{"id":"ASB-A-146204120","details":"In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-146204120","CVE-2020-0074"],"modified":"2026-09-14T15:29:34.961045646Z","published":"2020-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-09-01"}]}],"versions":["8.0"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-146204120-0359bdeb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"needsNetworkVerificationLPr"},"deprecated":false,"digest":{"length":461,"function_hash":"265040464516340603932698847994932260690"}},{"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"verifyIntentFiltersIfNeeded"},"deprecated":false,"digest":{"function_hash":"52735196852677394348372510882928367616","length":2022},"id":"ASB-A-146204120-0902a35d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"},{"target":{"function":"removePackageDataLIF","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"function_hash":"70511962063340436536060835738326429423","length":2693},"id":"ASB-A-146204120-3b8892f5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"},{"deprecated":false,"digest":{"function_hash":"196331939980841592501955883490927403056","length":316},"id":"ASB-A-146204120-40b1a355","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"function":"removeIntentFilterVerificationLPw","file":"services/core/java/com/android/server/pm/Settings.java"}},{"digest":{"line_hashes":["264118836931758125954283572573803010127","326433032253110518531739940786470174713","219659923551403392769998217227045248389","325900801213797669963047367400056887417","155800604526736541573254025039343315656","192261812677334554592312589390205244866","293262121978058261787833029952544652549","282845660632160600681759205837522743679","25166234352786875052014560609298745486","80953044387840405500548537090402369556","318889377058304251353112439711931781678","181430982600409800707622054051063510689","147400036334634475192573293165377657052","211046860622541478070813793462104016489","215797943876766462374968457621174868440","80375910978594053653290245849795100879","210646843283387271531771838191017367912","149842084919919079028493122210888010598","291557663704396958203985429117197699326","117493872143391915409831095164810505879","210970647024931410295177236523325314805","174698552461210856684775395753062246422","33429191035118411534366917743566200952","49187456020208001108632220923493698629","314618327847689935473302389989442447047","107994946601080404975676704987624226327","180673409200142619817153424500825786303","34565374958308376466805691253905556701","269416047883548399308790290224401808537","107095166855769328070845482248093400372","227482134778290752120288869496187240886","61542343164975741539703964766341743724","246549469018278873393650796208846443093","75407180318704451699303769443305508093","53054793821117210221952110828356047199","197664843262346412415538139792148664903","295821626166271120885800868313097159856","121274509070405368737115818648591089097","179315829172841219195344498328752157146","192206002626416032158599747543207090535","312139750069614309397848547726856974753","229385267215885145397433120220389879428","73519461043941355884955739372355829425","201650130457679497910995129018548914032","215876287842768799164880104026318164945","254618002306809919033761368241197292877","44649567123893190534730693147462883727","108587633537507210242609878158511307392","108587633537507210242609878158511307392","178494821436713550777732646357988264284","265246881949291733422523723618475405979","217191336213895964301788383647477394848","127613075783382675013243012598741247516","245306680469718363360832410652426110733","227765785968366363506210579827109508228","15297410026114587335988950035548203828","110337368482779110073420505079673298100","14591869768677363182528261234351010990","249834334977796364864334394640374499373","105574407564597933118502224705420368124","211102656482983019232071924903575088161","217381076304846573350132055861124125491","267792150018829441455785641159235798171","277249755249466199746661873886940716275","114016711042959870436951289693494992662","165037660400858241925375493678645986505","149309809704979821688156061544837721649","285896023519019794960793254047852452846","294632865136576128428334560918916806183","194700500397269472398047717490214932884","296602863134421036676648176043328071788","273163828422111313328163340335062879928","55163421953739323559132731015344193749","298793150901836887491895096327146736429","66248100031718422449084980421967039629","326457855661782435871983852853884265917","129123190254661984605297785119849184266","192127214065335844587338641723603729643","193022216139310384526788255908583369423","267464935015354483181945345499655009287","294214426214184966196046496642079191891","232887382197418244343599629210060651098","213557994465827044703088837977