ASB-A-201667614

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-201667614.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-201667614
Aliases
  • A-201667614
  • CVE-2021-39795
Published
2022-12-01T00:00:00Z
Modified
2026-04-17T15:55:28.020024Z
Summary
[none]
Details

In multiple locations of MediaProvider.java, there is a possible way to get read/write access to other applications’ dedicated, app-specific directory within external storage due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2022-12-01

Affected versions

Other
11

Ecosystem specific 

{
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/eff3f473762f1cb53483aa2280d005974299e2ef"
    ],
    "spl": "2022-12-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "238681272684009509383892680196642260979",
                "length": 8745.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
            "id": "ASB-A-201667614-072f7191",
            "deprecated": false,
            "target": {
                "function": "ensureFileColumns",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "55922196151606136305071815842798393970",
                "length": 10040.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
            "id": "ASB-A-201667614-2b284275",
            "deprecated": false,
            "target": {
                "function": "updateInternal",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "251402470808749008164339335217852146753",
                "length": 223.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
            "id": "ASB-A-201667614-32dc88ef",
            "deprecated": false,
            "target": {
                "function": "extractPathOwnerPackageName",
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "40247249623713749474410405883757770596",
                    "144027290734087633198927767430221278844",
                    "170274567414164237222669859121030355046",
                    "196898841004659287838550322794180386037",
                    "335371926614206587632036346733358511741",
                    "264655383602886545954307294114886718442",
                    "12276096629291540471079989167559476498",
                    "301410199096718789459479207902051532937",
                    "233219412961679289816736886436377987034"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
            "id": "ASB-A-201667614-3f2697c9",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/util/PermissionUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "152568169090691484226729192467133202422",
                    "154828587764305331725276644817766806839",
                    "34670544298078652802877997313666671568",
                    "194452766113564198757105252971180352761",
                    "169209056988517876143400226951660716308",
                    "2217923254148000743702341213546210096",
                    "139308651869404623383043968546664871510",
                    "151620959614470802133835928987946490891",
                    "241192064302170081027962000632153555791",
                    "272042624386267939551800973679424420896",
                    "67016657172376363136643347182872579037",
                    "116271456339711922632708797759889762148",
                    "259689705919500848733661263264770076238",
                    "111451870466154766697415397757684466980",
                    "128112815894408821646148036948963920175",
                    "168567070325589414999088676482220455184",
                    "13484918867230189051472578681231415252",
                    "25045084646583255037188728037128435950",
                    "58791666578357728470507368996142945929",
                    "141314279896525631411536076799068072924",
                    "107337934385098130526106849872909580471",
                    "316335424435118614043147239494655930900",
                    "325390957140957071938411876682230776780",
                    "267512788186167861476631922890987391574",
                    "288297358822084163379766481892345001841",
                    "302425542002261694847505035487952325336",
                    "253086247065714229568902888009774442712",
                    "30584587213142902972153208626010345669",
                    "13809216971812909067401431868069979545",
                    "154512098687775306750384408648361504255",
                    "18567738330659414243202969302276952282",
                    "336886396416830182861626467226563893503",
                    "236455967876322173453664027728001258555",
                    "181792260954261579016161356779428902101"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
            "id": "ASB-A-201667614-6649fc37",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "204290306502838639350211547393547247552",
                    "309845117266323894631003027945791268741",
                    "119360172874582609819956775866530162868",
                    "234618258303052702272539323629322331210",
                    "41071518793217538971511117624865296582"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/eff3f473762f1cb53483aa2280d005974299e2ef",
            "id": "ASB-A-201667614-8bf8f201",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "330061013841921927404439880310134645666",
                    "279035243211235578978773495290889257717",
                    "139805934799104702474478996198724934983",
                    "204045983957087694251293698509675488250",
                    "51339408158740087838647925056850785066",
                    "184579359193662142216770856581700719745",
                    "261385049563959465991555017779246548927",
                    "114777177052799597305725342279822042751",
                    "158256496404397732468800988085537619906",
                    "155730592654275160527152088561567819709",
                    "98151776834612072365060031632019744651",
                    "306918490912684717323637554405647855681",
                    "261172514298718509221687851399192841872",
