ASB-A-230492955
See a problem?- Import Source
- https://storage.googleapis.com/android-osv/ASB-A-230492955.json
- JSON Data
- https://api.osv.dev/v1/vulns/ASB-A-230492955
- Aliases
-
- A-230492955
- CVE-2023-21081
- Published
- 2023-04-01T00:00:00Z
- Modified
- 2026-04-29T15:10:00.007170Z
- Summary
- [none]
- Details
-
In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- References
Affected packages
Android
platform/frameworks/base
Package
- Name
- platform/frameworks/base
Ecosystem specific
{
"spl": "2023-04-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 722.0,
"function_hash": "171981411219919283052065122381487322215"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "waitForInstallConstraints",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-00dafc30"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 177.0,
"function_hash": "87046432260736714533777865737454901035"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "sendIntent",
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-0422cade"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 425.0,
"function_hash": "25368376629260852412473134905972457080"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "dispatchSessionPreappoved",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-15daf81b"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 292.0,
"function_hash": "219308357351614869912350567215185510115"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "onRestoreComplete",
"file": "services/core/java/com/android/server/pm/InstallPackageHelper.java"
},
"id": "ASB-A-230492955-2879bfc7"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 565.0,
"function_hash": "261947732213692486771292604919295703646"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "sendIntent",
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-298c3719"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 437.0,
"function_hash": "258031307705374909764478382548455210238"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "onUserActionRequired",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-3c726a6d"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1414.0,
"function_hash": "292361900949960515964060990264855268018"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "sendOnPackageInstalled",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-3e67d829"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"116358059063153312272392918688819042471",
"261035936267247573398677075023807630530",
"44069007036476793968103769503927574052",
"207412659919279566920597658500824671150",
"259158488790864349618409429793376897242",
"29331431292022645715683518506356303460",
"36866981505683834809250132793602798996",
"116660579404883386993233008672162868534",
"114806641617446633542301985421514924282",
"275731395159690849144790421027941906494",
"128452031570740390892707905408347831960",
"314607729991727419006701614927516068134",
"4176302984295456083585541823566050908",
"65452900290876898748797794998033409553",
"297962181431848582035406008076561957061",
"309922748554431808629801311406896912873",
"56587729412198089865606410257809448228",
"271270608742521877492686433569877601550"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-5eb8bd61"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 581.0,
"function_hash": "115771163367087147238223973273834156157"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "sendOnUserActionRequired",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-76a74bf8"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 754.0,
"function_hash": "174224566600324625455511757873748490543"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "sendPendingStreaming",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-abdb8ff0"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 818.0,
"function_hash": "314651487143942883914736967300515752730"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "onPackageDeleted",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-aeacdca0"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"323412635192497196527178943371003595188",
"16027203025332034435611508736853592440",
"224002682681926482644142831315174294709",
"236986350412559622266216948784221704259",
"121211820100394126309209462841010091130",
"16656867866537009168619989958772658203",
"249289125319625592591056665968392361265",
"323715380489153043554238641731102943142",
"85395633170205573464174811960492861150",
"68611945343770282914225145140944487968",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400",
"302021338729705551774464323738952841613",
"252998963622672028187326744797960770102",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-b6442640"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"92960042013192522150184712629554949343",
"186518114013922891760086471429720921629",
"11123291332103204746933074636169787786",
"280007723443490694062922911995634611338",
"252779524570715209015010914293074764443",
"183930070490569877087458265804754943352",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"file": "services/core/java/com/android/server/pm/InstallPackageHelper.java"
},
"id": "ASB-A-230492955-d92e30e9"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"142853875768019227638751984942571758701",
"250456287636855603695304993127276667751",
"94747253718215377661370998370068262425",
"87972040715053793152432707735096436799",
"258053734376362344767901118276607707116",
"63408651734611183357545190172934392792",
"99772112913731084301793178882874656913",
"242078930604775561962530105346441125257",
"330051605356705577846629823000266352464",
"27071684052070866868946552865275153029",
"325121086141240965494681112050441347414",
"229983836956600975182129729820539834024",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131476104713659483632416649792814749776",
