate",
                "file": "src/com/android/packageinstaller/permission/ui/GrantPermissionsActivity.java"
            },
            "signature_type": "Function",
            "match_only_versions": [
                "10"
            ],
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "327884605714745277504937997217095596897",
                    "230459611331252932704968786228486782408",
                    "4439615171372414052146478269376545725",
                    "61418336610958516805053548442293889981"
                ]
            },
            "id": "ASB-A-153879813-e0e5551c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a",
            "target": {
                "file": "src/com/android/packageinstaller/permission/utils/Utils.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2020-11-01",
    "severity": "High"
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-153879813.json"