{"id":"ASB-A-153995334","details":"In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-153995334","CVE-2020-0448"],"modified":"2026-04-17T15:55:28.020024Z","published":"2020-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-11-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Telecomm/+/1938c5be3be49f2652b84a58f1f448d57871e28e"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11-next:0"},{"fixed":"11-next:2020-11-01"}]}],"versions":["11-next"],"ecosystem_specific":{"spl":"2020-11-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/0128b3c58c7a626f6c67c362535fafaf19c7ed89"],"vanir_signatures":[{"digest":{"line_hashes":["297918546549969498009166053935668875305","114971227277915946923989289394217270730","302461811815414600844892144484319742606","190329672184973008833706366886911923765","185762435803955214065650612077329879017"],"threshold":0.9},"source":"https://android.googlesource.com/platform/frameworks/base/+/0128b3c58c7a626f6c67c362535fafaf19c7ed89","signature_type":"Line","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-206adb0d","target":{"file":"telecomm/java/android/telecom/TelecomManager.java"}}],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153995334.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-11-01"}]}],"versions":["8.0"],"ecosystem_specific":{"spl":"2020-11-01","severity":"High","fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1"],"vanir_signatures":[{"digest":{"length":429,"function_hash":"106005899052595636515467162050583809853"},"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1","signature_type":"Function","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-8b026bda","target":{"function":"getPhoneAccountsForPackage","file":"src/com/android/server/telecom/TelecomServiceImpl.java"}},{"digest":{"line_hashes":["65902722321156028442508315471979085629","3761417310122585823727483760011672801","71834074461700890272152205647566934895","229448736767031868483096161748282211362"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1","signature_type":"Line","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-ae9e4fe0","target":{"file":"src/com/android/server/telecom/TelecomServiceImpl.java"}}],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153995334.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-11-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2020-11-01","severity":"High","fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1"],"vanir_signatures":[{"digest":{"line_hashes":["65902722321156028442508315471979085629","3761417310122585823727483760011672801","71834074461700890272152205647566934895","229448736767031868483096161748282211362"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1","signature_type":"Line","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-3c9695d4","target":{"file":"src/com/android/server/telecom/TelecomServiceImpl.java"}},{"digest":{"length":429,"function_hash":"106005899052595636515467162050583809853"},"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1","signature_type":"Function","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-f01e1a85","target":{"function":"getPhoneAccountsForPackage","file":"src/com/android/server/telecom/TelecomServiceImpl.java"}}],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153995334.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-11-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2020-11-01","severity":"High","fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1"],"vanir_signatures":[{"digest":{"line_hashes":["65902722321156028442508315471979085629","3761417310122585823727483760011672801","71834074461700890272152205647566934895","229448736767031868483096161748282211362"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1","signature_type":"Line","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-0915ee48","target":{"file":"src/com/android/server/telecom/TelecomServiceImpl.java"}},{"digest":{"length":429,"function_hash":"106005899052595636515467162050583809853"},"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1","signature_type":"Function","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-ba84f09f","target":{"function":"getPhoneAccountsForPackage","file":"src/com/android/server/telecom/TelecomServiceImpl.java"}}],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153995334.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-11-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2020-11-01","severity":"High","fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1"],"vanir_signatures":[{"digest":{"length":429,"function_hash":"106005899052595636515467162050583809853"},"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1","signature_type":"Function","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-55e17632","target":{"function":"getPhoneAccountsForPackage","file":"src/com/android/server/telecom/TelecomServiceImpl.java"}},{"digest":{"line_hashes":["65902722321156028442508315471979085629","3761417310122585823727483760011672801","71834074461700890272152205647566934895","229448736767031868483096161748282211362"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1","signature_type":"Line","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-6efd4866","target":{"file":"src/com/android/server/telecom/TelecomServiceImpl.java"}}],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153995334.json"}},{"package":{"name":"platform/packages/services/Telecomm","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2020-11-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2020-11-01","severity":"High","fixes":["https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1"],"vanir_signatures":[{"digest":{"line_hashes":["65902722321156028442508315471979085629","3761417310122585823727483760011672801","71834074461700890272152205647566934895","229448736767031868483096161748282211362"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1","signature_type":"Line","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-64ed4535","target":{"file":"src/com/android/server/telecom/TelecomServiceImpl.java"}},{"digest":{"length":429,"function_hash":"106005899052595636515467162050583809853"},"source":"https://android.googlesource.com/platform/packages/services/Telecomm/+/f3f2d7c2dcb558081f02e282078c0c42c5c3e1b1","signature_type":"Function","signature_version":"v1","deprecated":false,"id":"ASB-A-153995334-eb8f6943","target":{"function":"getPhoneAccountsForPackage","file":"src/com/android/server/telecom/TelecomServiceImpl.java"}}],"types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-153995334.json"}}],"schema_version":"1.7.5"}