{"id":"ASB-A-129476618","details":"In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing background data usage or launching from the background, with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-129476618","CVE-2020-0227"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2020-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-07-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/cts/+/4f7dc13067ab4aa4f0c3f5373ee0a28c0285eea1"},{"type":"FIX","url":"https://android.googlesource.com/platform/cts/+/7d87a0e0a7bcda698b30957bce3c21d64a965e89"},{"type":"FIX","url":"https://android.googlesource.com/platform/cts/+/8643636095dc9b3c70a62ef16f68df12dff67fe7"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/84cccfe6cdbc57ee372ee1a0fea64c7a11c53766"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/98f45443e1cf397ab92b4cecd9200c2dcccf099b"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/b4aaa9d8adae5971f7f6589afc22008afa2f8d2b"}],"affected":[{"package":{"name":"platform/cts","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-07-01"}]}],"versions":["8.0"],"ecosystem_specific":{"spl":"2020-07-01","severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/cts/+/4f7dc13067ab4aa4f0c3f5373ee0a28c0285eea1","https://android.googlesource.com/platform/cts/+/7d87a0e0a7bcda698b30957bce3c21d64a965e89","https://android.googlesource.com/platform/cts/+/8643636095dc9b3c70a62ef16f68df12dff67fe7"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-129476618.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-07-01"}]}],"versions":["8.0"],"ecosystem_specific":{"spl":"2020-07-01","vanir_signatures":[{"id":"ASB-A-129476618-217c27d0","source":"https://android.googlesource.com/platform/frameworks/base/+/84cccfe6cdbc57ee372ee1a0fea64c7a11c53766","signature_type":"Line","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"},{"id":"ASB-A-129476618-3443ebf8","source":"https://android.googlesource.com/platform/frameworks/base/+/b4aaa9d8adae5971f7f6589afc22008afa2f8d2b","signature_type":"Line","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"},{"id":"ASB-A-129476618-ea2fd65d","source":"https://android.googlesource.com/platform/frameworks/base/+/98f45443e1cf397ab92b4cecd9200c2dcccf099b","signature_type":"Line","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"}],"severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/84cccfe6cdbc57ee372ee1a0fea64c7a11c53766","https://android.googlesource.com/platform/frameworks/base/+/98f45443e1cf397ab92b4cecd9200c2dcccf099b","https://android.googlesource.com/platform/frameworks/base/+/b4aaa9d8adae5971f7f6589afc22008afa2f8d2b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-129476618.json"}},{"package":{"name":"platform/cts","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-07-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2020-07-01","severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/cts/+/4f7dc13067ab4aa4f0c3f5373ee0a28c0285eea1","https://android.googlesource.com/platform/cts/+/7d87a0e0a7bcda698b30957bce3c21d64a965e89","https://android.googlesource.com/platform/cts/+/8643636095dc9b3c70a62ef16f68df12dff67fe7"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-129476618.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-07-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2020-07-01","vanir_signatures":[{"id":"ASB-A-129476618-1e92855e","source":"https://android.googlesource.com/platform/frameworks/base/+/98f45443e1cf397ab92b4cecd9200c2dcccf099b","signature_type":"Line","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"},{"id":"ASB-A-129476618-5f20fe37","source":"https://android.googlesource.com/platform/frameworks/base/+/84cccfe6cdbc57ee372ee1a0fea64c7a11c53766","signature_type":"Line","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"},{"id":"ASB-A-129476618-f0b72546","signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/b4aaa9d8adae5971f7f6589afc22008afa2f8d2b","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"}],"severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/84cccfe6cdbc57ee372ee1a0fea64c7a11c53766","https://android.googlesource.com/platform/frameworks/base/+/98f45443e1cf397ab92b4cecd9200c2dcccf099b","https://android.googlesource.com/platform/frameworks/base/+/b4aaa9d8adae5971f7f6589afc22008afa2f8d2b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-129476618.json"}},{"package":{"name":"platform/cts","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-07-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2020-07-01","severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/cts/+/4f7dc13067ab4aa4f0c3f5373ee0a28c0285eea1","https://android.googlesource.com/platform/cts/+/7d87a0e0a7bcda698b30957bce3c21d64a965e89","https://android.googlesource.com/platform/cts/+/8643636095dc9b3c70a62ef16f68df12dff67fe7"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-129476618.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-07-01"}]}],"versions":["9"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-129476618-1e421d4f","source":"https://android.googlesource.com/platform/frameworks/base/+/84cccfe6cdbc57ee372ee1a0fea64c7a11c53766","signature_type":"Line","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"},{"id":"ASB-A-129476618-56eeb89b","signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/98f45443e1cf397ab92b4cecd9200c2dcccf099b","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"},{"id":"ASB-A-129476618-89c32a17","source":"https://android.googlesource.com/platform/frameworks/base/+/b4aaa9d8adae5971f7f6589afc22008afa2f8d2b","signature_type":"Line","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"}],"spl":"2020-07-01","severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/84cccfe6cdbc57ee372ee1a0fea64c7a11c53766","https://android.googlesource.com/platform/frameworks/base/+/98f45443e1cf397ab92b4cecd9200c2dcccf099b","https://android.googlesource.com/platform/frameworks/base/+/b4aaa9d8adae5971f7f6589afc22008afa2f8d2b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-129476618.json"}},{"package":{"name":"platform/cts","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-07-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2020-07-01","severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/cts/+/4f7dc13067ab4aa4f0c3f5373ee0a28c0285eea1","https://android.googlesource.com/platform/cts/+/7d87a0e0a7bcda698b30957bce3c21d64a965e89","https://android.googlesource.com/platform/cts/+/8643636095dc9b3c70a62ef16f68df12dff67fe7"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-129476618.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-07-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2020-07-01","vanir_signatures":[{"id":"ASB-A-129476618-1433fec6","source":"https://android.googlesource.com/platform/frameworks/base/+/b4aaa9d8adae5971f7f6589afc22008afa2f8d2b","signature_type":"Line","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"},{"id":"ASB-A-129476618-bedcce21","source":"https://android.googlesource.com/platform/frameworks/base/+/98f45443e1cf397ab92b4cecd9200c2dcccf099b","signature_type":"Line","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"},{"id":"ASB-A-129476618-c6c55255","source":"https://android.googlesource.com/platform/frameworks/base/+/84cccfe6cdbc57ee372ee1a0fea64c7a11c53766","signature_type":"Line","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26708729099211957372007850238875196453","298307091307253877753515377986473208398","303296711729030685135651464016046123052"]},"target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"signature_version":"v1"}],"severity":"High","types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/84cccfe6cdbc57ee372ee1a0fea64c7a11c53766","https://android.googlesource.com/platform/frameworks/base/+/98f45443e1cf397ab92b4cecd9200c2dcccf099b","https://android.googlesource.com/platform/frameworks/base/+/b4aaa9d8adae5971f7f6589afc22008afa2f8d2b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-129476618.json"}}],"schema_version":"1.7.5"}