{"id":"ASB-A-154124307","details":"In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-154124307","CVE-2020-0395"],"modified":"2026-04-17T15:55:28.020024Z","published":"2020-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}],"affected":[{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-09-01"}]}],"versions":["8.0"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"types":["ID"],"spl":"2020-09-01","severity":"High","vanir_signatures":[{"digest":{"length":520,"function_hash":"124347352249865646556944936559596462054"},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-5f46d6a7","signature_type":"Function","target":{"function":"addResolutionIntent","file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-b1a247c1","signature_type":"Line","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154124307.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-09-01"}]}],"versions":["8.0"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"types":["ID"],"spl":"2020-09-01","severity":"High","vanir_signatures":[{"digest":{"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"],"threshold":0.9},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-77c0601b","signature_type":"Line","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"},{"digest":{"length":1554,"function_hash":"239929725198670433305970540035158012328"},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-910531fc","signature_type":"Function","target":{"function":"showNotification","file":"src/com/android/phone/EmergencyCallbackModeService.java"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154124307.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"types":["ID"],"spl":"2020-09-01","severity":"High","vanir_signatures":[{"digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-319978f2","signature_type":"Line","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"digest":{"length":520,"function_hash":"124347352249865646556944936559596462054"},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-f24e9374","signature_type":"Function","target":{"function":"addResolutionIntent","file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154124307.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-09-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"types":["ID"],"spl":"2020-09-01","severity":"High","vanir_signatures":[{"digest":{"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"],"threshold":0.9},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-7ceae2e0","signature_type":"Line","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"},{"digest":{"length":1554,"function_hash":"239929725198670433305970540035158012328"},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-b9ee0d90","signature_type":"Function","target":{"function":"showNotification","file":"src/com/android/phone/EmergencyCallbackModeService.java"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154124307.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-09-01"}]}],"versions":["9"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"types":["ID"],"spl":"2020-09-01","severity":"High","vanir_signatures":[{"digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-9ad82ed8","signature_type":"Line","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"digest":{"length":520,"function_hash":"124347352249865646556944936559596462054"},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-a73ebb1c","signature_type":"Function","target":{"function":"addResolutionIntent","file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154124307.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-09-01"}]}],"versions":["9"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"types":["ID"],"spl":"2020-09-01","severity":"High","vanir_signatures":[{"digest":{"length":1554,"function_hash":"239929725198670433305970540035158012328"},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-1a42be31","signature_type":"Function","target":{"function":"showNotification","file":"src/com/android/phone/EmergencyCallbackModeService.java"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"},{"digest":{"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"],"threshold":0.9},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-573e3292","signature_type":"Line","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154124307.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"],"types":["ID"],"spl":"2020-09-01","severity":"High","vanir_signatures":[{"digest":{"length":520,"function_hash":"124347352249865646556944936559596462054"},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-2aa7e155","signature_type":"Function","target":{"function":"addResolutionIntent","file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"},{"digest":{"line_hashes":["117644871708654916346245945015463275626","223665824716409487639496807541848082315","153896511408108601377244622035927833590","214338118115568385601977212861965221200","252555523724162323221182265734240667994","262626998732534039738096859923668305917","284733846293931103168905718368524179728","295496958192235468506319800338169638268","73099640744412732828548186330436131037","145124376558202810450310734881358587716","227614234266439378251246365778538648135"],"threshold":0.9},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-3f845299","signature_type":"Line","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154124307.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-09-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"],"types":["ID"],"spl":"2020-09-01","severity":"High","vanir_signatures":[{"digest":{"line_hashes":["41947819677962889077519451532663704680","102135948322594920735190946348112074288","220160467030282996760638356047881540303","253889126629877657108515330408653953158","276112923747055330083233450457693907914"],"threshold":0.9},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-313eb20d","signature_type":"Line","target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"},{"digest":{"length":1554,"function_hash":"239929725198670433305970540035158012328"},"signature_version":"v1","deprecated":false,"id":"ASB-A-154124307-aa484ca2","signature_type":"Function","target":{"function":"showNotification","file":"src/com/android/phone/EmergencyCallbackModeService.java"},"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-154124307.json"}}],"schema_version":"1.7.5"}