ASB-A-243377226
See a problem?- Import Source
- https://storage.googleapis.com/android-osv/ASB-A-243377226.json
- JSON Data
- https://api.osv.dev/v1/vulns/ASB-A-243377226
- Aliases
-
- A-243377226
- CVE-2023-21099
- Published
- 2023-04-01T00:00:00Z
- Modified
- 2024-08-07T19:29:41.698722Z
- Summary
- Bypass BG-FGS while-in-use/start restrictions via PackageInstaller.Session#commit
- Details
-
In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- References
Affected packages
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"length": 722.0,
"function_hash": "171981411219919283052065122381487322215"
},
"id": "ASB-A-243377226-00dafc30",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "waitForInstallConstraints"
},
"signature_type": "Function"
},
{
"digest": {
"length": 177.0,
"function_hash": "87046432260736714533777865737454901035"
},
"id": "ASB-A-243377226-0422cade",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java",
"function": "sendIntent"
},
"signature_type": "Function"
},
{
"digest": {
"length": 425.0,
"function_hash": "25368376629260852412473134905972457080"
},
"id": "ASB-A-243377226-15daf81b",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "dispatchSessionPreappoved"
},
"signature_type": "Function"
},
{
"digest": {
"length": 292.0,
"function_hash": "219308357351614869912350567215185510115"
},
"id": "ASB-A-243377226-2879bfc7",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/InstallPackageHelper.java",
"function": "onRestoreComplete"
},
"signature_type": "Function"
},
{
"digest": {
"length": 565.0,
"function_hash": "261947732213692486771292604919295703646"
},
"id": "ASB-A-243377226-298c3719",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java",
"function": "sendIntent"
},
"signature_type": "Function"
},
{
"digest": {
"length": 437.0,
"function_hash": "258031307705374909764478382548455210238"
},
"id": "ASB-A-243377226-3c726a6d",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "onUserActionRequired"
},
"signature_type": "Function"
},
{
"digest": {
"length": 1414.0,
"function_hash": "292361900949960515964060990264855268018"
},
"id": "ASB-A-243377226-3e67d829",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendOnPackageInstalled"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"116358059063153312272392918688819042471",
"261035936267247573398677075023807630530",
"44069007036476793968103769503927574052",
"207412659919279566920597658500824671150",
"259158488790864349618409429793376897242",
"29331431292022645715683518506356303460",
"36866981505683834809250132793602798996",
"116660579404883386993233008672162868534",
"114806641617446633542301985421514924282",
"275731395159690849144790421027941906494",
"128452031570740390892707905408347831960",
"314607729991727419006701614927516068134",
"4176302984295456083585541823566050908",
"65452900290876898748797794998033409553",
"297962181431848582035406008076561957061",
"309922748554431808629801311406896912873",
"56587729412198089865606410257809448228",
"271270608742521877492686433569877601550"
]
},
"id": "ASB-A-243377226-5eb8bd61",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 581.0,
"function_hash": "115771163367087147238223973273834156157"
},
"id": "ASB-A-243377226-76a74bf8",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendOnUserActionRequired"
},
"signature_type": "Function"
},
{
"digest": {
"length": 754.0,
"function_hash": "174224566600324625455511757873748490543"
},
"id": "ASB-A-243377226-abdb8ff0",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendPendingStreaming"
},
"signature_type": "Function"
},
{
"digest": {
"length": 818.0,
"function_hash": "314651487143942883914736967300515752730"
},
"id": "ASB-A-243377226-aeacdca0",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "onPackageDeleted"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"323412635192497196527178943371003595188",
"16027203025332034435611508736853592440",
"224002682681926482644142831315174294709",
"236986350412559622266216948784221704259",
"121211820100394126309209462841010091130",
"16656867866537009168619989958772658203",
"249289125319625592591056665968392361265",
"323715380489153043554238641731102943142",
"85395633170205573464174811960492861150",
"68611945343770282914225145140944487968",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400",
"302021338729705551774464323738952841613",
"252998963622672028187326744797960770102",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400"
]
},
"id": "ASB-A-243377226-b6442640",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"92960042013192522150184712629554949343",
"186518114013922891760086471429720921629",
"11123291332103204746933074636169787786",