                    "128265093616841785292956062382773925080",
                    "314515909996417718359378857662812287379"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
            "id": "ASB-A-201667614-8d1fdd6a",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/LocalCallingIdentity.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "299391461899678919340206977286699020701",
                    "232454313650901851211551648154040281140",
                    "125911117328207118970251635780204918352",
                    "337212658015156125924577486032578087025",
                    "264936244901107877761119424033898341960",
                    "203316991044731824910842329847763608871",
                    "177512122098981387961925517338625601161",
                    "65406077481842752029116137954123016985",
                    "122938892040161352096536151944497956311",
                    "301639778519867200694476919590881974664",
                    "277705252916818474873032517868764228201",
                    "9793782608533454780627219923948425473",
                    "99272660022297428327352778699317120559",
                    "70427129919581368163127601314162188733",
                    "208462730969786566763800476852323805786",
                    "176229831433023362504096317508907380806",
                    "13928687831790284161221191873039682545",
                    "163674429060795910141452786603709691676",
                    "195607717996301261500324087296171360761",
                    "308243660435946972706387900791982949439",
                    "179029079728252097893462326862774827739",
                    "132553652111937574765774024266027960497",
                    "152160482717337810014413000016524862220",
                    "296239268926860717848294862331152778546",
                    "40234026051336599915450110385641433801",
                    "49355162923256046976469018364956487076",
                    "70864287080050424271793023931816100205",
                    "323879024334338600775464318019027999485",
                    "178375754611835822996638729296478241621",
                    "55215906507301240652662487202220957850",
                    "58971753279519125877003992536179184902",
                    "251722274166326571608249711641793800642",
                    "266379810312609098012081933904867128840",
                    "159863572261163587028852460888872272658",
                    "42118270509841749136386277483633476128",
                    "66123719269734070237200179343020553072",
                    "171588637386397515509351370465317360225",
                    "192652305326336604983534351473504759127",
                    "139693577164498500866551585285028205958",
                    "140737702256961425681242103390462915330",
                    "242261570103900428534540469207446465034",
                    "191796074807589506785838097526846288167",
                    "50993171120317133853768135536204200826",
                    "298411779657066655246762035836590638859",
                    "82151568294862698115263759411918599548",
                    "104606064637402422255735151515742315438",
                    "332442903884402718949226678217127246067",
                    "339333955453560526507796255168618926683",
                    "295460624446162593663867317702211008498",
                    "168576390230546003140243983006368727549",
                    "307188431284420561787543462900516672228",
                    "309211443699351551154060806711929475102",
                    "194506212081823158101462700134801946728",
                    "112670671899635840355320066458871937814",
                    "125554003740724239396191628727381449",
                    "215121854707857326046061738043089652592",
                    "282178597067938571800473646182433391732",
                    "142049379116946213939204728511029948550",
                    "201102916420949544818113249440022098801",
                    "167161956976860600069795841398745676500",
                    "48832248985754763669786074792862649622",
                    "128573352913584951460806098027381460109",
                    "277278893339302183247431936053771076017",
                    "75347817492032347698373538538646216128",
                    "44378159891804183672545247462310660325",
                    "280977422154301851785168274658395874054",
                    "137249220736062192195852270769718834709",
                    "97263371583658178395925608642034711930",
                    "56302892648489863222300675777566093282",
                    "190021809855510456159409601021600392726"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
            "id": "ASB-A-201667614-96983d0f",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "digest": {
                "function_hash": "311321614416423727101236189346517707422",
                "length": 2389.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
            "id": "ASB-A-201667614-c05cecf1",
            "deprecated": false,
            "target": {
                "function": "onCreate",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "231249783640665264810135461747185926337",
                "length": 1473.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
            "id": "ASB-A-201667614-e085acdc",
            "deprecated": false,
            "target": {
                "function": "hasPermissionInternal",
                "file": "src/com/android/providers/media/LocalCallingIdentity.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "335301336029234532034592775896931644392",
                "length": 164.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d",
            "id": "ASB-A-201667614-e8347d8a",
            "deprecated": false,
            "target": {
                "function": "isDataOrObbPath",
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-201667614.json"
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2022-12-01

