{"id":"ASB-A-153993591","details":"In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-153993591","CVE-2020-0399"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2020-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}],"affected":[{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-09-01"}]}],"versions":["8.0"],"ecosystem_specific":{"spl":"2020-09-01","types":["ID"],"vanir_signatures":[{"target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java","function":"addResolutionIntent"},"deprecated":false,"digest":{"function_hash":"124347352249865646556944936559596462054","length":520},"id":"ASB-A-153993591-5f46d6a7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"deprecated":false,"digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"id":"ASB-A-153993591-b1a247c1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-09-01"}]}],"versions":["8.0"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"deprecated":false,"digest":{"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"],"threshold":0.9},"id":"ASB-A-153993591-77c0601b","signature_type":"Line"},{"digest":{"function_hash":"239929725198670433305970540035158012328","length":1554},"id":"ASB-A-153993591-910531fc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java","function":"showNotification"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4","https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"severity":"High","spl":"2020-09-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"severity":"High","spl":"2020-09-01","types":["ID"],"vanir_signatures":[{"target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"]},"id":"ASB-A-153993591-319978f2","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java","function":"addResolutionIntent"},"deprecated":false,"digest":{"length":520,"function_hash":"124347352249865646556944936559596462054"},"id":"ASB-A-153993591-f24e9374","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"],"threshold":0.9},"id":"ASB-A-153993591-7ceae2e0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2","target":{"function":"showNotification","file":"src/com/android/phone/EmergencyCallbackModeService.java"},"deprecated":false,"digest":{"function_hash":"239929725198670433305970540035158012328","length":1554},"id":"ASB-A-153993591-b9ee0d90"}],"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4","https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"severity":"High","spl":"2020-09-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-09-01"}]}],"versions":["9"],"ecosystem_specific":{"severity":"High","spl":"2020-09-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"deprecated":false,"digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"id":"ASB-A-153993591-9ad82ed8","signature_type":"Line","signature_version":"v1"},{"target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java","function":"addResolutionIntent"},"deprecated":false,"digest":{"function_hash":"124347352249865646556944936559596462054","length":520},"id":"ASB-A-153993591-a73ebb1c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}],"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-09-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2020-09-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-153993591-1a42be31","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java","function":"showNotification"},"deprecated":false,"digest":{"function_hash":"239929725198670433305970540035158012328","length":1554}},{"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"]},"id":"ASB-A-153993591-573e3292","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4","https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2020-09-01","types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java","function":"addResolutionIntent"},"deprecated":false,"digest":{"length":520,"function_hash":"124347352249865646556944936559596462054"},"id":"ASB-A-153993591-2aa7e155"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"deprecated":false,"digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"id":"ASB-A-153993591-3f845299","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"]},"id":"ASB-A-153993591-313eb20d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"},{"target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java","function":"showNotification"},"deprecated":false,"digest":{"function_hash":"239929725198670433305970540035158012328","length":1554},"id":"ASB-A-153993591-aa484ca2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}],"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4","https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"severity":"High","spl":"2020-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153993591.json"}}],"schema_version":"1.9.0"}