"280007723443490694062922911995634611338",
"252779524570715209015010914293074764443",
"183930070490569877087458265804754943352",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954"
]
},
"id": "ASB-A-243377226-d92e30e9",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/InstallPackageHelper.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"142853875768019227638751984942571758701",
"250456287636855603695304993127276667751",
"94747253718215377661370998370068262425",
"87972040715053793152432707735096436799",
"258053734376362344767901118276607707116",
"63408651734611183357545190172934392792",
"99772112913731084301793178882874656913",
"242078930604775561962530105346441125257",
"330051605356705577846629823000266352464",
"27071684052070866868946552865275153029",
"325121086141240965494681112050441347414",
"229983836956600975182129729820539834024",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131476104713659483632416649792814749776",
"60072063488631917831194234377837912101",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"30219924095508504389926441055972838396",
"274074480419655705059611601531171683689",
"227233343654581734988281036650679773683",
"222599868586406303440594060360557978417"
]
},
"id": "ASB-A-243377226-dd5b4c37",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"230350746094761608679930749460581319244",
"234383486024453296436807950542586909656",
"33611807596878687146775765485897014386",
"49168145632882497069893885308677445712",
"219403249346833228025896062802996982120",
"193966766531547199235117269987079816873",
"203049254234965103924479873428524893312",
"5665436218258329645774250914523640581"
]
},
"id": "ASB-A-243377226-fb4206d1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 581.0,
"function_hash": "159379097775954217395148525443538899085"
},
"id": "ASB-A-243377226-fe92a207",
"source": "https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java",
"function": "freeStorage"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd"
],
"spl": "2023-04-01",
"severity": "High",
"types": [
"EoP"
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"length": 437.0,
"function_hash": "18028586340217595494749058636609117368"
},
"id": "ASB-A-243377226-0ba82880",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendOnUserActionRequired"
},
"signature_type": "Function"
},
{
"digest": {
"length": 517.0,
"function_hash": "10473893671143963680998946290762191544"
},
"id": "ASB-A-243377226-13763d62",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java",
"function": "freeStorage"
},
"signature_type": "Function"
},
{
"digest": {
"length": 1339.0,
"function_hash": "29552642141151798496881742405061617980"
},
"id": "ASB-A-243377226-15536f14",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "statusUpdate"
},
"signature_type": "Function"
},
{
"digest": {
"length": 818.0,
"function_hash": "314651487143942883914736967300515752730"
},
"id": "ASB-A-243377226-2431443e",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "onPackageDeleted"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"30905036997200962689487109711574692900",
"16027203025332034435611508736853592440",
"224002682681926482644142831315174294709",
"236986350412559622266216948784221704259",
"85395633170205573464174811960492861150",
"68611945343770282914225145140944487968",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400",
"302021338729705551774464323738952841613",
"252998963622672028187326744797960770102",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400"
]
},
"id": "ASB-A-243377226-27cea484",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 284.0,
"function_hash": "160490511048139809329378764510816041911"
},
"id": "ASB-A-243377226-3b22cc7c",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java",
"function": "onRestoreComplete"
},
"signature_type": "Function"
},
{
"digest": {
"length": 494.0,
"function_hash": "95153075995565927400725679275297696168"
},
"id": "ASB-A-243377226-995781c9",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java",
"function": "sendIntent"
},
"signature_type": "Function"
},
{
"digest": {
"length": 790.0,
"function_hash": "287690672280276988455249403263415368143"
},
"id": "ASB-A-243377226-a72b258b",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendPendingStreaming"
},
"signature_type": "Function"
},
{
"digest": {
"length": 437.0,
"function_hash": "258031307705374909764478382548455210238"
},
"id": "ASB-A-243377226-a7fd9b3c",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "onUserActionRequired"
},
"signature_type": "Function"
},
{
"digest": {
"length": 177.0,
"function_hash": "87046432260736714533777865737454901035"
