{"id":"ASB-A-153879813","details":"In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-153879813","CVE-2020-0418"],"modified":"2026-04-22T14:59:17.843400Z","published":"2020-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/5148967312f4d59c456160463bbf120cf58abba2"}],"affected":[{"package":{"name":"platform/packages/apps/PackageInstaller","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11-next:0"},{"fixed":"11-next:2020-11-01"}]}],"versions":["11-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"],"spl":"2020-11-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"src/com/android/packageinstaller/permission/ui/AppPermissionActivity.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["37925561105198431630717745790828790684","219287598882371033529806209618474068027","298763219835494780669175459853844982874","209655467123332919768863699961963627156","40114476709787190422983461599401703534","247353648771061224465061843466230902834","76352909448916489125446734972169222230","181897413462654198924741599906239203466","287533071508793355115780566379354344535","71171353936523782008731091691351139718","56064697485911087042407131353651945496"]},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-09ab3b44","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["315632021902950073329438787307376568481","261916289649077366168711332859027657550","312666148479856056165833947207930468263","195274880116815738658686983971960448149","304364707912588388963284692455970177592","169008971192786616617681705135161989896","261759793356371998045026300995922035658","70910198186196192214606322475080963584","101210631309914025099179111628005223085","78568229840689730595097465199250759032","268690232495153323947015627442530225006","144232311752542731695671407028254779303","258490661488857709760280150728044743506","127998766776323917095608392885645692069","182874484485167770165689928578842610386","119806966164046371368007162585019497215","178202993728459695866790588932346413683","277097042280809402697502777302815815355","235307374399567114252592690014191648561","223410786167399526904708904927790308484","201733335352420824795653814057274395036","100225958177266062541135526911531198889","215471952254974892038785341178838995569","60513016204536019508541297369582452455","211744090877283438027651630079088559126","38727064947208784485551288058278673731","26429971252028574250485110051578280831","209661605481822543987240273134127280467","161972996676335062437501776225066573507","76201354548455460964940916669867334675","175991905828121461065502542088594567986","240219597786972104956372912372852174579","278087052742512136192999115683898963316","75686290068209577439597857272780025855","23402386752393102897487032946079120352"]},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-134ae616","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java","function":"onCreate"},"signature_type":"Function","digest":{"length":63,"function_hash":"97638338110788014445327403786247247325"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-1ca899ac","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java","function":"getPermissions"},"signature_type":"Function","digest":{"length":44,"function_hash":"77508562250161306438632359657420739590"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-48ce92d7","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManageCustomPermissionsFragment.java","function":"updatePermissionsUi"},"signature_type":"Function","digest":{"length":43,"function_hash":"177043306142393696012957388116413227996"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-66f07063","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/AppPermissionActivity.java","function":"onCreate"},"signature_type":"Function","digest":{"length":1612,"function_hash":"265275345214550851928026134854060496519"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-7533ab72","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java","function":"onCreate"},"signature_type":"Function","digest":{"length":420,"function_hash":"137029480368865936152179341224023352446"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-8c518ad5","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["240421885281523220504737685699711607772","133354012011649426688162836859297628638","25028548583884681085987705913039428237","69758756908463145193305519404754820027","275542392431003576653830777602722618246","168908835039623807735102151135103618432","281605528389519518340692967754458886837","94931240325969579977278641106554102332","98679556559382798801416737210061356470","330821720142973818836467177343221116263","261512736778151672603723003679402458732","96656247510146617664616861570430156625","221278426452134745709784690705762199815","248723125539946056433034484526563710787","38643054319455062848419412135673511789","276505574018708649404093798535526013816","168987274960068579136661251256333743730","21413999799850174146843212392083567212","248243721026397703906763323299333520053","30154083117587905605945493552034046400","150158541092085987314545093814444774336","253352426661235099776316685435256914049","132856444806108926521627483339596441515","67226570156706152626174148739501866073","89115162934441166927156231714146684864","317790907848113193071553698658452212246","156616898090401647040918786932045401634","42249644254584273393259405587853602333","29950546620506361516550174430781394968","37359656501852956259305044897301679331","325031903715653389434578030197016753048","107790734375637638403041833638143865738","188315162464040997967792144609126303629","209065030976753715376694121495634329938","126664468216838655130284199776972278678","234453886225269847878285348963026183434","309231848129758958582587949422103313807","161760655162483629612550961537987333475","281318861011048426723543960756078887132","49257161228209947466390173692829946194","206148232200886207759694016645808523312","91615939155803316952164922375811166473","2440771630730657362233805257221300552","307450721061485424692793785229964889838","58933388320043690982168261429130660557","67660034922338739407562148616264764771","15032390110756356597189892254947851697","191197004601953152390210658693312256515","70556117699155999567490026638785557847","30550012090436760585487627536411960023","157891645500743814206343216225000712175","236625591762049778969221982855620946523","55987373683958908957739053327409640092","72284964350901152879245029171661512011","269662719625918520261262134303043136905","231131478662582047306267489594937787393","231197660515699879566363531401410138648","156017262202790837782151132751556589191","214786656202815865377903246378114347517","63611131708361068021078992448707462127","269078685590062059480691661441620337093","99260633492693603214009222294315847351","273519930856175810104219443053804647120","199326235507753559172400817120390676364","11995834029232317693757157597574476796","161347243583608689717915535235880491817","7261633179225423013425236374354277522","183663134470502461380912674462487810956","146224542669151959093025228705316451319","178645576261877285419209672062826544963","320800175989783525817083741037613574991","3909593436085849150221466120503982378","168583469155591975393374374793447944927","234985698718584228430379092668016110384","113885355849063439600296448097371970809","165067328281243776711567823522485275418","69915225373839479242231542521371760173"]},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-91648bda","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/utils/Utils.