"60072063488631917831194234377837912101",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"30219924095508504389926441055972838396",
"274074480419655705059611601531171683689",
"227233343654581734988281036650679773683",
"222599868586406303440594060360557978417"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-dd5b4c37"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"230350746094761608679930749460581319244",
"234383486024453296436807950542586909656",
"33611807596878687146775765485897014386",
"49168145632882497069893885308677445712",
"219403249346833228025896062802996982120",
"193966766531547199235117269987079816873",
"203049254234965103924479873428524893312",
"5665436218258329645774250914523640581"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-fb4206d1"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 581.0,
"function_hash": "159379097775954217395148525443538899085"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"target": {
"function": "freeStorage",
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-fe92a207"
}
],
"severity": "High"
}platform/frameworks/base
Package
- Name
- platform/frameworks/base
Ecosystem specific
{
"spl": "2023-04-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 437.0,
"function_hash": "18028586340217595494749058636609117368"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"function": "sendOnUserActionRequired",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-0ba82880"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 517.0,
"function_hash": "10473893671143963680998946290762191544"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"function": "freeStorage",
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-13763d62"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1339.0,
"function_hash": "29552642141151798496881742405061617980"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"function": "statusUpdate",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-15536f14"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 818.0,
"function_hash": "314651487143942883914736967300515752730"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"function": "onPackageDeleted",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-2431443e"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"30905036997200962689487109711574692900",
"16027203025332034435611508736853592440",
"224002682681926482644142831315174294709",
"236986350412559622266216948784221704259",
"85395633170205573464174811960492861150",
"68611945343770282914225145140944487968",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400",
"302021338729705551774464323738952841613",
"252998963622672028187326744797960770102",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-27cea484"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 284.0,
"function_hash": "160490511048139809329378764510816041911"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"function": "onRestoreComplete",
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-3b22cc7c"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 494.0,
"function_hash": "95153075995565927400725679275297696168"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"function": "sendIntent",
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-995781c9"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 790.0,
"function_hash": "287690672280276988455249403263415368143"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"function": "sendPendingStreaming",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-a72b258b"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 437.0,
"function_hash": "258031307705374909764478382548455210238"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"function": "onUserActionRequired",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-a7fd9b3c"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 177.0,
"function_hash": "87046432260736714533777865737454901035"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"function": "sendIntent",
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-c656c6fd"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"154087426921860121778145240968476090813",
"250270813916669270644255294855217615402",
"205044427342703872228822795858602839190",
"6582538567083935914024145771823875296",
"250839058658008320794706121171605168752",
"58311447738158313575199732874226678031",
"62192874276832276887684678768737345227",
"171749872417742255366638158186767616288",
"323341898668904173402620650759852769871",
"298287488721407398242028041904582418017",
"582342744661768209444636663593397435",
"309679254971135653718485858800575588443",
"281385543019782044022159079231999744968",
"308562075519780914882709395061138408249",
"92511822287182473929235481835458359535",
"161061822454643210250476455399929476201",
"281385543019782044022159079231999744968",
"171749872417742255366638158186767616288",
"256059965063197078311078052208086041001",
"229983836956600975182129729820539834024",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131476104713659483632416649792814749776",
"60072063488631917831194234377837912101",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131733860578281390808292043737809998320",
"60153867802836665897257106456222091464",
"137329737294610573143698624667595740721",
"122215696873370329265761368937601934470"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-ca3b1ebf"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"295317561444549671640747669301275542723",
"247092910472481710524076146167570130046",
"36866981505683834809250132793602798996",
"116660579404883386993233008672162868534",
"114806641617446633542301985421514924282",
"275731395159690849144790421027941906494",
"128452031570740390892707905408347831960",
"314607729991727419006701614927516068134",
"4176302984295456083585541823566050908",
"65452900290876898748797794998033409553",