},
"id": "ASB-A-243377226-c656c6fd",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java",
"function": "sendIntent"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"154087426921860121778145240968476090813",
"250270813916669270644255294855217615402",
"205044427342703872228822795858602839190",
"6582538567083935914024145771823875296",
"250839058658008320794706121171605168752",
"58311447738158313575199732874226678031",
"62192874276832276887684678768737345227",
"171749872417742255366638158186767616288",
"323341898668904173402620650759852769871",
"298287488721407398242028041904582418017",
"582342744661768209444636663593397435",
"309679254971135653718485858800575588443",
"281385543019782044022159079231999744968",
"308562075519780914882709395061138408249",
"92511822287182473929235481835458359535",
"161061822454643210250476455399929476201",
"281385543019782044022159079231999744968",
"171749872417742255366638158186767616288",
"256059965063197078311078052208086041001",
"229983836956600975182129729820539834024",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131476104713659483632416649792814749776",
"60072063488631917831194234377837912101",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131733860578281390808292043737809998320",
"60153867802836665897257106456222091464",
"137329737294610573143698624667595740721",
"122215696873370329265761368937601934470"
]
},
"id": "ASB-A-243377226-ca3b1ebf",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"295317561444549671640747669301275542723",
"247092910472481710524076146167570130046",
"36866981505683834809250132793602798996",
"116660579404883386993233008672162868534",
"114806641617446633542301985421514924282",
"275731395159690849144790421027941906494",
"128452031570740390892707905408347831960",
"314607729991727419006701614927516068134",
"4176302984295456083585541823566050908",
"65452900290876898748797794998033409553",
"297962181431848582035406008076561957061",
"309922748554431808629801311406896912873",
"56587729412198089865606410257809448228",
"271270608742521877492686433569877601550"
]
},
"id": "ASB-A-243377226-cea2a130",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 1455.0,
"function_hash": "113272842121288150826906473258009570421"
},
"id": "ASB-A-243377226-d4071f28",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendOnPackageInstalled"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"219403249346833228025896062802996982120",
"193966766531547199235117269987079816873",
"203049254234965103924479873428524893312",
"5665436218258329645774250914523640581",
"252779524570715209015010914293074764443",
"225038616890867297937787119160628082289",
"238329617538021927936846931914070672522",
"316651912593467609470695356420115289494"
]
},
"id": "ASB-A-243377226-d82e7b9c",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f"
],
"spl": "2023-04-01",
"severity": "High",
"types": [
"EoP"
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"73304285286796207645041454657029646762",
"295125738304383576455933284438075500829",
"108945557582781098019498898465187749155",
"29331431292022645715683518506356303460",
"36866981505683834809250132793602798996",
"116660579404883386993233008672162868534",
"114806641617446633542301985421514924282",
"275731395159690849144790421027941906494",
"128452031570740390892707905408347831960",
"314607729991727419006701614927516068134",
"4176302984295456083585541823566050908",
"65452900290876898748797794998033409553",
"297962181431848582035406008076561957061",
"309922748554431808629801311406896912873",
"56587729412198089865606410257809448228",
"271270608742521877492686433569877601550"
]
},
"id": "ASB-A-243377226-09f15706",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"323412635192497196527178943371003595188",
"16027203025332034435611508736853592440",
"224002682681926482644142831315174294709",
"236986350412559622266216948784221704259",
"85395633170205573464174811960492861150",
"68611945343770282914225145140944487968",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400",
"302021338729705551774464323738952841613",
"252998963622672028187326744797960770102",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400"
]
},
"id": "ASB-A-243377226-260297b5",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 494.0,
"function_hash": "95153075995565927400725679275297696168"
},
"id": "ASB-A-243377226-309b3ebf",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java",
"function": "sendIntent"
},
"signature_type": "Function"
},
{
"digest": {
"length": 754.0,
"function_hash": "174224566600324625455511757873748490543"
},