054480492"],"threshold":0.9},"id":"ASB-A-146204120-4feb6796","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"clearIntentFilterVerificationsLPw"},"deprecated":false,"digest":{"function_hash":"31800180613676175781541301830901514705","length":210},"id":"ASB-A-146204120-549c36da"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"line_hashes":["117236449998122482378489528613662842910","62123679491088084521680480460660126036","315357282753765864389471303917781289035","61787160543008412969560837445283352750","292149752351489292765249829896395035801","230293504759269465465351349113033709854","174930005822581304846216872144763199719","68210435867125162183574530208437397747","330615827171345560977847714396387526057","26739473340091808598877893207185964431","149842084919919079028493122210888010598","291557663704396958203985429117197699326","117493872143391915409831095164810505879","116506375665069464983658108951431959346","136234973661608225310211635015760471960","49187456020208001108632220923493698629","190362393880949454829082332934062811288","302731495097116351757053590406394049039","276027039298124600909665452420642267943","316043499094924616781554410873537315583","40444751325520683074304937521277218385","31271898199256285249453581478365960206","34565374958308376466805691253905556701","269416047883548399308790290224401808537","107095166855769328070845482248093400372","227482134778290752120288869496187240886","61542343164975741539703964766341743724","246549469018278873393650796208846443093","75407180318704451699303769443305508093","53054793821117210221952110828356047199","197664843262346412415538139792148664903","295821626166271120885800868313097159856","265246881949291733422523723618475405979","217191336213895964301788383647477394848","127613075783382675013243012598741247516","245306680469718363360832410652426110733","226664461780960403030516407336329810205","224988198914109680633574240836305024451","1783289078958306241788131793121505748","111600325575750976600746555297490550655","209698017879585286399046082095617953945","50643247949963406293748264919303842759","24183621985554548127915308071059735844","81160299712978599916599238651988348447","91607564222855020044072933069550830625","177744812532359921841590688249744488609","3525280260026734687240602467646443416","277957430591901897297170967321802590610","279654696969710733326614924802698102392"],"threshold":0.9},"id":"ASB-A-146204120-6a3ecf6b","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"function":"verifyIntentFiltersIfNeeded","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"function_hash":"301764165693524092359954526175658195401","length":2366},"id":"ASB-A-146204120-76441f6e","signature_type":"Function"},{"id":"ASB-A-146204120-89e26f9a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/Settings.java","function":"removeIntentFilterVerificationLPw"},"deprecated":false,"digest":{"function_hash":"195802744493544785162263287076706547477","length":151}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"file":"services/core/java/com/android/server/pm/Settings.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["167039751007717464862522614955129745790","66635562508651672924856731553257353778","10560240042606312637922794183125385317","234946358831370689905595837797617247960"]},"id":"ASB-A-146204120-8c7dd7ee"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/Settings.java","function":"removeIntentFilterVerificationLPw"},"deprecated":false,"digest":{"function_hash":"208882355131541743126907634307352125110","length":290},"id":"ASB-A-146204120-cf620006"},{"id":"ASB-A-146204120-e0eaf85b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/Settings.java"},"deprecated":false,"digest":{"line_hashes":["175418932502170296339693534698697876039","67879663234356081882138760300529875194","151887146951305473640359693185428690607","224548732831142278292679379185060895755","197004590010532693217166903574232644551","279103089353010811323840296867213595360","60400741226909095772699943319769194474","242382814542505416136484933715904046205","238850718137107194396973212563639083916","229523765212852796485241213863866923761","21553238169409228164672305946484160593","68026351389420363128642621640143576066","168835949918436894506595277729359854568","77697057725220826098646373286247538989"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"receiveVerificationResponse"},"deprecated":false,"digest":{"length":2632,"function_hash":"104561717723669880282695002785091848396"},"id":"ASB-A-146204120-ed93875a"},{"digest":{"length":325,"function_hash":"158459252822871888053381613182246378791"},"id":"ASB-A-146204120-f9a1ef8d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"clearIntentFilterVerificationsLPw"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"],"severity":"High","spl":"2020-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-146204120.