"297962181431848582035406008076561957061",
"309922748554431808629801311406896912873",
"56587729412198089865606410257809448228",
"271270608742521877492686433569877601550"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-cea2a130"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1455.0,
"function_hash": "113272842121288150826906473258009570421"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"function": "sendOnPackageInstalled",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-d4071f28"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"219403249346833228025896062802996982120",
"193966766531547199235117269987079816873",
"203049254234965103924479873428524893312",
"5665436218258329645774250914523640581",
"252779524570715209015010914293074764443",
"225038616890867297937787119160628082289",
"238329617538021927936846931914070672522",
"316651912593467609470695356420115289494"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-d82e7b9c"
}
],
"severity": "High"
}platform/frameworks/base
Package
- Name
- platform/frameworks/base
Ecosystem specific
{
"spl": "2023-04-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"73304285286796207645041454657029646762",
"295125738304383576455933284438075500829",
"108945557582781098019498898465187749155",
"29331431292022645715683518506356303460",
"36866981505683834809250132793602798996",
"116660579404883386993233008672162868534",
"114806641617446633542301985421514924282",
"275731395159690849144790421027941906494",
"128452031570740390892707905408347831960",
"314607729991727419006701614927516068134",
"4176302984295456083585541823566050908",
"65452900290876898748797794998033409553",
"297962181431848582035406008076561957061",
"309922748554431808629801311406896912873",
"56587729412198089865606410257809448228",
"271270608742521877492686433569877601550"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-09f15706"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"323412635192497196527178943371003595188",
"16027203025332034435611508736853592440",
"224002682681926482644142831315174294709",
"236986350412559622266216948784221704259",
"85395633170205573464174811960492861150",
"68611945343770282914225145140944487968",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400",
"302021338729705551774464323738952841613",
"252998963622672028187326744797960770102",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-260297b5"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 494.0,
"function_hash": "95153075995565927400725679275297696168"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"function": "sendIntent",
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-309b3ebf"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 754.0,
"function_hash": "174224566600324625455511757873748490543"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"function": "sendPendingStreaming",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-4d72f824"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 177.0,
"function_hash": "87046432260736714533777865737454901035"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"function": "sendIntent",
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-72581af9"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"336795017755509346792141919155033651410",
"177860852319508677631328805120628172030",
"176174153931539697176094628348835527918",
"87972040715053793152432707735096436799",
"582342744661768209444636663593397435",
"309679254971135653718485858800575588443",
"281385543019782044022159079231999744968",
"308562075519780914882709395061138408249",
"256059965063197078311078052208086041001",
"229983836956600975182129729820539834024",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131476104713659483632416649792814749776",
"60072063488631917831194234377837912101",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"30219924095508504389926441055972838396",
"274074480419655705059611601531171683689",
"227233343654581734988281036650679773683",
"222599868586406303440594060360557978417"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-77d2263d"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"219403249346833228025896062802996982120",
"193966766531547199235117269987079816873",
"203049254234965103924479873428524893312",
"5665436218258329645774250914523640581",
"252779524570715209015010914293074764443",
"225038616890867297937787119160628082289",
"238329617538021927936846931914070672522",
"316651912593467609470695356420115289494"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-90f96ca7"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1438.0,
"function_hash": "93988994418747638377202196351253599131"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"function": "sendOnPackageInstalled",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-a24a81b0"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 437.0,
"function_hash": "258031307705374909764478382548455210238"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"function": "onUserActionRequired",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-b800f99e"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1247.0,
"function_hash": "100196446771587892735951143397347887086"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"function": "statusUpdate",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-bc0fb96b"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 517.0,
"function_hash": "10473893671143963680998946290762191544"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"function": "freeStorage",
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-c3fa0206"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 284.0,
"function_hash": "160490511048139809329378764510816041911"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"function": "onRestoreComplete",
