{"id":"ASB-A-140256621","details":"In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. This could lead to local escalation of privilege that allows instant apps access to permissions not allowed for instant apps, with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-140256621","CVE-2020-0439"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2020-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/e752ae55522f2657bb26bd2351ef879a73fa6efb"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/c46491e7da14c620fbe490d50b61aa65f256c5d3"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11-next:0"},{"fixed":"11-next:2020-11-01"}]}],"versions":["11-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a2747c93521069600d012d9da81044e80aa06cce","https://android.googlesource.com/platform/frameworks/base/+/f09326bd07244ccab244d02a07cb5f330af73c7d","https://android.googlesource.com/platform/frameworks/base/+/34d1db18ddfdb1fd709a9dae46959ed15d134d16"],"severity":"High","spl":"2020-11-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-140256621-256697ff","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/34d1db18ddfdb1fd709a9dae46959ed15d134d16","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"line_hashes":["253396609669921316539394630433713262167","274687338872487417933184019953377536370","229916441086580121195326712871713787820","271971882974451749579940557591877416442","24205034439355785176021830187153456954","277788347820877011201586845651849483326","48931828168504169546684354862307830190","203368179495368343527892236374747507376","132729979780175029740819344174108602230","317538048140426394703782700552642963170","278866380819965992331105497569401286143","295462736938616061448171582581747358544","258657412870096086076187078196382385919","273169066895788309444405416304601424368","249647224240407208084773583267060809546","71926801713946897460438588974137909250","12710146587421600635359458373273558592","150591757113947191522548734358004902325","14038674738183755763715843906656424410","154182220932586410074947337160373619621","255046662697187950046489565623395120474","16028033947526972062713092824742250636","210005632255543838456910076742488047409","13261025413385110298317900225382421990","96740624629439313170082507263211095423","192656267888217996625533953983747590368","103483856885971159778518148863166796949","60046960628806303879729841261698144307","218247869527752573962619006571764838245","315737957758846556901948188775760847659"],"threshold":0.9}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f09326bd07244ccab244d02a07cb5f330af73c7d","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"PackageManagerService"},"deprecated":false,"digest":{"function_hash":"322786507398356885516625291528685872166","length":21933},"id":"ASB-A-140256621-45de2abb","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/34d1db18ddfdb1fd709a9dae46959ed15d134d16","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"addPackageHoldingPermissions"},"deprecated":false,"digest":{"function_hash":"326417311602979837718301016844143032706","length":838},"id":"ASB-A-140256621-463db6a0"},{"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"deleteSystemPackageLIF"},"deprecated":false,"digest":{"function_hash":"143258622276265196276589506981079986656","length":1961},"id":"ASB-A-140256621-4e393d0f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f09326bd07244ccab244d02a07cb5f330af73c7d"},{"target":{"function":"installPackageFromSystemLIF","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"function_hash":"259395408210374525710567365512112273131","length":1815},"id":"ASB-A-140256621-58edb226","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f09326bd07244ccab244d02a07cb5f330af73c7d"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/f09326bd07244ccab244d02a07cb5f330af73c7d","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"enableCompressedPackage"},"deprecated":false,"digest":{"function_hash":"61057072983360952154033019365774564152","length":1569},"id":"ASB-A-140256621-66034527","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["3271075293627186102788207892072491390","256131198327079629824560170364070892187","129725822984932144206096304236050951288","202154113690992753158987310634109614230","88005100597857451438219184339456816847","16786655540957234918801446590391115563","116173499882206639733840351621167633854","102535073914193051299604321888571467653","239571990004640192488138110513037052997","148732065094273629141091413921174052623","233565929521594871423640885317155768369","255394816120598207156260642734662720949","318801982496306347512474650179684655795","186110777445997442742142491233170668919","132523220045607985772007477897081121498","240190692724268092602418023469238124431","238460016675151152758041176801640981929","193128937232157863288799930653717768058","258