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"],"severity":"High","spl":"2020-09-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["175418932502170296339693534698697876039","67879663234356081882138760300529875194","151887146951305473640359693185428690607","224548732831142278292679379185060895755","197004590010532693217166903574232644551","279103089353010811323840296867213595360","60400741226909095772699943319769194474","242382814542505416136484933715904046205","238850718137107194396973212563639083916","229523765212852796485241213863866923761","21553238169409228164672305946484160593","68026351389420363128642621640143576066","168835949918436894506595277729359854568","77697057725220826098646373286247538989"]},"id":"ASB-A-146204120-0b01689a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/Settings.java"}},{"deprecated":false,"digest":{"length":316,"function_hash":"196331939980841592501955883490927403056"},"id":"ASB-A-146204120-1c946824","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"file":"services/core/java/com/android/server/pm/Settings.java","function":"removeIntentFilterVerificationLPw"}},{"target":{"file":"services/core/java/com/android/server/pm/Settings.java"},"deprecated":false,"digest":{"line_hashes":["167039751007717464862522614955129745790","66635562508651672924856731553257353778","10560240042606312637922794183125385317","234946358831370689905595837797617247960"],"threshold":0.9},"id":"ASB-A-146204120-235ac777","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"function":"removeIntentFilterVerificationLPw","file":"services/core/java/com/android/server/pm/Settings.java"},"deprecated":false,"digest":{"length":151,"function_hash":"195802744493544785162263287076706547477"},"id":"ASB-A-146204120-2bff48c0"},{"id":"ASB-A-146204120-3bd7535a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"removePackageDataLIF"},"deprecated":false,"digest":{"function_hash":"70511962063340436536060835738326429423","length":2693}},{"deprecated":false,"digest":{"line_hashes":["117236449998122482378489528613662842910","62123679491088084521680480460660126036","315357282753765864389471303917781289035","61787160543008412969560837445283352750","292149752351489292765249829896395035801","230293504759269465465351349113033709854","174930005822581304846216872144763199719","68210435867125162183574530208437397747","330615827171345560977847714396387526057","26739473340091808598877893207185964431","149842084919919079028493122210888010598","291557663704396958203985429117197699326","117493872143391915409831095164810505879","116506375665069464983658108951431959346","136234973661608225310211635015760471960","49187456020208001108632220923493698629","190362393880949454829082332934062811288","302731495097116351757053590406394049039","276027039298124600909665452420642267943","316043499094924616781554410873537315583","40444751325520683074304937521277218385","31271898199256285249453581478365960206","34565374958308376466805691253905556701","269416047883548399308790290224401808537","107095166855769328070845482248093400372","227482134778290752120288869496187240886","61542343164975741539703964766341743724","246549469018278873393650796208846443093","75407180318704451699303769443305508093","53054793821117210221952110828356047199","197664843262346412415538139792148664903","295821626166271120885800868313097159856","265246881949291733422523723618475405979","217191336213895964301788383647477394848","127613075783382675013243012598741247516","245306680469718363360832410652426110733","226664461780960403030516407336329810205","224988198914109680633574240836305024451","1783289078958306241788131793121505748","111600325575750976600746555297490550655","209698017879585286399046082095617953945","50643247949963406293748264919303842759","24183621985554548127915308071059735844","81160299712978599916599238651988348447","91607564222855020044072933069550830625","177744812532359921841590688249744488609","3525280260026734687240602467646443416","277957430591901897297170967321802590610","279654696969710733326614924802698102392"],"threshold":0.9},"id":"ASB-A-146204120-7e81b697","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"}},{"deprecated":false,"digest":{"length":2022,"function_hash":"52735196852677394348372510882928367616"},"id":"ASB-A-146204120-83a5431c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"function":"verifyIntentFiltersIfNeeded","file":"services/core/java/com/android/server/pm/PackageManagerService.java"}},{"deprecated":false,"digest":{"function_hash":"265040464516340603932698847994932260690","length":461},"id":"ASB-A-146204120-847d2a4d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"function":"needsNetworkVerificationLPr","file":"services/core/java/com/android/server/pm/PackageManagerService.java"}},{"digest":{