{"id":"ASB-A-157748906","details":"In onWnmFrameReceived of PasspointManager.java, there is a missing permission check. This could lead to local information disclosure of location data with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-157748906","CVE-2020-0378"],"modified":"2026-04-17T15:55:28.020024Z","published":"2020-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-10-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37"}],"affected":[{"package":{"name":"platform/frameworks/opt/net/wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2020-10-01"}]}],"versions":["9"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","digest":{"function_hash":"118692437159917888076542559401671551589","length":873},"target":{"function":"onWnmFrameReceived","file":"service/java/com/android/server/wifi/hotspot2/PasspointManager.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37","deprecated":false,"id":"ASB-A-157748906-419fbae5","signature_type":"Function"},{"signature_version":"v1","digest":{"function_hash":"95688670919087288118905486060953796734","length":482},"target":{"function":"onIconResponse","file":"service/java/com/android/server/wifi/hotspot2/PasspointManager.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37","deprecated":false,"id":"ASB-A-157748906-4545a832","signature_type":"Function"},{"signature_version":"v1","digest":{"line_hashes":["85703247052677266342429287815832870131","292070200299419660318108824633728262119","115018985408737932837268647240267075347","337867999390665874454787368945333587976","246954290680121386285332263165632670486","94265423722708727639571042189771951441","10880124798908889045109750769602360172","334725352727580461192947858900574191494","106712558426537259599591369856063971186","237094367391074900981970515721174152062","266807709559256370689466340053702985295","23083332515103345737387937334265383493","72614190358942477933937237427875655290","80292512385685227457099075515775979116","201803155138807441287147138730307482438","218191935641737017662700909027371904672","196100823232953483403742634132018679663","72802408049639201795502134277364744200","177434735461879984994984248179770577141","275077835771183303159974559785422247595","258105107056318445867786070699722185368","132826694883517297373598954230676465802","316094533388768848679571173118469859208","51193481330141136799736485758506914429","333649246581577996052391171887036106453","171345371354684692693553525240169130891","186935049362517796705199890907527820265","99873001559877148788442869911423821953","250135682823416150408058530225690757857","188650156648124932180807773848751702182","325302105395056947206770964000509184755","104367844053993832955306654776432554342","64811209644989030036127027307900975655","122954848206014058745072942287267363412","55242293506119933078103432601236330164","210233369987956945478351747811317707279","116384269367444902060507551188580576236","24530175066186166947489559521194910357","172686392448012739482001726134326715855","307559554523315731177933040584508964901","307654214213703221407934329760663742589","296007869128016521089496005316746009900","52491004088882614359396389821523819947","266918300515128625432538254827629450586","50652484558706740967182762669657078597","270587162565588649173993421865388402697","180139621815247578584574472696903105007","265466894258700336101701085703653135106","92685023393857183252208087673331660175","294567916363889755251885521811940521089","55951099842143349810447710986510944199","101001248860363702129564056140239495355","64811209644989030036127027307900975655","284938614640927021955972400074977378869","141309040549019665991124967108476586467"],"threshold":0.9},"target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointManager.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37","deprecated":false,"id":"ASB-A-157748906-bdec8ffb","signature_type":"Line"}],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37"],"types":["ID"],"spl":"2020-10-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-157748906.json"}},{"package":{"name":"platform/frameworks/opt/net/wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-10-01"}]}],"versions":["10"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","digest":{"function_hash":"95688670919087288118905486060953796734","length":482},"target":{"function":"onIconResponse","file":"service/java/com/android/server/wifi/hotspot2/PasspointManager.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37","deprecated":false,"id":"ASB-A-157748906-3419179e","signature_type":"Function"},{"signature_version":"v1","digest":{"function_hash":"118692437159917888076542559401671551589","length":873},"target":{"function":"onWnmFrameReceived","file":"service/java/com/android/server/wifi/hotspot2/PasspointManager.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37","deprecated":false,"id":"ASB-A-157748906-84592d62","signature_type":"Function"},{"signature_version":"v1","digest":{"line_hashes":["85703247052677266342429287815832870131","292070200299419660318108824633728262119","115018985408737932837268647240267075347","337867999390665874454787368945333587976","246954290680121386285332263165632670486","94265423722708727639571042189771951441","10880124798908889045109750769602360172","334725352727580461192947858900574191494","106712558426537259599591369856063971186","237094367391074900981970515721174152062","266807709559256370689466340053702985295","23083332515103345737387937334265383493","72614190358942477933937237427875655290","80292512385685227457099075515775979116","201803155138807441287147138730307482438","218191935641737017662700909027371904672","196100823232953483403742634132018679663","72802408049639201795502134277364744200","177434735461879984994984248179770577141","275077835771183303159974559785422247595","258105107056318445867786070699722185368","132826694883517297373598954230676465802","316094533388768848679571173118469859208","51193481330141136799736485758506914429","333649246581577996052391171887036106453","171345371354684692693553525240169130891","186935049362517796705199890907527820265","99873001559877148788442869911423821953","250135682823416150408058530225690757857","188650156648124932180807773848751702182","325302105395056947206770964000509184755","104367844053993832955306654776432554342","64811209644989030036127027307900975655","122954848206014058745072942287267363412","55242293506119933078103432601236330164","210233369987956945478351747811317707279","116384269367444902060507551188580576236","24530175066186166947489559521194910357","172686392448012739482001726134326715855","307559554523315731177933040584508964901","307654214213703221407934329760663742589","296007869128016521089496005316746009900","52491004088882614359396389821523819947","266918300515128625432538254827629450586","50652484558706740967182762669657078597","270587162565588649173993421865388402697","180139621815247578584574472696903105007","265466894258700336101701085703653135106","92685023393857183252208087673331660175","294567916363889755251885521811940521089","55951099842143349810447710986510944199","101001248860363702129564056140239495355","64811209644989030036127027307900975655","284938614640927021955972400074977378869","141309040549019665991124967108476586467"],"threshold":0.9},"target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointManager.java"},"source":"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37","deprecated":false,"id":"ASB-A-157748906-fcf71ff5","signature_type":"Line"}],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/6f1aafe2d4b979cf64ab7a5150a021f977cfed37"],"types":["ID"],"spl":"2020-10-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-157748906.json"}}],"schema_version":"1.7.5"}