323898294123907768325657637273921030","295819808538588052879011050199863532956","82495078567007094754198935483429551898","231765283484385657445373283462084179832","184886437269779179094249142064657360918","247277472036218280678874683720723744990","211277551243664861702100246425579966193","220888890311227279528872588488417163410","278285042016901724682219458810977123901","47029323351108290726290413530550590274","156216662042209464534993789514025436933","37622856626496221331116016708366438342","279622516000985233739651023221711754663","20477570377209851893243501544007205833","193193530140743799844626587510130745358","265038695855100465211288237720948348676","281791865949923109466001427507757916024","121880002061598294163605280613682336045","213374977994583208739231388850427809361","237800842558394162419231128502305280053","298557141855467154734667929294902991070","178766603754805811472732143511500676535","72170737502919604200060732244201651219","234254230692744655246138237030820007071","303250530801237495467033023276759887776","222550101300106244706264898118794163294","221239650784198972120060530757588779270","42813777183532373633717821541181783587","288679384115632090312186268376167279747","270327560939241705837030404081702517605","182730116718769168869892701232774045890","195285028729228357826216166737927364917","205072134797706808944457991866726768815","236961409947838792140058854721847671082","174923830277264943565731599011808186490","172315952278733900758925892826721216104","209280269814144674911502991901502477246","126003467492192751208950186674100717498","235939930080285156965004916428127269515","103922722440057816942122423008652388407","185931102067905459696387291455236373657","206291317998811747816487829894143199929","288157369735517182216766574071226078970","226484104476378924442983931744362297062","239027757081994187528515723299044749071","21796505450312582685272618167989860846","223313612494427122139161571164791014803","35675411245849283600683949052366367370","320727467522424550600381438422870071931"],"threshold":0.9},"id":"ASB-A-140256621-8169addd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f09326bd07244ccab244d02a07cb5f330af73c7d","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["80534942161854568712418940599115572923","213603318318826064244618260922792722930","104298222017443776986091895310839222944","299080278819686792292602813364402723877"]},"id":"ASB-A-140256621-9c358b87","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a2747c93521069600d012d9da81044e80aa06cce","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/f09326bd07244ccab244d02a07cb5f330af73c7d","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"removePackageDataLIF"},"deprecated":false,"digest":{"length":2905,"function_hash":"241078711964316742034716273155800152856"},"id":"ASB-A-140256621-a4007b70","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-140256621-a618b557","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/34d1db18ddfdb1fd709a9dae46959ed15d134d16","target":{"function":"executeDeletePackageLIF","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"function_hash":"178229285840426122445647457169911404261","length":1864}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/f09326bd07244ccab244d02a07cb5f330af73c7d","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"unloadPrivatePackagesInner"},"deprecated":false,"digest":{"function_hash":"95962146906884849531509670783063632629","length":1246},"id":"ASB-A-140256621-ba5bbd70","signature_type":"Function","signature_version":"v1"},{"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"setEnabledSetting"},"deprecated":false,"digest":{"function_hash":"340238328100381865672115798550284685631","length":5482},"id":"ASB-A-140256621-d35bf44f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/34d1db18ddfdb1fd709a9dae46959ed15d134d16"},{"digest":{"length":478,"function_hash":"329892263405326115001219053164999251400"},"id":"ASB-A-140256621-d670ebab","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f09326bd07244ccab244d02a07cb5f330af73c7d","target":{"function":"deleteInstalledPackageLIF","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f09326bd07244ccab244d02a07cb5f330af73c7d","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"addForInitLI"},"deprecated":false,"digest":{"function_hash":"171432363259041544387800139373428557768","length":5282},"id":"ASB-A-140256621-f1014200"},{"id":"ASB-A-140256621-f986a7a4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/34d1db18ddfdb1fd709a9dae46959ed15d134d16","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"getInstantAppInstallerLPr"},"deprecated":false,"digest":{"function_hash":"106663369258781891962193765518869133563","length":1469}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-140256621.