ASB-A-159062405

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-159062405.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-159062405

Aliases

A-159062405
CVE-2020-0246

Published

2020-10-01T00:00:00Z

Modified

2026-04-17T15:55:28.020024Z

Summary

[none]

Details

In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/opt/telephony

Package

Name: platform/frameworks/opt/telephony

Affected ranges

Type: ECOSYSTEM
Events: Introduced

10:0

Fixed

10:2020-10-01

Affected versions

Other

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 350.0,
                "function_hash": "41396428793444370782310374423678732437"
            },
            "id": "ASB-A-159062405-2fe0fdd8",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cfaf9f980aa8d3ca51cd8555ca27cd0ef561cb02",
            "target": {
                "function": "getEid",
                "file": "src/java/com/android/internal/telephony/euicc/EuiccController.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "202880964640417269071875354822510104520",
                    "110074950923504994998406545493490099609",
                    "195342410965500251883366128038446257518",
                    "91480201103759401109134463506999484996",
                    "122253094858268832040382978947616006491",
                    "117898067634301151371792576181906997534",
                    "277660230170191873295922942628532302991",
                    "295662566354620268868974089659408138537"
                ]
            },
            "id": "ASB-A-159062405-d7baaf0a",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cfaf9f980aa8d3ca51cd8555ca27cd0ef561cb02",
            "target": {
                "file": "src/java/com/android/internal/telephony/euicc/EuiccController.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cfaf9f980aa8d3ca51cd8555ca27cd0ef561cb02"
    ],
    "types": [
        "ID"
    ],
    "spl": "2020-10-01",
    "severity": "High"
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-159062405.json"