{"id":"ASB-A-153993591","details":"In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-153993591","CVE-2020-0399"],"modified":"2026-04-22T14:59:17.843400Z","published":"2020-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}],"affected":[{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-09-01"}]}],"versions":["8.0"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"vanir_signatures":[{"signature_version":"v1","deprecated":false,"signature_type":"Function","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java","function":"addResolutionIntent"},"id":"ASB-A-153993591-5f46d6a7","digest":{"length":520,"function_hash":"124347352249865646556944936559596462054"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"id":"ASB-A-153993591-b1a247c1","digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}],"spl":"2020-09-01","types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-09-01"}]}],"versions":["8.0"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4","https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"vanir_signatures":[{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"id":"ASB-A-153993591-77c0601b","digest":{"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"},{"signature_version":"v1","deprecated":false,"signature_type":"Function","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java","function":"showNotification"},"id":"ASB-A-153993591-910531fc","digest":{"length":1554,"function_hash":"239929725198670433305970540035158012328"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}],"spl":"2020-09-01","types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"vanir_signatures":[{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"id":"ASB-A-153993591-319978f2","digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"signature_version":"v1","deprecated":false,"signature_type":"Function","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java","function":"addResolutionIntent"},"id":"ASB-A-153993591-f24e9374","digest":{"length":520,"function_hash":"124347352249865646556944936559596462054"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}],"spl":"2020-09-01","types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4","https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"vanir_signatures":[{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"id":"ASB-A-153993591-7ceae2e0","digest":{"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"},{"signature_version":"v1","deprecated":false,"signature_type":"Function","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java","function":"showNotification"},"id":"ASB-A-153993591-b9ee0d90","digest":{"length":1554,"function_hash":"239929725198670433305970540035158012328"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}],"spl":"2020-09-01","types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-09-01"}]}],"versions":["9"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"vanir_signatures":[{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"id":"ASB-A-153993591-9ad82ed8","digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"signature_version":"v1","deprecated":false,"signature_type":"Function","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java","function":"addResolutionIntent"},"id":"ASB-A-153993591-a73ebb1c","digest":{"length":520,"function_hash":"124347352249865646556944936559596462054"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}],"spl":"2020-09-01","types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-09-01"}]}],"versions":["9"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4","https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"vanir_signatures":[{"signature_version":"v1","deprecated":false,"signature_type":"Function","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java","function":"showNotification"},"id":"ASB-A-153993591-1a42be31","digest":{"length":1554,"function_hash":"239929725198670433305970540035158012328"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"},{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"id":"ASB-A-153993591-573e3292","digest":{"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}],"spl":"2020-09-01","types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"vanir_signatures":[{"signature_version":"v1","deprecated":false,"signature_type":"Function","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java","function":"addResolutionIntent"},"id":"ASB-A-153993591-2aa7e155","digest":{"length":520,"function_hash":"124347352249865646556944936559596462054"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"id":"ASB-A-153993591-3f845299","digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}],"spl":"2020-09-01","types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4","https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"vanir_signatures":[{"signature_version":"v1","deprecated":false,"signature_type":"Line","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"id":"ASB-A-153993591-313eb20d","digest":{"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"},{"signature_version":"v1","deprecated":false,"signature_type":"Function","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java","function":"showNotification"},"id":"ASB-A-153993591-aa484ca2","digest":{"length":1554,"function_hash":"239929725198670433305970540035158012328"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}],"spl":"2020-09-01","types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}}],"schema_version":"1.7.5"}