"function_hash":"31800180613676175781541301830901514705","length":210},"id":"ASB-A-146204120-93cedc1c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"function":"clearIntentFilterVerificationsLPw","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"104561717723669880282695002785091848396","length":2632},"id":"ASB-A-146204120-ce79d92e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"receiveVerificationResponse"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["264118836931758125954283572573803010127","326433032253110518531739940786470174713","219659923551403392769998217227045248389","325900801213797669963047367400056887417","155800604526736541573254025039343315656","192261812677334554592312589390205244866","293262121978058261787833029952544652549","282845660632160600681759205837522743679","25166234352786875052014560609298745486","80953044387840405500548537090402369556","318889377058304251353112439711931781678","181430982600409800707622054051063510689","147400036334634475192573293165377657052","211046860622541478070813793462104016489","215797943876766462374968457621174868440","80375910978594053653290245849795100879","210646843283387271531771838191017367912","149842084919919079028493122210888010598","291557663704396958203985429117197699326","117493872143391915409831095164810505879","210970647024931410295177236523325314805","174698552461210856684775395753062246422","33429191035118411534366917743566200952","49187456020208001108632220923493698629","314618327847689935473302389989442447047","107994946601080404975676704987624226327","180673409200142619817153424500825786303","34565374958308376466805691253905556701","269416047883548399308790290224401808537","107095166855769328070845482248093400372","227482134778290752120288869496187240886","61542343164975741539703964766341743724","246549469018278873393650796208846443093","75407180318704451699303769443305508093","53054793821117210221952110828356047199","197664843262346412415538139792148664903","295821626166271120885800868313097159856","121274509070405368737115818648591089097","179315829172841219195344498328752157146","192206002626416032158599747543207090535","312139750069614309397848547726856974753","229385267215885145397433120220389879428","73519461043941355884955739372355829425","201650130457679497910995129018548914032","215876287842768799164880104026318164945","254618002306809919033761368241197292877","44649567123893190534730693147462883727","108587633537507210242609878158511307392","108587633537507210242609878158511307392","178494821436713550777732646357988264284","265246881949291733422523723618475405979","217191336213895964301788383647477394848","127613075783382675013243012598741247516","245306680469718363360832410652426110733","227765785968366363506210579827109508228","15297410026114587335988950035548203828","110337368482779110073420505079673298100","14591869768677363182528261234351010990","249834334977796364864334394640374499373","105574407564597933118502224705420368124","211102656482983019232071924903575088161","217381076304846573350132055861124125491","267792150018829441455785641159235798171","277249755249466199746661873886940716275","114016711042959870436951289693494992662","165037660400858241925375493678645986505","149309809704979821688156061544837721649","285896023519019794960793254047852452846","294632865136576128428334560918916806183","194700500397269472398047717490214932884","296602863134421036676648176043328071788","273163828422111313328163340335062879928","55163421953739323559132731015344193749","298793150901836887491895096327146736429","66248100031718422449084980421967039629","326457855661782435871983852853884265917","129123190254661984605297785119849184266","192127214065335844587338641723603729643","193022216139310384526788255908583369423","267464935015354483181945345499655009287","294214426214184966196046496642079191891","232887382197418244343599629210060651098","213557994465827044703088837977054480492"]},"id":"ASB-A-146204120-e7ee0902","signature_type":"Line","signature_version":"v1"},{"digest":{"length":2366,"function_hash":"301764165693524092359954526175658195401"},"id":"ASB-A-146204120-f106e22c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"verifyIntentFiltersIfNeeded"},"deprecated":false},{"digest":{"function_hash":"158459252822871888053381613182246378791","length":325},"id":"ASB-A-146204120-f3f044e7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"clearIntentFilterVerificationsLPw"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"208882355131541743126907634307352125110","length":290},"id":"ASB-A-146204120-ff2728c6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/Settings.java","function":"removeIntentFilterVerificationLPw"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-146204120.