"id": "ASB-A-243377226-4d72f824",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendPendingStreaming"
},
"signature_type": "Function"
},
{
"digest": {
"length": 177.0,
"function_hash": "87046432260736714533777865737454901035"
},
"id": "ASB-A-243377226-72581af9",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java",
"function": "sendIntent"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"336795017755509346792141919155033651410",
"177860852319508677631328805120628172030",
"176174153931539697176094628348835527918",
"87972040715053793152432707735096436799",
"582342744661768209444636663593397435",
"309679254971135653718485858800575588443",
"281385543019782044022159079231999744968",
"308562075519780914882709395061138408249",
"256059965063197078311078052208086041001",
"229983836956600975182129729820539834024",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131476104713659483632416649792814749776",
"60072063488631917831194234377837912101",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"30219924095508504389926441055972838396",
"274074480419655705059611601531171683689",
"227233343654581734988281036650679773683",
"222599868586406303440594060360557978417"
]
},
"id": "ASB-A-243377226-77d2263d",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"219403249346833228025896062802996982120",
"193966766531547199235117269987079816873",
"203049254234965103924479873428524893312",
"5665436218258329645774250914523640581",
"252779524570715209015010914293074764443",
"225038616890867297937787119160628082289",
"238329617538021927936846931914070672522",
"316651912593467609470695356420115289494"
]
},
"id": "ASB-A-243377226-90f96ca7",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 1438.0,
"function_hash": "93988994418747638377202196351253599131"
},
"id": "ASB-A-243377226-a24a81b0",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendOnPackageInstalled"
},
"signature_type": "Function"
},
{
"digest": {
"length": 437.0,
"function_hash": "258031307705374909764478382548455210238"
},
"id": "ASB-A-243377226-b800f99e",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "onUserActionRequired"
},
"signature_type": "Function"
},
{
"digest": {
"length": 1247.0,
"function_hash": "100196446771587892735951143397347887086"
},
"id": "ASB-A-243377226-bc0fb96b",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "statusUpdate"
},
"signature_type": "Function"
},
{
"digest": {
"length": 517.0,
"function_hash": "10473893671143963680998946290762191544"
},
"id": "ASB-A-243377226-c3fa0206",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java",
"function": "freeStorage"
},
"signature_type": "Function"
},
{
"digest": {
"length": 284.0,
"function_hash": "160490511048139809329378764510816041911"
},
"id": "ASB-A-243377226-f0ef024c",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java",
"function": "onRestoreComplete"
},
"signature_type": "Function"
},
{
"digest": {
"length": 437.0,
"function_hash": "18028586340217595494749058636609117368"
},
"id": "ASB-A-243377226-f9155156",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendOnUserActionRequired"
},
"signature_type": "Function"
},
{
"digest": {
"length": 818.0,
"function_hash": "314651487143942883914736967300515752730"
},
"id": "ASB-A-243377226-fbfdafac",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "onPackageDeleted"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7"
],
"spl": "2023-04-01",
"severity": "High",
"types": [
"EoP"
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"length": 494.0,
"function_hash": "95153075995565927400725679275297696168"
},
"id": "ASB-A-243377226-0172f2c9",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java",
"function": "sendIntent"
},
"signature_type": "Function"
},
{
"digest": {
"length": 177.0,
"function_hash": "87046432260736714533777865737454901035"
},
"id": "ASB-A-243377226-0efa455e",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java",
"function": "sendIntent"
},
"signature_type": "Function"
},
{
"digest": {
"length": 1247.0,
"function_hash": "100196446771587892735951143397347887086"
},
"id": "ASB-A-243377226-57a36b40",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "statusUpdate"
},
"signature_type": "Function"
},
{
"digest": {
"length": 437.0,
"function_hash": "18028586340217595494749058636609117368"
},
"id": "ASB-A-243377226-5a30913b",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendOnUserActionRequired"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"336795017755509346792141919155033651410",
"177860852319508677631328805120628172030",
"176174153931539697176094628348835527918",
"87972040715053793152432707735096436799",
"582342744661768209444636663593397435",
"309679254971135653718485858800575588443",