Affected versions

Other
12

Ecosystem specific 

{
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bb4ec053ea16931e827f30c7b697cb35185a32be"
    ],
    "spl": "2022-12-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "297293203924818324002893331432978950366",
                "length": 83.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-10209dd9",
            "deprecated": false,
            "target": {
                "function": "isCallingIdentityExternalStorageProvider",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "335301336029234532034592775896931644392",
                "length": 164.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-28b06488",
            "deprecated": false,
            "target": {
                "function": "isDataOrObbPath",
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "251402470808749008164339335217852146753",
                "length": 223.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-4e20f436",
            "deprecated": false,
            "target": {
                "function": "extractPathOwnerPackageName",
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "313127495243080436215856613266458326861",
                "length": 165.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-4eae98b4",
            "deprecated": false,
            "target": {
                "function": "isObbOrChildPath",
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "236717934069039143513944692050967782518",
                    "177231989965431248230433242515756830985",
                    "48084694514666216991863027566063787842",
                    "24597347580785972387017570648949344501",
                    "82590222942452024723401538768858218797",
                    "335325793106875720725709381344293129082",
                    "62962534448535555044625104955818939201",
                    "87555556292832071262321424327704855087",
                    "194708978014298019962881607360076158603",
                    "54111726926367223753618623529403734961",
                    "146307438629499210115969980779094215130",
                    "157049492347174593816450239977536938506",
                    "6538419491974432453348462488563490013",
                    "145664491038855867584246801884233307249",
                    "162375889599558108169710407530435316931",
                    "2217923254148000743702341213546210096",
                    "139308651869404623383043968546664871510",
                    "151620959614470802133835928987946490891",
                    "241192064302170081027962000632153555791",
                    "272042624386267939551800973679424420896",
                    "67016657172376363136643347182872579037",
                    "116271456339711922632708797759889762148",
                    "259689705919500848733661263264770076238",
                    "111451870466154766697415397757684466980",
                    "128112815894408821646148036948963920175",
                    "168567070325589414999088676482220455184",
                    "13484918867230189051472578681231415252",
                    "25045084646583255037188728037128435950",
                    "58791666578357728470507368996142945929",
                    "141314279896525631411536076799068072924",
                    "107337934385098130526106849872909580471",
                    "316335424435118614043147239494655930900",
                    "325390957140957071938411876682230776780",
                    "267512788186167861476631922890987391574",
                    "288297358822084163379766481892345001841",
                    "302425542002261694847505035487952325336",
                    "253086247065714229568902888009774442712",
                    "30584587213142902972153208626010345669",
                    "86068286971847835986773778703104905931",
                    "130180844030132176467252022446011864277",
                    "36210907196803157140823294611057953412",
                    "167803830410390491718526846786717005079",
                    "18567738330659414243202969302276952282",
                    "336886396416830182861626467226563893503",
                    "236455967876322173453664027728001258555",
                    "254632733345791973162068198796462295829",
                    "51823682839670840672415785132628897533",
                    "13221641704164253845794790806991201079",
                    "43754136076656795816877613835383556447",
                    "200374670571860574494305018877906704473",
                    "176041195732111323839694349726333063997",
                    "27338847599432817215746715644794268617",
                    "240150190257677923672568230186419392973",
                    "112398314515882725433351362832838861326",
                    "16447428364241065113991019251267328704"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-7ff84ea3",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "digest": {
                "function_hash": "137853831715424200553488584344362434173",
                "length": 112.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-85e1fa9e",
            "deprecated": false,
            "target": {
                "function": "isCallingIdentityMtp",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "227082451382423078953520414071533952810",
                    "22613576191464637590775937452726305821",
                    "156042098569606700548283666622904837208",
                    "215794511505920084906259401026091949579",
                    "323795208999802954841461095209522292719",
                    "114219867295483757930129871934884625336",
                    "137383048737320772824913646054177780410"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bb4ec053ea16931e827f30c7b697cb35185a32be",
            "id": "ASB-A-201667614-995f6f75",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "digest": {
                "function_hash": "4294939936698086743065293179125264061",
                "length": 816.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-a1d30e08",
            "deprecated": false,
            "target": {
                "function": "assertPrivatePathNotInValues",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "258362969100274857793919268685160573592",
                "length": 77.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-a28713c9",
            "deprecated": false,
            "target": {
                "function": "isCallingIdentityDownloadProvider",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "95494972414533092441636999490450228138",
                "length": 271.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-a559f9f3",
            "deprecated": false,
            "target": {
                "function": "isUidAllowedAccessToDataOrObbPathForFuse",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "8321995632742293194363705151469332717",
                "length": 376.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-b8ebd8e7",