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-09-01"}]}],"versions":["9"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"line_hashes":["264118836931758125954283572573803010127","326433032253110518531739940786470174713","219659923551403392769998217227045248389","325900801213797669963047367400056887417","155800604526736541573254025039343315656","192261812677334554592312589390205244866","293262121978058261787833029952544652549","282845660632160600681759205837522743679","25166234352786875052014560609298745486","80953044387840405500548537090402369556","318889377058304251353112439711931781678","181430982600409800707622054051063510689","147400036334634475192573293165377657052","211046860622541478070813793462104016489","215797943876766462374968457621174868440","80375910978594053653290245849795100879","210646843283387271531771838191017367912","149842084919919079028493122210888010598","291557663704396958203985429117197699326","117493872143391915409831095164810505879","210970647024931410295177236523325314805","174698552461210856684775395753062246422","33429191035118411534366917743566200952","49187456020208001108632220923493698629","314618327847689935473302389989442447047","107994946601080404975676704987624226327","180673409200142619817153424500825786303","34565374958308376466805691253905556701","269416047883548399308790290224401808537","107095166855769328070845482248093400372","227482134778290752120288869496187240886","61542343164975741539703964766341743724","246549469018278873393650796208846443093","75407180318704451699303769443305508093","53054793821117210221952110828356047199","197664843262346412415538139792148664903","295821626166271120885800868313097159856","121274509070405368737115818648591089097","179315829172841219195344498328752157146","192206002626416032158599747543207090535","312139750069614309397848547726856974753","229385267215885145397433120220389879428","73519461043941355884955739372355829425","201650130457679497910995129018548914032","215876287842768799164880104026318164945","254618002306809919033761368241197292877","44649567123893190534730693147462883727","108587633537507210242609878158511307392","108587633537507210242609878158511307392","178494821436713550777732646357988264284","265246881949291733422523723618475405979","217191336213895964301788383647477394848","127613075783382675013243012598741247516","245306680469718363360832410652426110733","227765785968366363506210579827109508228","15297410026114587335988950035548203828","110337368482779110073420505079673298100","14591869768677363182528261234351010990","249834334977796364864334394640374499373","105574407564597933118502224705420368124","211102656482983019232071924903575088161","217381076304846573350132055861124125491","267792150018829441455785641159235798171","277249755249466199746661873886940716275","114016711042959870436951289693494992662","165037660400858241925375493678645986505","149309809704979821688156061544837721649","285896023519019794960793254047852452846","294632865136576128428334560918916806183","194700500397269472398047717490214932884","296602863134421036676648176043328071788","273163828422111313328163340335062879928","55163421953739323559132731015344193749","298793150901836887491895096327146736429","66248100031718422449084980421967039629","326457855661782435871983852853884265917","129123190254661984605297785119849184266","192127214065335844587338641723603729643","193022216139310384526788255908583369423","267464935015354483181945345499655009287","294214426214184966196046496642079191891","232887382197418244343599629210060651098","213557994465827044703088837977054480492"],"threshold":0.9},"id":"ASB-A-146204120-1bfecc01","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/Settings.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["175418932502170296339693534698697876039","67879663234356081882138760300529875194","151887146951305473640359693185428690607","224548732831142278292679379185060895755","197004590010532693217166903574232644551","279103089353010811323840296867213595360","60400741226909095772699943319769194474","242382814542505416136484933715904046205","238850718137107194396973212563639083916","229523765212852796485241213863866923761","21553238169409228164672305946484160593","68026351389420363128642621640143576066","168835949918436894506595277729359854568","77697057725220826098646373286247538989"]},"id":"ASB-A-146204120-29ec6dcf"},{"deprecated":false,"digest":{"function_hash":"265040464516340603932698847994932260690","length":461},"id":"ASB-A-146204120-31caf0b9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"needsNetworkVerificationLPr"}},{"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"line_hashes":["117236449998122482378489528613662842910","62123679491088084521680480460660126036","315357282753765864389471303917781289035","61787160543008412969560837445283352750","292149752351489292765249829896395035801","230