ASB-A-157748906

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-157748906.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-157748906

Aliases

A-157748906
CVE-2020-0378

Published

2020-10-01T00:00:00Z

Modified

2026-04-17T15:55:28.020024Z

Summary

[none]

Details

In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/opt/net/wifi

Package

Name: platform/frameworks/opt/net/wifi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

9:0

Fixed

9:2020-10-01

Affected versions

Other

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 873.0,
                "function_hash": "118692437159917888076542559401671551589"
            },
            "id": "ASB-A-157748906-419fbae5",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37",
            "target": {
                "function": "onWnmFrameReceived",
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointManager.java"
            }
        },
        {
            "digest": {
                "length": 482.0,
                "function_hash": "95688670919087288118905486060953796734"
            },
            "id": "ASB-A-157748906-4545a832",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37",
            "target": {
                "function": "onIconResponse",
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointManager.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "85703247052677266342429287815832870131",
                    "292070200299419660318108824633728262119",
                    "115018985408737932837268647240267075347",
                    "337867999390665874454787368945333587976",
                    "246954290680121386285332263165632670486",
                    "94265423722708727639571042189771951441",
                    "10880124798908889045109750769602360172",
                    "334725352727580461192947858900574191494",
                    "106712558426537259599591369856063971186",
                    "237094367391074900981970515721174152062",
                    "266807709559256370689466340053702985295",
                    "23083332515103345737387937334265383493",
                    "72614190358942477933937237427875655290",
                    "80292512385685227457099075515775979116",
                    "201803155138807441287147138730307482438",
                    "218191935641737017662700909027371904672",
                    "196100823232953483403742634132018679663",
                    "72802408049639201795502134277364744200",
                    "177434735461879984994984248179770577141",
                    "275077835771183303159974559785422247595",
                    "258105107056318445867786070699722185368",
                    "132826694883517297373598954230676465802",
                    "316094533388768848679571173118469859208",
                    "51193481330141136799736485758506914429",
                    "333649246581577996052391171887036106453",
                    "171345371354684692693553525240169130891",
                    "186935049362517796705199890907527820265",
                    "99873001559877148788442869911423821953",
                    "250135682823416150408058530225690757857",
                    "188650156648124932180807773848751702182",
                    "325302105395056947206770964000509184755",
                    "104367844053993832955306654776432554342",
                    "64811209644989030036127027307900975655",
                    "122954848206014058745072942287267363412",
                    "55242293506119933078103432601236330164",
                    "210233369987956945478351747811317707279",
                    "116384269367444902060507551188580576236",
                    "24530175066186166947489559521194910357",
                    "172686392448012739482001726134326715855",
                    "307559554523315731177933040584508964901",
                    "307654214213703221407934329760663742589",
                    "296007869128016521089496005316746009900",
                    "52491004088882614359396389821523819947",
                    "266918300515128625432538254827629450586",
                    "50652484558706740967182762669657078597",
                    "270587162565588649173993421865388402697",
                    "180139621815247578584574472696903105007",
                    "265466894258700336101701085703653135106",
                    "92685023393857183252208087673331660175",
                    "294567916363889755251885521811940521089",
                    "55951099842143349810447710986510944199",
                    "101001248860363702129564056140239495355",
                    "64811209644989030036127027307900975655",
                    "284938614640927021955972400074977378869",
                    "141309040549019665991124967108476586467"
                ]
            },
            "id": "ASB-A-157748906-bdec8ffb",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37",
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointManager.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37"
    ],
    "types": [
        "ID"
    ],
    "spl": "2020-10-01",
    "severity": "High"
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-157748906.json"