            "deprecated": false,
            "target": {
                "function": "isUidAllowedSpecialPrivatePathAccess",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "114084976581220804341334582504897742804",
                    "174373154285155072241523552359252331075",
                    "300992803437122836070384257235890071968",
                    "9793782608533454780627219923948425473",
                    "99272660022297428327352778699317120559",
                    "70427129919581368163127601314162188733",
                    "259909820617150051722809354499057372935",
                    "136973990291562542058924378792467316936",
                    "311824766972067554774614541581034234709",
                    "179699092130452837921161286762514185437",
                    "123466622052181077513120375594627674916",
                    "100988109938771217952486786590536391954",
                    "49204009068460619016049015852359172001",
                    "187339036843000036958452122303669290982",
                    "310232914908502451399756897635674243405",
                    "67648006478787719664908315798040875820",
                    "115062421658022675749693953867013858556",
                    "183291289263040540015593565690014073187",
                    "234779277991134578381165600404066431533",
                    "195707829298633532852611070367350979296",
                    "139693577164498500866551585285028205958",
                    "140737702256961425681242103390462915330",
                    "242261570103900428534540469207446465034",
                    "191796074807589506785838097526846288167",
                    "332442903884402718949226678217127246067",
                    "339333955453560526507796255168618926683",
                    "295460624446162593663867317702211008498",
                    "168576390230546003140243983006368727549",
                    "307188431284420561787543462900516672228",
                    "48705314605896090401227540607779761998",
                    "295721108576129250391114123988192086840",
                    "174027267995990423789824625277347597274",
                    "254074972856976548638389108236625428872",
                    "264401508927332093679895566831134138101",
                    "82150690642267993772371953959676931195",
                    "289372983150233340903846335879769801192",
                    "73202547743085761200946431316211736680",
                    "41605841195673855235997273354028679591",
                    "135837099050508610766238237856132414676",
                    "203342445627061955291491048767458923337",
                    "112482754744893855938603296495538379604",
                    "109227419116717578311215444919947070875",
                    "214599317101670275654395811799085166846",
                    "162162967668151717555648954452451540807",
                    "173755431879031289523739394597563230468",
                    "109402149507459275511097645303291244066",
                    "310856937413429908373368829299324517068",
                    "169871327454610881851808833402759055356",
                    "209236645354219586020693813861842944778",
                    "9020928934666820675605163638261335872",
                    "183309054234036924723114572105094218325",
                    "153055136395407589392801252478499098021",
                    "130837178589665409972229557949586978181",
                    "136864531108809626906444177904777987058",
                    "307751875159233340765190279109667153148",
                    "25597108129924941558002957831905309214",
                    "1342824683214414970390721498992884630",
                    "269881229432883965942011191516416005631",
                    "92954662426343925547626092904094112356",
                    "92477676094792669277335264507110207020",
                    "55063093571945704296068223891419449487",
                    "238329549334136682791578118212892898955",
                    "326023176507498196279576752654234672666",
                    "207332691013481441890902753678447906364",
                    "287358166042486738965659079252615988706",
                    "97889755441130331004520791798331627719",
                    "184489921856433884381592495864240065389",
                    "296389528915496905298240149661446179897",
                    "325719368695532143747114105677500774980",
                    "234446318027030780594538058817868899307",
                    "117504750505434063580668129150064055511",
                    "124898880952547615347580121064582398121",
                    "182505216322595849248887157698484457510",
                    "206820175676443098145579379188530016459",
                    "116017931996396925484868356424784307427",
                    "297745224029927563949845937644768878930",
                    "225343488890514688939194474557386070522",
                    "172229735532210089994471785466909935187",
                    "187998045020412671173774898208700241223",
                    "175997778560400471126944906848619150767",
                    "144972991188601817510101003754725746498",
                    "338681959307215613114332176169645319973",
                    "117033183906687735066096554980127172909",
                    "278128598310937795653278846412455945474",
                    "166879958871339804567555760572776983403",
                    "120963809190404213349299065909692543459",
                    "216790294012380003537557303316724968826",
                    "131150868638278027921439736541968804689",
                    "249495304898942033896857770614199679442",
                    "226549758348081416692860462691351302638",
                    "92477676094792669277335264507110207020",
                    "12735464951147717773683761386789966533",
                    "315994622056502690583973084896738798740",
                    "239635117775665262428407749568148295706",
                    "41950407448955977717188478906258219444",
                    "247220718631425995216564756924211628894",
                    "62223910636610670334176787785670726438",
                    "327757359698077852315051660580666431372",
                    "101368120860715626523220606557679191040",
                    "130600917130787248451137701588389390812"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-b98bbd65",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "digest": {
                "function_hash": "216120437759284472245831217526185285615",
                "length": 393.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063",
            "id": "ASB-A-201667614-ed7ae572",
            "deprecated": false,
            "target": {
                "function": "isCallingIdentityAllowedInstallerAccess",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-201667614.json"
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2022-12-01