293504759269465465351349113033709854","174930005822581304846216872144763199719","68210435867125162183574530208437397747","330615827171345560977847714396387526057","26739473340091808598877893207185964431","149842084919919079028493122210888010598","291557663704396958203985429117197699326","117493872143391915409831095164810505879","116506375665069464983658108951431959346","136234973661608225310211635015760471960","49187456020208001108632220923493698629","190362393880949454829082332934062811288","302731495097116351757053590406394049039","276027039298124600909665452420642267943","316043499094924616781554410873537315583","40444751325520683074304937521277218385","31271898199256285249453581478365960206","34565374958308376466805691253905556701","269416047883548399308790290224401808537","107095166855769328070845482248093400372","227482134778290752120288869496187240886","61542343164975741539703964766341743724","246549469018278873393650796208846443093","75407180318704451699303769443305508093","53054793821117210221952110828356047199","197664843262346412415538139792148664903","295821626166271120885800868313097159856","265246881949291733422523723618475405979","217191336213895964301788383647477394848","127613075783382675013243012598741247516","245306680469718363360832410652426110733","226664461780960403030516407336329810205","224988198914109680633574240836305024451","1783289078958306241788131793121505748","111600325575750976600746555297490550655","209698017879585286399046082095617953945","50643247949963406293748264919303842759","24183621985554548127915308071059735844","81160299712978599916599238651988348447","91607564222855020044072933069550830625","177744812532359921841590688249744488609","3525280260026734687240602467646443416","277957430591901897297170967321802590610","279654696969710733326614924802698102392"],"threshold":0.9},"id":"ASB-A-146204120-3694f99a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65"},{"deprecated":false,"digest":{"function_hash":"52735196852677394348372510882928367616","length":2022},"id":"ASB-A-146204120-44886d6f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"verifyIntentFiltersIfNeeded"}},{"target":{"file":"services/core/java/com/android/server/pm/Settings.java"},"deprecated":false,"digest":{"line_hashes":["167039751007717464862522614955129745790","66635562508651672924856731553257353778","10560240042606312637922794183125385317","234946358831370689905595837797617247960"],"threshold":0.9},"id":"ASB-A-146204120-44f4a1a7","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"clearIntentFilterVerificationsLPw"},"deprecated":false,"digest":{"function_hash":"31800180613676175781541301830901514705","length":210},"id":"ASB-A-146204120-5daef79f","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"function":"removeIntentFilterVerificationLPw","file":"services/core/java/com/android/server/pm/Settings.java"},"deprecated":false,"digest":{"length":290,"function_hash":"208882355131541743126907634307352125110"},"id":"ASB-A-146204120-61af1766","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"clearIntentFilterVerificationsLPw"},"deprecated":false,"digest":{"length":325,"function_hash":"158459252822871888053381613182246378791"},"id":"ASB-A-146204120-63d40c8c","signature_type":"Function"},{"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"verifyIntentFiltersIfNeeded"},"deprecated":false,"digest":{"function_hash":"301764165693524092359954526175658195401","length":2366},"id":"ASB-A-146204120-66c2ae74","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65"},{"id":"ASB-A-146204120-680a4b55","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"removePackageDataLIF"},"deprecated":false,"digest":{"length":2693,"function_hash":"70511962063340436536060835738326429423"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"file":"services/core/java/com/android/server/pm/Settings.java","function":"removeIntentFilterVerificationLPw"},"deprecated":false,"digest":{"length":316,"function_hash":"196331939980841592501955883490927403056"},"id":"ASB-A-146204120-87d548b3"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"receiveVerificationResponse"},"deprecated":false,"digest":{"function_hash":"104561717723669880282695002785091848396","length":2632},"id":"ASB-A-146204120-9c8376e1","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-146204120-e5b6a68f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/Settings.java","function":"removeIntentFilterVerificationLPw"},"deprecated":false,"digest":{"function_hash":"195802744493544785162263287076706547477","length":151}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"],"severity":"High","spl":"2020-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-146204120.