{"id":"ASB-A-152410253","details":"In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-152410253","CVE-2020-0443"],"modified":"2026-09-11T15:42:03.104094163Z","published":"2020-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/d3a2b5832f6ca9da74cda814ec76aec679b3389a"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11-next:0"},{"fixed":"11-next:2020-11-01"}]}],"versions":["11-next"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/fc8c211b436aa180818780a6ade107ad30835ef8","target":{"function":"LocaleList","file":"core/java/android/os/LocaleList.java"},"deprecated":false,"digest":{"function_hash":"218394951640414420131403036718256549110","length":780},"id":"ASB-A-152410253-12d6dc74","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-152410253-a12b04ad","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fc8c211b436aa180818780a6ade107ad30835ef8","target":{"file":"core/java/android/os/LocaleList.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["238487461557116481160416789943526316578","32027329562363148066235216704948684469","6450490191593189495233696722595877326","73388818347119991988904423319481610072","272986309234537080517993031560764523350","32097239875320529168527908272061092240","318124226491304976564873318912165140082","333584428783147966841085669186502910250","34417344497872019430302121069418403171","195889735690768428855513666674587252252","212146682679397118315602545021072673838","45174680695960703710935086057729628656","305292988939046770344531645153321276853","207146939348857617032754500415336215343","68520971589585554838460114790604608647","268656213761657529005050364040975899650","144999557970145722941669838172869014584","60140273924020988673939475368939194191","259519413668449196367552216458630761983","92217418968860299458545339788500322246","156943549789793866827804431486514372844","187424443712129743225799409001096826496","82879933959107798733564740523379219993"]}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fc8c211b436aa180818780a6ade107ad30835ef8"],"severity":"High","spl":"2020-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-152410253.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-11-01"}]}],"versions":["8.0"],"ecosystem_specific":{"spl":"2020-11-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"218394951640414420131403036718256549110","length":780},"id":"ASB-A-152410253-59a191c6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2cb650f9d0ea3767faf75a084bc9a566b2726234","target":{"function":"LocaleList","file":"core/java/android/os/LocaleList.java"}},{"target":{"file":"core/java/android/os/LocaleList.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["10299455753403115806136687540556132022","32027329562363148066235216704948684469","6450490191593189495233696722595877326","73388818347119991988904423319481610072","272986309234537080517993031560764523350","32097239875320529168527908272061092240","318124226491304976564873318912165140082","333584428783147966841085669186502910250","34417344497872019430302121069418403171","195889735690768428855513666674587252252","212146682679397118315602545021072673838","45174680695960703710935086057729628656","305292988939046770344531645153321276853","207146939348857617032754500415336215343","68520971589585554838460114790604608647","268656213761657529005050364040975899650","144999557970145722941669838172869014584","60140273924020988673939475368939194191","259519413668449196367552216458630761983","92217418968860299458545339788500322246","156943549789793866827804431486514372844","187424443712129743225799409001096826496","82879933959107798733564740523379219993"]},"id":"ASB-A-152410253-c3976b82","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2cb650f9d0ea3767faf75a084bc9a566b2726234"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2cb650f9d0ea3767faf75a084bc9a566b2726234"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-152410253.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-11-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/142ce41bfadbbe984cb42484b98b1dddf4483c91"],"severity":"High","spl":"2020-11-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/142ce41bfadbbe984cb42484b98b1dddf4483c91","target":{"file":"core/java/android/os/LocaleList.java","function":"LocaleList"},"deprecated":false,"digest":{"function_hash":"218394951640414420131403036718256549110","length":780},"id":"ASB-A-152410253-04a40b10","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/142ce41bfadbbe984cb42484b98b1dddf4483c91","target":{"file":"core/java/android/os/LocaleList.java"},"deprecated":false,"digest":{"line_hashes":["10299455753403115806136687540556132022","32027329562363148066235216704948684469","6450490191593189495233696722595877326","73388818347119991988904423319481610072","272986309234537080517993031560764523350","32097239875320529168527908272061092240","318124226491304976564873318912165140082","333584428783147966841085669186502910250","34417344497872019430302121069418403171","195889735690768428855513666674587252252","212146682679397118315602545021072673838","45174680695960703710935086057729628656","305292988939046770344531645153321276853","207146939348857617032754500415336215343","68520971589585554838460114790604608647","268656213761657529005050364040975899650","144999557970145722941669838172869014584","60140273924020988673939475368939194191","259519413668449196367552216458630761983","92217418968860299458545339788500322246","156943549789793866827804431486514372844","187424443712129743225799409001096826496","82879933959107798733564740523379219993"],"threshold":0.9},"id":"ASB-A-152410253-112b2f8e","signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-152410253.