{"id":"ASB-A-156020795","details":"In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-156020795","CVE-2020-0415"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2020-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-10-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2020-10-01"}]}],"versions":["8.0"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/ScreenshotNotificationsController.java"},"deprecated":false,"digest":{"line_hashes":["260703639061702544792760650067392215970","99804234265787996982667241348123896870","273777703944050620409468836240872473840","330037413657384283842333135878140843715","146021199102543651011662741622792279754","99804234265787996982667241348123896870","273777703944050620409468836240872473840","330037413657384283842333135878140843715"],"threshold":0.9},"id":"ASB-A-156020795-365585a4","signature_type":"Line"},{"target":{"function":"dumpLeak","file":"packages/SystemUI/src/com/android/systemui/util/leak/LeakReporter.java"},"deprecated":false,"digest":{"function_hash":"75287278448601485320146479409757529749","length":1375},"id":"ASB-A-156020795-3802748d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/util/leak/LeakReporter.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["60832484847053455250758457978221528046","104278835598177079271218312983768936967","319980408247711405479066600513064512600","281237811434980838188285528899219439512","223508213789841143463377796968864563876","62036321323309720016785857983514357242"]},"id":"ASB-A-156020795-d7f30eb3"},{"digest":{"function_hash":"32286295508478333239178516867376188475","length":1578},"id":"ASB-A-156020795-f9fee515","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"function":"showScreenshotActionsNotification","file":"packages/SystemUI/src/com/android/systemui/screenshot/ScreenshotNotificationsController.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"],"severity":"High","spl":"2020-10-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-156020795.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2020-10-01"}]}],"versions":["8.1"],"ecosystem_specific":{"severity":"High","spl":"2020-10-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-156020795-1248d861","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/util/leak/LeakReporter.java","function":"dumpLeak"},"deprecated":false,"digest":{"length":1375,"function_hash":"75287278448601485320146479409757529749"}},{"target":{"file":"packages/SystemUI/src/com/android/systemui/util/leak/LeakReporter.java"},"deprecated":false,"digest":{"line_hashes":["60832484847053455250758457978221528046","104278835598177079271218312983768936967","319980408247711405479066600513064512600","281237811434980838188285528899219439512","223508213789841143463377796968864563876","62036321323309720016785857983514357242"],"threshold":0.9},"id":"ASB-A-156020795-40a95129","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"},{"id":"ASB-A-156020795-67f8cf45","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/ScreenshotNotificationsController.java","function":"showScreenshotActionsNotification"},"deprecated":false,"digest":{"function_hash":"32286295508478333239178516867376188475","length":1578}},{"target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/ScreenshotNotificationsController.java"},"deprecated":false,"digest":{"line_hashes":["260703639061702544792760650067392215970","99804234265787996982667241348123896870","273777703944050620409468836240872473840","330037413657384283842333135878140843715","146021199102543651011662741622792279754","99804234265787996982667241348123896870","273777703944050620409468836240872473840","330037413657384283842333135878140843715"],"threshold":0.9},"id":"ASB-A-156020795-7779c321","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-156020795.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-10-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2020-10-01","types":["ID"],"vanir_signatures":[{"digest":{"function_hash":"32286295508478333239178516867376188475","length":1578},"id":"ASB-A-156020795-25966e10","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"function":"showScreenshotActionsNotification","file":"packages/SystemUI/src/com/android/systemui/screenshot/ScreenshotNotificationsController.java"},"deprecated":false},{"digest":{"line_hashes":["260703639061702544792760650067392215970","99804234265787996982667241348123896870","273777703944050620409468836240872473840","330037413657384283842333135878140843715","146021199102543651011662741622792279754","99804234265787996982667241348123896870","273777703944050620409468836240872473840","330037413657384283842333135878140843715"],"threshold":0.9},"id":"ASB-A-156020795-78b19d16","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/ScreenshotNotificationsController.java"},"deprecated":false},{"target":{"file":"packages/SystemUI/src/com/android/systemui/util/leak/LeakReporter.java"},"deprecated":false,"digest":{"line_hashes":["60832484847053455250758457978221528046","104278835598177079271218312983768936967","319980408247711405479066600513064512600","281237811434980838188285528899219439512","223508213789841143463377796968864563876","62036321323309720016785857983514357242"],"threshold":0.9},"id":"ASB-A-156020795-d828dcd4","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"function":"dumpLeak","file":"packages/SystemUI/src/com/android/systemui/util/leak/LeakReporter.java"},"deprecated":false,"digest":{"length":1375,"function_hash":"75287278448601485320146479409757529749"},"id":"ASB-A-156020795-dcb045af","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-156020795.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-10-01"}]}],"versions":["10"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"id":"ASB-A-156020795-5ae646ca","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/ScreenshotNotificationsController.java"},"deprecated":false,"digest":{"line_hashes":["260703639061702544792760650067392215970","99804234265787996982667241348123896870","273777703944050620409468836240872473840","330037413657384283842333135878140843715","146021199102543651011662741622792279754","99804234265787996982667241348123896870","273777703944050620409468836240872473840","330037413657384283842333135878140843715"],"threshold":0.9}},{"id":"ASB-A-156020795-845dec22","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/util/leak/LeakReporter.java","function":"dumpLeak"},"deprecated":false,"digest":{"function_hash":"75287278448601485320146479409757529749","length":1375}},{"deprecated":false,"digest":{"line_hashes":["60832484847053455250758457978221528046","104278835598177079271218312983768936967","319980408247711405479066600513064512600","281237811434980838188285528899219439512","223508213789841143463377796968864563876","62036321323309720016785857983514357242"],"threshold":0.9},"id":"ASB-A-156020795-90975349","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/util/leak/LeakReporter.java"}},{"deprecated":false,"digest":{"function_hash":"32286295508478333239178516867376188475","length":1578},"id":"ASB-A-156020795-af2379b0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/ScreenshotNotificationsController.java","function":"showScreenshotActionsNotification"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"],"severity":"High","spl":"2020-10-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-156020795.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2020-10-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2020-10-01","types":["ID"],"vanir_signatures":[{"target":{"file":"packages/SystemUI/src/com/android/systemui/util/leak/LeakReporter.java","function":"dumpLeak"},"deprecated":false,"digest":{"length":1375,"function_hash":"75287278448601485320146479409757529749"},"id":"ASB-A-156020795-6a4c021c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/ScreenshotNotificationsController.java"},"deprecated":false,"digest":{"line_hashes":["260703639061702544792760650067392215970","99804234265787996982667241348123896870","273777703944050620409468836240872473840","330037413657384283842333135878140843715","146021199102543651011662741622792279754","99804234265787996982667241348123896870","273777703944050620409468836240872473840","330037413657384283842333135878140843715"],"threshold":0.9},"id":"ASB-A-156020795-763d154c","signature_type":"Line"},{"target":{"file":"packages/SystemUI/src/com/android/systemui/util/leak/LeakReporter.java"},"deprecated":false,"digest":{"line_hashes":["60832484847053455250758457978221528046","104278835598177079271218312983768936967","319980408247711405479066600513064512600","281237811434980838188285528899219439512","223508213789841143463377796968864563876","62036321323309720016785857983514357242"],"threshold":0.9},"id":"ASB-A-156020795-bf062836","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f","target":{"file":"packages/SystemUI/src/com/android/systemui/screenshot/ScreenshotNotificationsController.java","function":"showScreenshotActionsNotification"},"deprecated":false,"digest":{"function_hash":"32286295508478333239178516867376188475","length":1578},"id":"ASB-A-156020795-f77d5b77","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a95061ca2d4676bd8083baa7252785566fc3358f"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-156020795.json"}}],"schema_version":"1.9.0"}