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"length":151,"function_hash":"195802744493544785162263287076706547477"},"id":"ASB-A-146204120-0fd07eac","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/Settings.java","function":"removeIntentFilterVerificationLPw"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"function":"clearIntentFilterVerificationsLPw","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"function_hash":"158459252822871888053381613182246378791","length":325},"id":"ASB-A-146204120-21e48144","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"file":"services/core/java/com/android/server/pm/Settings.java"},"deprecated":false,"digest":{"line_hashes":["167039751007717464862522614955129745790","66635562508651672924856731553257353778","10560240042606312637922794183125385317","234946358831370689905595837797617247960"],"threshold":0.9},"id":"ASB-A-146204120-28aa5309","signature_type":"Line"},{"id":"ASB-A-146204120-2f7362d1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"line_hashes":["117236449998122482378489528613662842910","62123679491088084521680480460660126036","315357282753765864389471303917781289035","61787160543008412969560837445283352750","292149752351489292765249829896395035801","230293504759269465465351349113033709854","174930005822581304846216872144763199719","68210435867125162183574530208437397747","330615827171345560977847714396387526057","26739473340091808598877893207185964431","149842084919919079028493122210888010598","291557663704396958203985429117197699326","117493872143391915409831095164810505879","116506375665069464983658108951431959346","136234973661608225310211635015760471960","49187456020208001108632220923493698629","190362393880949454829082332934062811288","302731495097116351757053590406394049039","276027039298124600909665452420642267943","316043499094924616781554410873537315583","40444751325520683074304937521277218385","31271898199256285249453581478365960206","34565374958308376466805691253905556701","269416047883548399308790290224401808537","107095166855769328070845482248093400372","227482134778290752120288869496187240886","61542343164975741539703964766341743724","246549469018278873393650796208846443093","75407180318704451699303769443305508093","53054793821117210221952110828356047199","197664843262346412415538139792148664903","295821626166271120885800868313097159856","265246881949291733422523723618475405979","217191336213895964301788383647477394848","127613075783382675013243012598741247516","245306680469718363360832410652426110733","226664461780960403030516407336329810205","224988198914109680633574240836305024451","1783289078958306241788131793121505748","111600325575750976600746555297490550655","209698017879585286399046082095617953945","50643247949963406293748264919303842759","24183621985554548127915308071059735844","81160299712978599916599238651988348447","91607564222855020044072933069550830625","177744812532359921841590688249744488609","3525280260026734687240602467646443416","277957430591901897297170967321802590610","279654696969710733326614924802698102392"],"threshold":0.9}},{"id":"ASB-A-146204120-3a620d28","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/Settings.java"},"deprecated":false,"digest":{"line_hashes":["175418932502170296339693534698697876039","67879663234356081882138760300529875194","151887146951305473640359693185428690607","224548732831142278292679379185060895755","197004590010532693217166903574232644551","279103089353010811323840296867213595360","60400741226909095772699943319769194474","242382814542505416136484933715904046205","238850718137107194396973212563639083916","229523765212852796485241213863866923761","21553238169409228164672305946484160593","68026351389420363128642621640143576066","168835949918436894506595277729359854568","77697057725220826098646373286247538989"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"file":"services/core/java/com/android/server/pm/Settings.java","function":"removeIntentFilterVerificationLPw"},"deprecated":false,"digest":{"length":316,"function_hash":"196331939980841592501955883490927403056"},"id":"ASB-A-146204120-49aaed33"},{"deprecated":false,"digest":{"length":210,"function_hash":"31800180613676175781541301830901514705"},"id":"ASB-A-146204120-59a37881","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"function":"clearIntentFilterVerificationsLPw","file":"services/core/java/com/android/server/pm/PackageManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"receiveVerificationResponse"},"deprecated":false,"digest":{"length":2632,"function_hash":"104561717723669880282695002785091848396"},"id":"ASB-A-146204120-6eafdff5","signature_type":"Function","signature_version":"v1"},{"target":{"function":"removeIntentFilterVerificationLPw","file":"services/core/java/com/android/server/pm/Settings.java"},"deprecated":false,"digest":{"function_hash":"208882355131541743126907634307352125110","length":290},"id":"ASB-A-146204120-88b79ef9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