"281385543019782044022159079231999744968",
"308562075519780914882709395061138408249",
"256059965063197078311078052208086041001",
"229983836956600975182129729820539834024",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131476104713659483632416649792814749776",
"60072063488631917831194234377837912101",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"30219924095508504389926441055972838396",
"274074480419655705059611601531171683689",
"227233343654581734988281036650679773683",
"222599868586406303440594060360557978417"
]
},
"id": "ASB-A-243377226-5e8d46c6",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 818.0,
"function_hash": "314651487143942883914736967300515752730"
},
"id": "ASB-A-243377226-6eb03f26",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "onPackageDeleted"
},
"signature_type": "Function"
},
{
"digest": {
"length": 284.0,
"function_hash": "160490511048139809329378764510816041911"
},
"id": "ASB-A-243377226-7e1502d3",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java",
"function": "onRestoreComplete"
},
"signature_type": "Function"
},
{
"digest": {
"length": 517.0,
"function_hash": "10473893671143963680998946290762191544"
},
"id": "ASB-A-243377226-8c60053e",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java",
"function": "freeStorage"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"323412635192497196527178943371003595188",
"16027203025332034435611508736853592440",
"224002682681926482644142831315174294709",
"236986350412559622266216948784221704259",
"85395633170205573464174811960492861150",
"68611945343770282914225145140944487968",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400",
"302021338729705551774464323738952841613",
"252998963622672028187326744797960770102",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400"
]
},
"id": "ASB-A-243377226-d9bdc21f",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 1438.0,
"function_hash": "93988994418747638377202196351253599131"
},
"id": "ASB-A-243377226-dd61010b",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendOnPackageInstalled"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"73304285286796207645041454657029646762",
"295125738304383576455933284438075500829",
"108945557582781098019498898465187749155",
"29331431292022645715683518506356303460",
"36866981505683834809250132793602798996",
"116660579404883386993233008672162868534",
"114806641617446633542301985421514924282",
"275731395159690849144790421027941906494",
"128452031570740390892707905408347831960",
"314607729991727419006701614927516068134",
"4176302984295456083585541823566050908",
"65452900290876898748797794998033409553",
"297962181431848582035406008076561957061",
"309922748554431808629801311406896912873",
"56587729412198089865606410257809448228",
"271270608742521877492686433569877601550"
]
},
"id": "ASB-A-243377226-e8a7f6ff",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 754.0,
"function_hash": "174224566600324625455511757873748490543"
},
"id": "ASB-A-243377226-f195c157",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendPendingStreaming"
},
"signature_type": "Function"
},
{
"digest": {
"length": 437.0,
"function_hash": "258031307705374909764478382548455210238"
},
"id": "ASB-A-243377226-f3ac6298",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "onUserActionRequired"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"219403249346833228025896062802996982120",
"193966766531547199235117269987079816873",
"203049254234965103924479873428524893312",
"5665436218258329645774250914523640581",
"252779524570715209015010914293074764443",
"225038616890867297937787119160628082289",
"238329617538021927936846931914070672522",
"316651912593467609470695356420115289494"
]
},
"id": "ASB-A-243377226-f485f8a0",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb"
],
"spl": "2023-04-01",
"severity": "High",
"types": [
"EoP"
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"323412635192497196527178943371003595188",
"16027203025332034435611508736853592440",
"224002682681926482644142831315174294709",
"236986350412559622266216948784221704259",
"85395633170205573464174811960492861150",
"68611945343770282914225145140944487968",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400",
"302021338729705551774464323738952841613",
"252998963622672028187326744797960770102",
"137861408629469069889710535831228376880",
"141200585161276211919809719145833048400"
]
},
"id": "ASB-A-243377226-096f35a1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"73304285286796207645041454657029646762",
"295125738304383576455933284438075500829",
"108945557582781098019498898465187749155",
"29331431292022645715683518506356303460",
