ASB-A-154323381

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-154323381.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-154323381
Aliases
  • A-154323381
  • CVE-2020-0398
Published
2020-10-01T00:00:00Z
Modified
2026-09-23T18:42:52Z
Summary
[none]
Details

In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/services/Telephony

Package

Name
platform/packages/services/Telephony

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2020-10-01

Affected versions

Other
10

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/services/Telephony/+/b722e6d0bef5bdcf3cf7368b765ed08a98bdee1c"
    ],
    "severity":  "High",
    "spl":  "2020-10-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "118891934688457000588694617252251358123",
                "length":  1817
            },
            "id":  "ASB-A-154323381-14bcd385",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telephony/+/b722e6d0bef5bdcf3cf7368b765ed08a98bdee1c",
            "target":  {
                "file":  "src/com/android/phone/NotificationMgr.java",
                "function":  "updateCfi"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "291758995638928117729529931136582371400",
                "length":  935
            },
            "id":  "ASB-A-154323381-19ab7166",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telephony/+/b722e6d0bef5bdcf3cf7368b765ed08a98bdee1c",
            "target":  {
                "file":  "src/com/android/phone/NotificationMgr.java",
                "function":  "showDataDisconnectedRoaming"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "265140102369180153285569643997638336446",
                    "56764018562594915487821848992244143453",
                    "257363152266438189000120890717951228671",
                    "340228265644653042191994361831970247695",
                    "40603954702908614189737089737507001609",
                    "46172220657390890801239250354430434439",
                    "122955238063153417043208236720308182883",
                    "40957653701084111105334611405985659407",
                    "153180109067042416946594760160744867278",
                    "9579720642722567617161959736900012085",
                    "310779639648123452954544692477443865574",
                    "138097297092970187919989632528491147129",
                    "327945833271495185885896893359366071469",
                    "260806432887035010908317663305480350689",
                    "277319764255446523099854316247119081032",
                    "225933412891481146513674979089324314435"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-154323381-97668fb6",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telephony/+/b722e6d0bef5bdcf3cf7368b765ed08a98bdee1c",
            "target":  {
                "file":  "src/com/android/phone/NotificationMgr.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "106090137011265485625882723923773067534",
                "length":  3934
            },
            "id":  "ASB-A-154323381-dd86cc42",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telephony/+/b722e6d0bef5bdcf3cf7368b765ed08a98bdee1c",
            "target":  {
                "file":  "src/com/android/phone/NotificationMgr.java",
                "function":  "updateMwi"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "50445700416993342029039016348416028384",
                "length":  1245
            },
            "id":  "ASB-A-154323381-e85bace1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telephony/+/b722e6d0bef5bdcf3cf7368b765ed08a98bdee1c",
            "target":  {
                "file":  "src/com/android/phone/NotificationMgr.java",
                "function":  "showNetworkSelection"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-154323381.json"