"},{"digest":{"function_hash":"301764165693524092359954526175658195401","length":2366},"id":"ASB-A-146204120-898ece1b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"verifyIntentFiltersIfNeeded"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"needsNetworkVerificationLPr"},"deprecated":false,"digest":{"length":461,"function_hash":"265040464516340603932698847994932260690"},"id":"ASB-A-146204120-9f5e1b42"},{"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"line_hashes":["264118836931758125954283572573803010127","326433032253110518531739940786470174713","219659923551403392769998217227045248389","325900801213797669963047367400056887417","155800604526736541573254025039343315656","192261812677334554592312589390205244866","293262121978058261787833029952544652549","282845660632160600681759205837522743679","25166234352786875052014560609298745486","80953044387840405500548537090402369556","318889377058304251353112439711931781678","181430982600409800707622054051063510689","147400036334634475192573293165377657052","211046860622541478070813793462104016489","215797943876766462374968457621174868440","80375910978594053653290245849795100879","210646843283387271531771838191017367912","149842084919919079028493122210888010598","291557663704396958203985429117197699326","117493872143391915409831095164810505879","210970647024931410295177236523325314805","174698552461210856684775395753062246422","33429191035118411534366917743566200952","49187456020208001108632220923493698629","314618327847689935473302389989442447047","107994946601080404975676704987624226327","180673409200142619817153424500825786303","34565374958308376466805691253905556701","269416047883548399308790290224401808537","107095166855769328070845482248093400372","227482134778290752120288869496187240886","61542343164975741539703964766341743724","246549469018278873393650796208846443093","75407180318704451699303769443305508093","53054793821117210221952110828356047199","197664843262346412415538139792148664903","295821626166271120885800868313097159856","121274509070405368737115818648591089097","179315829172841219195344498328752157146","192206002626416032158599747543207090535","312139750069614309397848547726856974753","229385267215885145397433120220389879428","73519461043941355884955739372355829425","201650130457679497910995129018548914032","215876287842768799164880104026318164945","254618002306809919033761368241197292877","44649567123893190534730693147462883727","108587633537507210242609878158511307392","108587633537507210242609878158511307392","178494821436713550777732646357988264284","265246881949291733422523723618475405979","217191336213895964301788383647477394848","127613075783382675013243012598741247516","245306680469718363360832410652426110733","227765785968366363506210579827109508228","15297410026114587335988950035548203828","110337368482779110073420505079673298100","14591869768677363182528261234351010990","249834334977796364864334394640374499373","105574407564597933118502224705420368124","211102656482983019232071924903575088161","217381076304846573350132055861124125491","267792150018829441455785641159235798171","277249755249466199746661873886940716275","114016711042959870436951289693494992662","165037660400858241925375493678645986505","149309809704979821688156061544837721649","285896023519019794960793254047852452846","294632865136576128428334560918916806183","194700500397269472398047717490214932884","296602863134421036676648176043328071788","273163828422111313328163340335062879928","55163421953739323559132731015344193749","298793150901836887491895096327146736429","66248100031718422449084980421967039629","326457855661782435871983852853884265917","129123190254661984605297785119849184266","192127214065335844587338641723603729643","193022216139310384526788255908583369423","267464935015354483181945345499655009287","294214426214184966196046496642079191891","232887382197418244343599629210060651098","213557994465827044703088837977054480492"],"threshold":0.9},"id":"ASB-A-146204120-ae3ad846","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"verifyIntentFiltersIfNeeded"},"deprecated":false,"digest":{"function_hash":"52735196852677394348372510882928367616","length":2022},"id":"ASB-A-146204120-c0f6b75e","signature_type":"Function","signature_version":"v1"},{"target":{"function":"removePackageDataLIF","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"length":2693,"function_hash":"70511962063340436536060835738326429423"},"id":"ASB-A-146204120-f8fb59af","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/010524415762c8d2d1e14d2a22e21fcdc6725f65","https://android.googlesource.com/platform/frameworks/base/+/8640d0c78e8c1375d92b0aad1616a5ea4839fec7"],"severity":"High","spl":"2020-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-146204120.json"}}],"schema_version":"1.9.0"}