Affected versions

Other
12L

Ecosystem specific 

{
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/4f46f26267ceff5e6f37621ae2ede38a80d5ffde"
    ],
    "spl": "2022-12-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "258362969100274857793919268685160573592",
                "length": 77.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-06ae7d2b",
            "deprecated": false,
            "target": {
                "function": "isCallingIdentityDownloadProvider",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "137853831715424200553488584344362434173",
                "length": 112.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-0826a611",
            "deprecated": false,
            "target": {
                "function": "isCallingIdentityMtp",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "236717934069039143513944692050967782518",
                    "177231989965431248230433242515756830985",
                    "48084694514666216991863027566063787842",
                    "24597347580785972387017570648949344501",
                    "82590222942452024723401538768858218797",
                    "335325793106875720725709381344293129082",
                    "62962534448535555044625104955818939201",
                    "87555556292832071262321424327704855087",
                    "194708978014298019962881607360076158603",
                    "54111726926367223753618623529403734961",
                    "146307438629499210115969980779094215130",
                    "157049492347174593816450239977536938506",
                    "6538419491974432453348462488563490013",
                    "145664491038855867584246801884233307249",
                    "162375889599558108169710407530435316931",
                    "2217923254148000743702341213546210096",
                    "139308651869404623383043968546664871510",
                    "151620959614470802133835928987946490891",
                    "241192064302170081027962000632153555791",
                    "272042624386267939551800973679424420896",
                    "67016657172376363136643347182872579037",
                    "116271456339711922632708797759889762148",
                    "259689705919500848733661263264770076238",
                    "111451870466154766697415397757684466980",
                    "128112815894408821646148036948963920175",
                    "168567070325589414999088676482220455184",
                    "13484918867230189051472578681231415252",
                    "25045084646583255037188728037128435950",
                    "58791666578357728470507368996142945929",
                    "141314279896525631411536076799068072924",
                    "107337934385098130526106849872909580471",
                    "316335424435118614043147239494655930900",
                    "325390957140957071938411876682230776780",
                    "267512788186167861476631922890987391574",
                    "288297358822084163379766481892345001841",
                    "302425542002261694847505035487952325336",
                    "253086247065714229568902888009774442712",
                    "30584587213142902972153208626010345669",
                    "86068286971847835986773778703104905931",
                    "130180844030132176467252022446011864277",
                    "36210907196803157140823294611057953412",
                    "167803830410390491718526846786717005079",
                    "18567738330659414243202969302276952282",
                    "336886396416830182861626467226563893503",
                    "236455967876322173453664027728001258555",
                    "254632733345791973162068198796462295829",
                    "51823682839670840672415785132628897533",
                    "13221641704164253845794790806991201079",
                    "43754136076656795816877613835383556447",
                    "200374670571860574494305018877906704473",
                    "176041195732111323839694349726333063997",
                    "27338847599432817215746715644794268617",
                    "240150190257677923672568230186419392973",
                    "112398314515882725433351362832838861326",
                    "16447428364241065113991019251267328704"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-0bb1c098",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "digest": {
                "function_hash": "216120437759284472245831217526185285615",
                "length": 393.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-0c73db3d",
            "deprecated": false,
            "target": {
                "function": "isCallingIdentityAllowedInstallerAccess",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "4294939936698086743065293179125264061",
                "length": 816.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-35864144",
            "deprecated": false,
            "target": {
                "function": "assertPrivatePathNotInValues",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "297293203924818324002893331432978950366",