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-f0ef024c"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 437.0,
"function_hash": "18028586340217595494749058636609117368"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"function": "sendOnUserActionRequired",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-f9155156"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 818.0,
"function_hash": "314651487143942883914736967300515752730"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"target": {
"function": "onPackageDeleted",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-fbfdafac"
}
],
"severity": "High"
}platform/frameworks/base
Package
- Name
- platform/frameworks/base
Ecosystem specific
{
"spl": "2023-04-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 494.0,
"function_hash": "95153075995565927400725679275297696168"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"function": "sendIntent",
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-0172f2c9"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 177.0,
"function_hash": "87046432260736714533777865737454901035"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"function": "sendIntent",
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-0efa455e"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1247.0,
"function_hash": "100196446771587892735951143397347887086"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"function": "statusUpdate",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-57a36b40"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 437.0,
"function_hash": "18028586340217595494749058636609117368"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"function": "sendOnUserActionRequired",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-5a30913b"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"336795017755509346792141919155033651410",
"177860852319508677631328805120628172030",
"176174153931539697176094628348835527918",
"87972040715053793152432707735096436799",
"582342744661768209444636663593397435",
"309679254971135653718485858800575588443",
"281385543019782044022159079231999744968",
"308562075519780914882709395061138408249",
"256059965063197078311078052208086041001",
"229983836956600975182129729820539834024",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131476104713659483632416649792814749776",
"60072063488631917831194234377837912101",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"30219924095508504389926441055972838396",
"274074480419655705059611601531171683689",
"227233343654581734988281036650679773683",
"222599868586406303440594060360557978417"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-5e8d46c6"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 818.0,
"function_hash": "314651487143942883914736967300515752730"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"function": "onPackageDeleted",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-6eb03f26"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 284.0,
"function_hash": "160490511048139809329378764510816041911"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"function": "onRestoreComplete",
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-7e1502d3"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 517.0,
"function_hash": "10473893671143963680998946290762191544"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"function": "freeStorage",
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-8c60053e"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"323412635192497196527178943371003595188",
"16027203025332034435611508736853592440",
"224002682681926482644142831315174294709",
"236986350412559622266216948784221704259",
"85395633170205573464174811960492861150",
"68611945343770282914225145140944487968",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400",
"302021338729705551774464323738952841613",
"252998963622672028187326744797960770102",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-d9bdc21f"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1438.0,
"function_hash": "93988994418747638377202196351253599131"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"function": "sendOnPackageInstalled",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-dd61010b"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"73304285286796207645041454657029646762",
"295125738304383576455933284438075500829",
"108945557582781098019498898465187749155",
"29331431292022645715683518506356303460",
"36866981505683834809250132793602798996",
"116660579404883386993233008672162868534",
"114806641617446633542301985421514924282",
"275731395159690849144790421027941906494",
"128452031570740390892707905408347831960",
"314607729991727419006701614927516068134",
"4176302984295456083585541823566050908",
"65452900290876898748797794998033409553",
"297962181431848582035406008076561957061",
"309922748554431808629801311406896912873",
"56587729412198089865606410257809448228",
"271270608742521877492686433569877601550"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-e8a7f6ff"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 754.0,
"function_hash": "174224566600324625455511757873748490543"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"function": "sendPendingStreaming",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-f195c157"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 437.0,
"function_hash": "258031307705374909764478382548455210238"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"function": "onUserActionRequired",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-f3ac6298"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"219403249346833228025896062802996982120",
"193966766531547199235117269987079816873",
"203049254234965103924479873428524893312",
"5665436218258329645774250914523640581",
"252779524570715209015010914293074764443",