"36866981505683834809250132793602798996",
"116660579404883386993233008672162868534",
"114806641617446633542301985421514924282",
"275731395159690849144790421027941906494",
"128452031570740390892707905408347831960",
"314607729991727419006701614927516068134",
"4176302984295456083585541823566050908",
"65452900290876898748797794998033409553",
"297962181431848582035406008076561957061",
"309922748554431808629801311406896912873",
"56587729412198089865606410257809448228",
"271270608742521877492686433569877601550"
]
},
"id": "ASB-A-243377226-1ec995ba",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 292.0,
"function_hash": "219308357351614869912350567215185510115"
},
"id": "ASB-A-243377226-2bcb10cd",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/InstallPackageHelper.java",
"function": "onRestoreComplete"
},
"signature_type": "Function"
},
{
"digest": {
"length": 177.0,
"function_hash": "87046432260736714533777865737454901035"
},
"id": "ASB-A-243377226-46f28099",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java",
"function": "sendIntent"
},
"signature_type": "Function"
},
{
"digest": {
"length": 818.0,
"function_hash": "314651487143942883914736967300515752730"
},
"id": "ASB-A-243377226-527e34ec",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "onPackageDeleted"
},
"signature_type": "Function"
},
{
"digest": {
"length": 437.0,
"function_hash": "18028586340217595494749058636609117368"
},
"id": "ASB-A-243377226-6784331b",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendOnUserActionRequired"
},
"signature_type": "Function"
},
{
"digest": {
"length": 437.0,
"function_hash": "258031307705374909764478382548455210238"
},
"id": "ASB-A-243377226-84657f15",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
"function": "onUserActionRequired"
},
"signature_type": "Function"
},
{
"digest": {
"length": 581.0,
"function_hash": "159379097775954217395148525443538899085"
},
"id": "ASB-A-243377226-8f59daf5",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java",
"function": "freeStorage"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"207144622467762879224534720409084504778",
"35340660332901479199731445305937848243",
"11123291332103204746933074636169787786",
"280007723443490694062922911995634611338",
"252779524570715209015010914293074764443",
"183930070490569877087458265804754943352",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954"
]
},
"id": "ASB-A-243377226-b384a997",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/InstallPackageHelper.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 754.0,
"function_hash": "174224566600324625455511757873748490543"
},
"id": "ASB-A-243377226-b8b65021",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendPendingStreaming"
},
"signature_type": "Function"
},
{
"digest": {
"length": 1333.0,
"function_hash": "278886018652066584784600442955964654687"
},
"id": "ASB-A-243377226-c10fc47b",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java",
"function": "sendOnPackageInstalled"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"142853875768019227638751984942571758701",
"250456287636855603695304993127276667751",
"94747253718215377661370998370068262425",
"87972040715053793152432707735096436799",
"256059965063197078311078052208086041001",
"229983836956600975182129729820539834024",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"131476104713659483632416649792814749776",
"60072063488631917831194234377837912101",
"237649437396064158548480520350490479791",
"200647927988515877784747341304982809954",
"30219924095508504389926441055972838396",
"274074480419655705059611601531171683689",
"227233343654581734988281036650679773683",
"222599868586406303440594060360557978417"
]
},
"id": "ASB-A-243377226-d4cde585",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageInstallerSession.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"230350746094761608679930749460581319244",
"234383486024453296436807950542586909656",
"33611807596878687146775765485897014386",
"49168145632882497069893885308677445712",
"219403249346833228025896062802996982120",
"193966766531547199235117269987079816873",
"203049254234965103924479873428524893312",
"5665436218258329645774250914523640581"
]
},
"id": "ASB-A-243377226-eb189253",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 494.0,
"function_hash": "95153075995565927400725679275297696168"
},
"id": "ASB-A-243377226-ec92cb38",
"source": "https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentSender.java",
"function": "sendIntent"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73"
],
"spl": "2023-04-01",
"severity": "High",
"types": [
"EoP"
]
}