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-11-01"}]}],"versions":["8.0"],"ecosystem_specific":{"spl":"2020-11-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"length":1021,"function_hash":"5180051159973888628643697468730862747"},"id":"ASB-A-140256621-2c540dc4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a710a3045724d0db903477113bf63c29b940c773","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"generatePackageInfo"}},{"digest":{"length":1332,"function_hash":"181583035435809755028565052395667143031"},"id":"ASB-A-140256621-52b7fb9a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a710a3045724d0db903477113bf63c29b940c773","target":{"function":"getInstantAppInstallerLPr","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a710a3045724d0db903477113bf63c29b940c773","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["253396609669921316539394630433713262167","274687338872487417933184019953377536370","229916441086580121195326712871713787820","316408304082019384869216693940526255309","87457292521453566997276247952051004954","112577662992659797422532733274065858000","250567930405668350254306644888323173527","132729979780175029740819344174108602230","317538048140426394703782700552642963170","253607418005759739675220518715402933195","61989971500047688816845128431705310619","130401272635193384107521858870082630225","119869380773094384545370333679296832290","223938591367039244131837832067035555031","208951271050499319796505361730026473068","278866380819965992331105497569401286143","295462736938616061448171582581747358544","258657412870096086076187078196382385919","273169066895788309444405416304601424368","249647224240407208084773583267060809546","71926801713946897460438588974137909250","12710146587421600635359458373273558592"]},"id":"ASB-A-140256621-84508901","signature_type":"Line"},{"id":"ASB-A-140256621-e9c650c9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a710a3045724d0db903477113bf63c29b940c773","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"addPackageHoldingPermissions"},"deprecated":false,"digest":{"function_hash":"326417311602979837718301016844143032706","length":838}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a710a3045724d0db903477113bf63c29b940c773"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-140256621.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-11-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a710a3045724d0db903477113bf63c29b940c773"],"severity":"High","spl":"2020-11-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-140256621-2f57f927","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a710a3045724d0db903477113bf63c29b940c773","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"getInstantAppInstallerLPr"},"deprecated":false,"digest":{"length":1332,"function_hash":"181583035435809755028565052395667143031"}},{"digest":{"length":838,"function_hash":"326417311602979837718301016844143032706"},"id":"ASB-A-140256621-48098703","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a710a3045724d0db903477113bf63c29b940c773","target":{"function":"addPackageHoldingPermissions","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a710a3045724d0db903477113bf63c29b940c773","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["253396609669921316539394630433713262167","274687338872487417933184019953377536370","229916441086580121195326712871713787820","316408304082019384869216693940526255309","87457292521453566997276247952051004954","112577662992659797422532733274065858000","250567930405668350254306644888323173527","132729979780175029740819344174108602230","317538048140426394703782700552642963170","253607418005759739675220518715402933195","61989971500047688816845128431705310619","130401272635193384107521858870082630225","119869380773094384545370333679296832290","223938591367039244131837832067035555031","208951271050499319796505361730026473068","278866380819965992331105497569401286143","295462736938616061448171582581747358544","258657412870096086076187078196382385919","273169066895788309444405416304601424368","249647224240407208084773583267060809546","71926801713946897460438588974137909250","12710146587421600635359458373273558592"]},"id":"ASB-A-140256621-71b27f0c"},{"digest":{"function_hash":"5180051159973888628643697468730862747","length":1021},"id":"ASB-A-140256621-a20235cc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a710a3045724d0db903477113bf63c29b940c773","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"generatePackageInfo"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-140256621.