                "length": 83.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-661ccbfa",
            "deprecated": false,
            "target": {
                "function": "isCallingIdentityExternalStorageProvider",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "335301336029234532034592775896931644392",
                "length": 164.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-66ce116d",
            "deprecated": false,
            "target": {
                "function": "isDataOrObbPath",
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "8321995632742293194363705151469332717",
                "length": 376.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-804b103b",
            "deprecated": false,
            "target": {
                "function": "isUidAllowedSpecialPrivatePathAccess",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "114084976581220804341334582504897742804",
                    "174373154285155072241523552359252331075",
                    "300992803437122836070384257235890071968",
                    "9793782608533454780627219923948425473",
                    "99272660022297428327352778699317120559",
                    "70427129919581368163127601314162188733",
                    "259909820617150051722809354499057372935",
                    "136973990291562542058924378792467316936",
                    "311824766972067554774614541581034234709",
                    "179699092130452837921161286762514185437",
                    "123466622052181077513120375594627674916",
                    "100988109938771217952486786590536391954",
                    "49204009068460619016049015852359172001",
                    "187339036843000036958452122303669290982",
                    "310232914908502451399756897635674243405",
                    "67648006478787719664908315798040875820",
                    "115062421658022675749693953867013858556",
                    "183291289263040540015593565690014073187",
                    "234779277991134578381165600404066431533",
                    "195707829298633532852611070367350979296",
                    "139693577164498500866551585285028205958",
                    "140737702256961425681242103390462915330",
                    "242261570103900428534540469207446465034",
                    "191796074807589506785838097526846288167",
                    "332442903884402718949226678217127246067",
                    "339333955453560526507796255168618926683",
                    "295460624446162593663867317702211008498",
                    "168576390230546003140243983006368727549",
                    "307188431284420561787543462900516672228",
                    "48705314605896090401227540607779761998",
                    "295721108576129250391114123988192086840",
                    "174027267995990423789824625277347597274",
                    "254074972856976548638389108236625428872",
                    "264401508927332093679895566831134138101",
                    "82150690642267993772371953959676931195",
                    "289372983150233340903846335879769801192",
                    "73202547743085761200946431316211736680",
                    "41605841195673855235997273354028679591",
                    "135837099050508610766238237856132414676",
                    "203342445627061955291491048767458923337",
                    "112482754744893855938603296495538379604",
                    "109227419116717578311215444919947070875",
                    "214599317101670275654395811799085166846",
                    "162162967668151717555648954452451540807",
                    "173755431879031289523739394597563230468",
                    "109402149507459275511097645303291244066",
                    "310856937413429908373368829299324517068",
                    "169871327454610881851808833402759055356",
                    "209236645354219586020693813861842944778",
                    "9020928934666820675605163638261335872",
                    "183309054234036924723114572105094218325",
                    "153055136395407589392801252478499098021",
                    "130837178589665409972229557949586978181",
                    "136864531108809626906444177904777987058",
                    "307751875159233340765190279109667153148",
                    "25597108129924941558002957831905309214",
                    "1342824683214414970390721498992884630",
                    "269881229432883965942011191516416005631",
                    "92954662426343925547626092904094112356",
                    "92477676094792669277335264507110207020",
                    "55063093571945704296068223891419449487",
                    "238329549334136682791578118212892898955",
                    "326023176507498196279576752654234672666",
                    "207332691013481441890902753678447906364",
                    "287358166042486738965659079252615988706",
                    "97889755441130331004520791798331627719",
                    "184489921856433884381592495864240065389",