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["110099095951763546534456953554164949511","192661012282718645500055210439664582322","108409893385006154114697267565505121947","5594895317219537006712694639670392148","56973588922552945113402326847348679294","97980882823056707073981587727983692870","4439615171372414052146478269376545725","61418336610958516805053548442293889981","146031582152571818741982535435403937867","220830402357624645707541772088021142512","64770946434387703184095910757083661301"]},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-945a761b","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java","function":"updatePermissionsUi"},"signature_type":"Function","digest":{"length":1224,"function_hash":"227845937029046851892533576030166535850"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-96a3d553","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManageCustomPermissionsFragment.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["268161710305744900132231279765458430802","66779987153428475293412003723736464654","287047369144279941626281801633306636001","26102362043560212234854302899996703792","337482907000638804251220540090491886041","53267559892298747375929259396119512255","75844506737463162174135050609710425133","287523481456116284029263113434566365612","109193520002395164497285531273961489193","235307374399567114252592690014191648561","221709491476990488272978692603337461265","46899209564565260189249461678550389599","190413120792584766526414646190547651925"]},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-c7adc430","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326","signature_version":"v1","match_only_versions":["11-next"],"signature_type":"Function","digest":{"length":37,"function_hash":"208972022311035733844886350694903749572"},"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java","function":"onPermissionGroupsChanged"},"id":"ASB-A-153879813-c96a1676"},{"target":{"file":"src/com/android/packageinstaller/permission/utils/Utils.java","function":"getPermissionInfosForGroup"},"signature_type":"Function","digest":{"length":211,"function_hash":"266955580306784250954883025052735837438"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-ceecbae7","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java","function":"updatePermissionsUi"},"signature_type":"Function","digest":{"length":20,"function_hash":"304993889737481510896831156289748759116"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-d042f902","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java","function":"updatePermissionsUi"},"signature_type":"Function","digest":{"length":1176,"function_hash":"303283544610584327529046130986039057895"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-eacff4ba","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"},{"target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java","function":"onPreferenceClick"},"signature_type":"Function","digest":{"length":525,"function_hash":"142374556800398351345354105549699687048"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-fdb50305","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153879813.json"}},{"package":{"name":"platform/packages/apps/PackageInstaller","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-11-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a"],"spl":"2020-11-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a","signature_version":"v1","match_only_versions":["10"],"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["234313598412056486043284828466060306736","21923750258978695531762103156272468378","6124665663430185512169264032751165363"]},"target":{"file":"src/com/android/packageinstaller/permission/ui/GrantPermissionsActivity.java"},"id":"ASB-A-153879813-2a0f26a8"},{"target":{"file":"src/com/android/packageinstaller/permission/utils/Utils.java","function":"getPermissionInfosForGroup"},"signature_type":"Function","digest":{"length":211,"function_hash":"266955580306784250954883025052735837438"},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-6848562a","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a"},{"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a","signature_version":"v1","match_only_versions":["10"],"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["306958079687056447884669764837349335261","248415811608635560014478564784839317575","39397916374352069445815716002098561740","283162938228251623632314616422175742691","47434107548427479256198968945616336465","201646817754642558195316124291070889862","110959809400831136447195181045651190208","224724940023597329410643627561444504074","246941056700526996886870170761768140662","10973729175679088721493329227948590012","68827460266646834950380429093531413092"]},"target":{"file":"src/com/android/packageinstaller/permission/utils/SafetyNetLogger.java"},"id":"ASB-A-153879813-9db935c7"},{"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a","signature_version":"v1","match_only_versions":["10"],"signature_type":"Function","digest":{"length":3441,"function_hash":"155269418000446953758025949038387156254"},"target":{"file":"src/com/android/packageinstaller/permission/ui/GrantPermissionsActivity.java","function":"onCreate"},"id":"ASB-A-153879813-c4c3bef7"},{"target":{"file":"src/com/android/packageinstaller/permission/utils/Utils.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["327884605714745277504937997217095596897","230459611331252932704968786228486782408","4439615171372414052146478269376545725","61418336610958516805053548442293889981"]},"deprecated":false,"signature_version":"v1","id":"ASB-A-153879813-e0e5551c","source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a"}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153879813.json"}}],"schema_version":"1.7.5"}