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-11-01"}]}],"versions":["9"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-140256621-1723e85a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8b9393f4f4b4492a68f1e463c422bbc5ec890db7","target":{"function":"getInstantAppInstallerLPr","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"length":1469,"function_hash":"106663369258781891962193765518869133563"}},{"deprecated":false,"digest":{"function_hash":"326417311602979837718301016844143032706","length":838},"id":"ASB-A-140256621-18779221","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8b9393f4f4b4492a68f1e463c422bbc5ec890db7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"addPackageHoldingPermissions"}},{"deprecated":false,"digest":{"function_hash":"172436183220765043776946468151113413052","length":1981},"id":"ASB-A-140256621-1d983013","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8b9393f4f4b4492a68f1e463c422bbc5ec890db7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"generatePackageInfo"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8b9393f4f4b4492a68f1e463c422bbc5ec890db7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"line_hashes":["253396609669921316539394630433713262167","274687338872487417933184019953377536370","229916441086580121195326712871713787820","271971882974451749579940557591877416442","24205034439355785176021830187153456954","277788347820877011201586845651849483326","48931828168504169546684354862307830190","203368179495368343527892236374747507376","132729979780175029740819344174108602230","317538048140426394703782700552642963170","253607418005759739675220518715402933195","61989971500047688816845128431705310619","12856928483618637449368792852780255312","274062785257699346969656186436331191536","172290505714991255303801620378083200798","278866380819965992331105497569401286143","295462736938616061448171582581747358544","258657412870096086076187078196382385919","273169066895788309444405416304601424368","249647224240407208084773583267060809546","71926801713946897460438588974137909250","12710146587421600635359458373273558592","41074580312738739239047464186066931384","84754849698024864075458225834995247868","61378569051352479642146403689299270138","279070192564905011550620368737042690199"],"threshold":0.9},"id":"ASB-A-140256621-ca762ba3"},{"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"deletePackageLIF"},"deprecated":false,"digest":{"length":4385,"function_hash":"219814342797762461796207653227591242542"},"id":"ASB-A-140256621-ead05ac7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8b9393f4f4b4492a68f1e463c422bbc5ec890db7"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8b9393f4f4b4492a68f1e463c422bbc5ec890db7"],"severity":"High","spl":"2020-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-140256621.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-11-01"}]}],"versions":["10"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"length":3907,"function_hash":"175958938380919984509888856507103043965"},"id":"ASB-A-140256621-046ce3d9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/741e955d129c1adb2df16bff31c374ee8073180c","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"executeDeletePackageLIF"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/741e955d129c1adb2df16bff31c374ee8073180c","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"addPackageHoldingPermissions"},"deprecated":false,"digest":{"function_hash":"326417311602979837718301016844143032706","length":838},"id":"ASB-A-140256621-c4296ce4"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/741e955d129c1adb2df16bff31c374ee8073180c","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"getInstantAppInstallerLPr"},"deprecated":false,"digest":{"length":1469,"function_hash":"106663369258781891962193765518869133563"},"id":"ASB-A-140256621-cb9fe343"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/741e955d129c1adb2df16bff31c374ee8073180c","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"generatePackageInfo"},"deprecated":false,"digest":{"length":1971,"function_hash":"61174558776178965434754502849627000612"},"id":"ASB-A-140256621-d8523b9b","signature_type":"Function"},{"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["253396609669921316539394630433713262167","274687338872487417933184019953377536370","229916441086580121195326712871713787820","271971882974451749579940557591877416442","24205034439355785176021830187153456954","277788347820877011201586845651849483326","48931828168504169546684354862307830190","203368179495368343527892236374747507376","132729979780175029740819344174108602230","317538048140426394703782700552642963170","253607418005759739675220518715402933195","77387659711762311762999378015673827643","294185814027377539308985069858557542719","129074452266126374820464200571312894426","83354839849621133710984368590937320294","278866380819965992331105497569401286143","295462736938616061448171582581747358544","258657412870096086076187078196382385919","273169066895788309444405416304601424368","249647224240407208084773583267060809546","71926801713946897460438588974137909250","12710146587421600635359458373273558592","75719185121946612608231774861641273431","84754849698024864075458225834995247868","61378569051352479642146403689299270138","184403712619357548555401853662827316756"]},"id":"ASB-A-140256621-f3686cf9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/741e955d129c1adb2df16bff31c374ee8073180c"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/741e955d129c1adb2df16bff31c374ee8073180c"],"severity":"High","spl":"2020-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-140256621.