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-11-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2020-11-01","types":["DoS"],"vanir_signatures":[{"id":"ASB-A-152410253-452a3a57","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/33ee46389e535565ae6d827438ec1d7faef1368a","target":{"file":"core/java/android/os/LocaleList.java","function":"LocaleList"},"deprecated":false,"digest":{"function_hash":"218394951640414420131403036718256549110","length":780}},{"id":"ASB-A-152410253-bb86e8c4","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/33ee46389e535565ae6d827438ec1d7faef1368a","target":{"file":"core/java/android/os/LocaleList.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["168429144034833769415374479843019930405","14706619227349896405074417952047569956","6450490191593189495233696722595877326","73388818347119991988904423319481610072","272986309234537080517993031560764523350","32097239875320529168527908272061092240","318124226491304976564873318912165140082","333584428783147966841085669186502910250","34417344497872019430302121069418403171","195889735690768428855513666674587252252","212146682679397118315602545021072673838","45174680695960703710935086057729628656","305292988939046770344531645153321276853","207146939348857617032754500415336215343","68520971589585554838460114790604608647","268656213761657529005050364040975899650","144999557970145722941669838172869014584","60140273924020988673939475368939194191","259519413668449196367552216458630761983","92217418968860299458545339788500322246","156943549789793866827804431486514372844","187424443712129743225799409001096826496","82879933959107798733564740523379219993"]}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/33ee46389e535565ae6d827438ec1d7faef1368a"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-152410253.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-11-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3d25b3b9b4913e5bdc25dcbe51179276e4359ba8"],"severity":"High","spl":"2020-11-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"218394951640414420131403036718256549110","length":780},"id":"ASB-A-152410253-c451b198","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3d25b3b9b4913e5bdc25dcbe51179276e4359ba8","target":{"file":"core/java/android/os/LocaleList.java","function":"LocaleList"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/3d25b3b9b4913e5bdc25dcbe51179276e4359ba8","target":{"file":"core/java/android/os/LocaleList.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["127254608364221301017949977070807498925","32027329562363148066235216704948684469","6450490191593189495233696722595877326","73388818347119991988904423319481610072","272986309234537080517993031560764523350","32097239875320529168527908272061092240","318124226491304976564873318912165140082","333584428783147966841085669186502910250","34417344497872019430302121069418403171","195889735690768428855513666674587252252","212146682679397118315602545021072673838","45174680695960703710935086057729628656","305292988939046770344531645153321276853","207146939348857617032754500415336215343","68520971589585554838460114790604608647","268656213761657529005050364040975899650","144999557970145722941669838172869014584","60140273924020988673939475368939194191","259519413668449196367552216458630761983","92217418968860299458545339788500322246","156943549789793866827804431486514372844","187424443712129743225799409001096826496","82879933959107798733564740523379219993"]},"id":"ASB-A-152410253-f14e985d","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-152410253.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2020-11-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"id":"ASB-A-152410253-49e95c7e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7ee68787cca0837f59658d5174e1d586dfe80ad4","target":{"file":"core/java/android/os/LocaleList.java","function":"LocaleList"},"deprecated":false,"digest":{"function_hash":"218394951640414420131403036718256549110","length":780}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7ee68787cca0837f59658d5174e1d586dfe80ad4","target":{"file":"core/java/android/os/LocaleList.java"},"deprecated":false,"digest":{"line_hashes":["238487461557116481160416789943526316578","32027329562363148066235216704948684469","6450490191593189495233696722595877326","73388818347119991988904423319481610072","272986309234537080517993031560764523350","32097239875320529168527908272061092240","318124226491304976564873318912165140082","333584428783147966841085669186502910250","34417344497872019430302121069418403171","195889735690768428855513666674587252252","212146682679397118315602545021072673838","45174680695960703710935086057729628656","305292988939046770344531645153321276853","207146939348857617032754500415336215343","68520971589585554838460114790604608647","268656213761657529005050364040975899650","144999557970145722941669838172869014584","60140273924020988673939475368939194191","259519413668449196367552216458630761983","92217418968860299458545339788500322246","156943549789793866827804431486514372844","187424443712129743225799409001096826496","82879933959107798733564740523379219993"],"threshold":0.9},"id":"ASB-A-152410253-b54d16cb","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7ee68787cca0837f59658d5174e1d586dfe80ad4"],"severity":"High","spl":"2020-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-152410253.json"}}],"schema_version":"1.9.0"}