"225038616890867297937787119160628082289",
"238329617538021927936846931914070672522",
"316651912593467609470695356420115289494"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-f485f8a0"
}
],
"severity": "High"
}platform/frameworks/base
Package
- Name
- platform/frameworks/base
Ecosystem specific
{
"spl": "2023-04-01",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"323412635192497196527178943371003595188",
"16027203025332034435611508736853592440",
"224002682681926482644142831315174294709",
"236986350412559622266216948784221704259",
"85395633170205573464174811960492861150",
"68611945343770282914225145140944487968",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400",
"302021338729705551774464323738952841613",
"252998963622672028187326744797960770102",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-096f35a1"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"73304285286796207645041454657029646762",
"295125738304383576455933284438075500829",
"108945557582781098019498898465187749155",
"29331431292022645715683518506356303460",
"36866981505683834809250132793602798996",
"116660579404883386993233008672162868534",
"114806641617446633542301985421514924282",
"275731395159690849144790421027941906494",
"128452031570740390892707905408347831960",
"314607729991727419006701614927516068134",
"4176302984295456083585541823566050908",
"65452900290876898748797794998033409553",
"297962181431848582035406008076561957061",
"309922748554431808629801311406896912873",
"56587729412198089865606410257809448228",
"271270608742521877492686433569877601550"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-1ec995ba"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 292.0,
"function_hash": "219308357351614869912350567215185510115"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"function": "onRestoreComplete",
"file": "services/core/java/com/android/server/pm/InstallPackageHelper.java"
},
"id": "ASB-A-230492955-2bcb10cd"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 177.0,
"function_hash": "87046432260736714533777865737454901035"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"function": "sendIntent",
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-46f28099"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 818.0,
"function_hash": "314651487143942883914736967300515752730"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"function": "onPackageDeleted",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-527e34ec"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 437.0,
"function_hash": "18028586340217595494749058636609117368"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"function": "sendOnUserActionRequired",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-6784331b"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 437.0,
"function_hash": "258031307705374909764478382548455210238"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"function": "onUserActionRequired",
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"id": "ASB-A-230492955-84657f15"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 581.0,
"function_hash": "159379097775954217395148525443538899085"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"function": "freeStorage",
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-8f59daf5"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"207144622467762879224534720409084504778",
"35340660332901479199731445305937848243",
"11123291332103204746933074636169787786",
"280007723443490694062922911995634611338",
"252779524570715209015010914293074764443",
"183930070490569877087458265804754943352",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"file": "services/core/java/com/android/server/pm/InstallPackageHelper.java"
},
"id": "ASB-A-230492955-b384a997"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 754.0,
"function_hash": "174224566600324625455511757873748490543"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"function": "sendPendingStreaming",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-b8b65021"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1333.0,
"function_hash": "278886018652066584784600442955964654687"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"function": "sendOnPackageInstalled",
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-c10fc47b"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"142853875768019227638751984942571758701",
"250456287636855603695304993127276667751",
"94747253718215377661370998370068262425",
"87972040715053793152432707735096436799",
"256059965063197078311078052208086041001",
"229983836956600975182129729820539834024",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131476104713659483632416649792814749776",
"60072063488631917831194234377837912101",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"30219924095508504389926441055972838396",
"274074480419655705059611601531171683689",
"227233343654581734988281036650679773683",
"222599868586406303440594060360557978417"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"id": "ASB-A-230492955-d4cde585"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"230350746094761608679930749460581319244",
"234383486024453296436807950542586909656",
"33611807596878687146775765485897014386",
"49168145632882497069893885308677445712",
"219403249346833228025896062802996982120",
"193966766531547199235117269987079816873",
"203049254234965103924479873428524893312",
"5665436218258329645774250914523640581"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"id": "ASB-A-230492955-eb189253"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 494.0,
"function_hash": "95153075995565927400725679275297696168"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"target": {
"function": "sendIntent",
"file": "core/java/android/content/IntentSender.java"
},
"id": "ASB-A-230492955-ec92cb38"
}
],
"severity": "High"
}