In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6"
],
"types": [
"ID"
],
"severity": "High",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204105797333721857722692365197534415670",
"255425976281277838419618366764049831071",
"215615443531398298077225890226742777243",
"327009888027918167129045391175179533224"
]
},
"id": "ASB-A-160390416-08d49d46",
"deprecated": false,
"target": {
"file": "services/core/java/com/android/server/am/ActivityManagerService.java"
}
},
{
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6",
"digest": {
"function_hash": "285918499944752030995772244633613770104",
"length": 793.0
},
"id": "ASB-A-160390416-611f7dc5",
"deprecated": false,
"target": {
"file": "services/core/java/com/android/server/am/ActivityManagerService.java",
"function": "setProcessMemoryTrimLevel"
}
}
],
"spl": "2020-10-01"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6"
],
"types": [
"ID"
],
"severity": "High",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6",
"digest": {
"function_hash": "285918499944752030995772244633613770104",
"length": 793.0
},
"id": "ASB-A-160390416-3158b980",
"deprecated": false,
"target": {
"file": "services/core/java/com/android/server/am/ActivityManagerService.java",
"function": "setProcessMemoryTrimLevel"
}
},
{
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204105797333721857722692365197534415670",
"255425976281277838419618366764049831071",
"215615443531398298077225890226742777243",
"327009888027918167129045391175179533224"
]
},
"id": "ASB-A-160390416-4320900d",
"deprecated": false,
"target": {
"file": "services/core/java/com/android/server/am/ActivityManagerService.java"
}
}
],
"spl": "2020-10-01"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6"
],
"types": [
"ID"
],
"severity": "High",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204105797333721857722692365197534415670",
"255425976281277838419618366764049831071",
"215615443531398298077225890226742777243",
"327009888027918167129045391175179533224"
]
},
"id": "ASB-A-160390416-b774bbaa",
"deprecated": false,
"target": {
"file": "services/core/java/com/android/server/am/ActivityManagerService.java"
}
},
{
"signature_version": "v1",
"id": "ASB-A-160390416-fe647b61",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6",
"digest": {
"function_hash": "285918499944752030995772244633613770104",
"length": 793.0
},
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/core/java/com/android/server/am/ActivityManagerService.java",
"function": "setProcessMemoryTrimLevel"
}
}
],
"spl": "2020-10-01"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6"
],
"types": [
"ID"
],
"severity": "High",
"vanir_signatures": [
{
"signature_version": "v1",
"id": "ASB-A-160390416-198f4d4a",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204105797333721857722692365197534415670",
"255425976281277838419618366764049831071",
"215615443531398298077225890226742777243",
"327009888027918167129045391175179533224"
]
},
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/core/java/com/android/server/am/ActivityManagerService.java"
}
},
{
"signature_version": "v1",
"id": "ASB-A-160390416-bbafc14c",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6",
"digest": {
"function_hash": "285918499944752030995772244633613770104",
"length": 793.0
},
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/core/java/com/android/server/am/ActivityManagerService.java",
"function": "setProcessMemoryTrimLevel"
}
}
],
"spl": "2020-10-01"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6"
],
"types": [
"ID"
],
"severity": "High",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6",
"digest": {
"function_hash": "285918499944752030995772244633613770104",
"length": 793.0
},
"id": "ASB-A-160390416-3c382212",
"deprecated": false,
"target": {
"file": "services/core/java/com/android/server/am/ActivityManagerService.java",
"function": "setProcessMemoryTrimLevel"
}
},
{
"signature_version": "v1",
"id": "ASB-A-160390416-c0f9d319",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbcf477e8b05f092bf6519e3ba4db363247ff4f6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"204105797333721857722692365197534415670",
"255425976281277838419618366764049831071",
"215615443531398298077225890226742777243",
"327009888027918167129045391175179533224"
]
},
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/core/java/com/android/server/am/ActivityManagerService.java"
}
}
],
"spl": "2020-10-01"
}