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2020-11-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2020-11-01","types":["EoP"],"vanir_signatures":[{"target":{"function":"generatePackageInfo","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"function_hash":"19763204206053755134142961679339093143","length":1974},"id":"ASB-A-140256621-274b4f0f","match_only_versions":["11"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d83e3a350d1a2a6fd317b19ad22ee5647781870e"},{"digest":{"threshold":0.9,"line_hashes":["253396609669921316539394630433713262167","274687338872487417933184019953377536370","229916441086580121195326712871713787820","271971882974451749579940557591877416442","24205034439355785176021830187153456954","277788347820877011201586845651849483326","48931828168504169546684354862307830190","203368179495368343527892236374747507376","132729979780175029740819344174108602230","317538048140426394703782700552642963170","316114193329233853497416987781912210861","282888036833976859420609048431743836559","179381769753002926905070061200602925453","319442271913114339382921474973474286455","130644539797941809028862610338135031168","278866380819965992331105497569401286143","295462736938616061448171582581747358544","258657412870096086076187078196382385919","273169066895788309444405416304601424368","249647224240407208084773583267060809546","71926801713946897460438588974137909250","12710146587421600635359458373273558592","150591757113947191522548734358004902325","14038674738183755763715843906656424410","154182220932586410074947337160373619621","255046662697187950046489565623395120474","16028033947526972062713092824742250636","210005632255543838456910076742488047409","13261025413385110298317900225382421990","96740624629439313170082507263211095423","192656267888217996625533953983747590368","103483856885971159778518148863166796949","60046960628806303879729841261698144307","218247869527752573962619006571764838245","315737957758846556901948188775760847659"]},"id":"ASB-A-140256621-27ad30e9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d83e3a350d1a2a6fd317b19ad22ee5647781870e","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"106663369258781891962193765518869133563","length":1469},"id":"ASB-A-140256621-3886969a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d83e3a350d1a2a6fd317b19ad22ee5647781870e","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"getInstantAppInstallerLPr"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/01e0f4813af8502faaa683d55dbbc024b3080741","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"executeDeletePackageLIF"},"deprecated":false,"digest":{"function_hash":"77601091537302297658245433915555927035","length":1987},"id":"ASB-A-140256621-492d677d","match_only_versions":["11"],"signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"326417311602979837718301016844143032706","length":838},"id":"ASB-A-140256621-4f9909a7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d83e3a350d1a2a6fd317b19ad22ee5647781870e","target":{"function":"addPackageHoldingPermissions","file":"services/core/java/com/android/server/pm/PackageManagerService.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d83e3a350d1a2a6fd317b19ad22ee5647781870e","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"executeDeletePackageLIF"},"deprecated":false,"digest":{"length":1864,"function_hash":"178229285840426122445647457169911404261"},"id":"ASB-A-140256621-4fd5c642","signature_type":"Function"},{"match_only_versions":["11"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/01e0f4813af8502faaa683d55dbbc024b3080741","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["64152874298733692454198516434103997693","130029551890964590688231571212066845648","65843965651650544406662993002053427619","40653486360623649136779285927749846544"]},"id":"ASB-A-140256621-6536dd1e"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d83e3a350d1a2a6fd317b19ad22ee5647781870e","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"setEnabledSetting"},"deprecated":false,"digest":{"function_hash":"340238328100381865672115798550284685631","length":5482},"id":"ASB-A-140256621-918e75e4"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d83e3a350d1a2a6fd317b19ad22ee5647781870e","https://android.googlesource.com/platform/frameworks/base/+/01e0f4813af8502faaa683d55dbbc024b3080741"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-140256621.json"}}],"schema_version":"1.9.0"}