                    "296389528915496905298240149661446179897",
                    "325719368695532143747114105677500774980",
                    "234446318027030780594538058817868899307",
                    "117504750505434063580668129150064055511",
                    "124898880952547615347580121064582398121",
                    "182505216322595849248887157698484457510",
                    "206820175676443098145579379188530016459",
                    "116017931996396925484868356424784307427",
                    "297745224029927563949845937644768878930",
                    "225343488890514688939194474557386070522",
                    "172229735532210089994471785466909935187",
                    "187998045020412671173774898208700241223",
                    "175997778560400471126944906848619150767",
                    "144972991188601817510101003754725746498",
                    "338681959307215613114332176169645319973",
                    "117033183906687735066096554980127172909",
                    "278128598310937795653278846412455945474",
                    "166879958871339804567555760572776983403",
                    "120963809190404213349299065909692543459",
                    "216790294012380003537557303316724968826",
                    "131150868638278027921439736541968804689",
                    "249495304898942033896857770614199679442",
                    "226549758348081416692860462691351302638",
                    "92477676094792669277335264507110207020",
                    "12735464951147717773683761386789966533",
                    "315994622056502690583973084896738798740",
                    "239635117775665262428407749568148295706",
                    "41950407448955977717188478906258219444",
                    "247220718631425995216564756924211628894",
                    "62223910636610670334176787785670726438",
                    "327757359698077852315051660580666431372",
                    "101368120860715626523220606557679191040",
                    "130600917130787248451137701588389390812"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-8f8d2e01",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        },
        {
            "digest": {
                "function_hash": "95494972414533092441636999490450228138",
                "length": 271.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-d22b9785",
            "deprecated": false,
            "target": {
                "function": "isUidAllowedAccessToDataOrObbPathForFuse",
                "file": "src/com/android/providers/media/MediaProvider.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "313127495243080436215856613266458326861",
                "length": 165.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-f034ee25",
            "deprecated": false,
            "target": {
                "function": "isObbOrChildPath",
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "function_hash": "251402470808749008164339335217852146753",
                "length": 223.0
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f",
            "id": "ASB-A-201667614-f2084d82",
            "deprecated": false,
            "target": {
                "function": "extractPathOwnerPackageName",
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "227082451382423078953520414071533952810",
                    "22613576191464637590775937452726305821",
                    "156042098569606700548283666622904837208",
                    "215794511505920084906259401026091949579",
                    "323795208999802954841461095209522292719",
                    "114219867295483757930129871934884625336",
                    "137383048737320772824913646054177780410"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/4f46f26267ceff5e6f37621ae2ede38a80d5ffde",
            "id": "ASB-A-201667614-ff0a9716",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-201667614.json"
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2022-12-01

Affected versions

Other
13

Ecosystem specific 

{
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bae2794639a349d2f7b1a66915d89c51c9334164"
    ],
    "spl": "2022-12-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "227082451382423078953520414071533952810",
                    "22613576191464637590775937452726305821",
                    "156042098569606700548283666622904837208",
                    "215794511505920084906259401026091949579",
                    "323795208999802954841461095209522292719",
                    "114219867295483757930129871934884625336",
                    "137383048737320772824913646054177780410"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bae2794639a349d2f7b1a66915d89c51c9334164",
            "id": "ASB-A-201667614-025fb52d",
            "deprecated": false,
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            },
            "signature_version": "v1",
            "signature_type": "Line"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-201667614.json"