{"id":"ASB-A-143230980","details":"In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosure of voicemail metadata with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-143230980","CVE-2020-0368"],"modified":"2026-04-17T15:55:28.020024Z","published":"2021-07-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-07-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-07-05"}]}],"versions":["11"],"ecosystem_specific":{"types":["ID"],"spl":"2021-07-05","fixes":["https://android.googlesource.com/platform/frameworks/base/+/02b4a387aa85f3a084b22716c1221bc2b2ad9133","https://android.googlesource.com/platform/frameworks/base/+/6e1dc4f73597467f0895b9abe186dafd7ea23f2e"],"severity":"High","vanir_signatures":[{"digest":{"length":381,"function_hash":"243577943529210183658225489362143767496"},"signature_type":"Function","target":{"file":"core/java/android/provider/CallLog.java","function":"getLastOutgoingCall"},"source":"https://android.googlesource.com/platform/frameworks/base/+/6e1dc4f73597467f0895b9abe186dafd7ea23f2e","signature_version":"v1","id":"ASB-A-143230980-13fe7e03","deprecated":false},{"digest":{"line_hashes":["167943536484440368284640684903005144419","88975112140562803490622136464619689594","177052677309344726792500136065671562789","181562959741234650330855493112216272006"],"threshold":0.9},"signature_type":"Line","target":{"file":"core/java/android/database/sqlite/SQLiteQueryBuilder.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/02b4a387aa85f3a084b22716c1221bc2b2ad9133","signature_version":"v1","id":"ASB-A-143230980-cc2e03b7","deprecated":false},{"digest":{"line_hashes":["50428772908630929488001246425327088739","55150776784164778373540527941906524255","293736895579162532924440257144895041804","84329363243419339319955492616616171406","274663662291183179225696621580873416242","164944255278781854580662433622137323883","228014237971832009562656199285204868344","201173472687214082052071698990996339145","78342307389441675659700421772270178081","52152552155839912661368790527001164213","156281475283858460274769409993363619664"],"threshold":0.9},"signature_type":"Line","target":{"file":"core/java/android/provider/CallLog.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/6e1dc4f73597467f0895b9abe186dafd7ea23f2e","signature_version":"v1","id":"ASB-A-143230980-d3f1d392","deprecated":false},{"digest":{"length":511,"function_hash":"190931567886367991920293425054198084670"},"signature_type":"Function","target":{"file":"core/java/android/database/sqlite/SQLiteQueryBuilder.java","function":"enforceStrictToken"},"source":"https://android.googlesource.com/platform/frameworks/base/+/02b4a387aa85f3a084b22716c1221bc2b2ad9133","signature_version":"v1","id":"ASB-A-143230980-e697a17c","deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-143230980.json"}},{"package":{"name":"platform/packages/providers/ContactsProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-07-05"}]}],"versions":["11"],"ecosystem_specific":{"types":["ID"],"spl":"2021-07-05","fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/1b5f99d14234bd92ce3a40d1e267f8b8a1bbe3dd"],"severity":"High","vanir_signatures":[{"digest":{"length":715,"function_hash":"264576237726595650887705223528953321897"},"signature_type":"Function","target":{"file":"src/com/android/providers/contacts/CallLogProvider.java","function":"deleteInternal"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/1b5f99d14234bd92ce3a40d1e267f8b8a1bbe3dd","signature_version":"v1","id":"ASB-A-143230980-17f93940","deprecated":false},{"digest":{"length":1897,"function_hash":"293099696361844818597976039091575017108"},"signature_type":"Function","target":{"file":"src/com/android/providers/contacts/CallLogProvider.java","function":"queryInternal"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/1b5f99d14234bd92ce3a40d1e267f8b8a1bbe3dd","signature_version":"v1","id":"ASB-A-143230980-a1236a8f","deprecated":false},{"digest":{"length":957,"function_hash":"125439238430240601382931982922531287603"},"signature_type":"Function","target":{"file":"src/com/android/providers/contacts/CallLogProvider.java","function":"updateInternal"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/1b5f99d14234bd92ce3a40d1e267f8b8a1bbe3dd","signature_version":"v1","id":"ASB-A-143230980-d9cd1907","deprecated":false},{"digest":{"line_hashes":["106644019312073845655984668024151909291","64800742481851107802405913854460607400","239963095560727400973340794405138837632","85576252990887061447484782348234904663","255991450326838143900334801343293146354","126707294435488434288156590852769369805","36948501330905214543762762802327015750","152221335107425749313179684226736345887","12558825698757157313814857132518525610","266227819577318429353890695815731274413","288766343364638629640793730780990964811","287559143745587618305399838269606648732","81774158029451417419069484757056864807","180612124011276798595241076826134972616","167192138794513326793851295566243698357","232530658847801189356996578936233394988","41744940072694375250216716975833257854","266227819577318429353890695815731274413","288766343364638629640793730780990964811","284813807822875896483681818980955783203","280172972529112716794192147385117664446","318486439967898191561339324149599709590","10615750858419314198680381901961654544","174094468482269905173280371592327981547","148203312493574468672471217258430693232"],"threshold":0.9},"signature_type":"Line","target":{"file":"src/com/android/providers/contacts/CallLogProvider.java"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/1b5f99d14234bd92ce3a40d1e267f8b8a1bbe3dd","signature_version":"v1","id":"ASB-A-143230980-e3d84135","deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-143230980.json"}}],"schema_version":"1.7.5"}