{"id":"ASB-A-159062405","details":"In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-159062405","CVE-2020-0246"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2020-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2020-10-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/cfaf9f980aa8d3ca51cd8555ca27cd0ef561cb02"}],"affected":[{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2020-10-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2020-10-01","types":["ID"],"vanir_signatures":[{"digest":{"length":350,"function_hash":"41396428793444370782310374423678732437"},"id":"ASB-A-159062405-2fe0fdd8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/cfaf9f980aa8d3ca51cd8555ca27cd0ef561cb02","target":{"function":"getEid","file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/cfaf9f980aa8d3ca51cd8555ca27cd0ef561cb02","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"deprecated":false,"digest":{"line_hashes":["202880964640417269071875354822510104520","110074950923504994998406545493490099609","195342410965500251883366128038446257518","91480201103759401109134463506999484996","122253094858268832040382978947616006491","117898067634301151371792576181906997534","277660230170191873295922942628532302991","295662566354620268868974089659408138537"],"threshold":0.9},"id":"ASB-A-159062405-d7baaf0a","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/cfaf9f980aa8d3ca51cd8555ca27cd0ef561cb02"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-159062405.json"}},{"package":{"name":"platform/frameworks/opt/telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2020-10-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","spl":"2020-10-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/cfaf9f980aa8d3ca51cd8555ca27cd0ef561cb02","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"},"deprecated":false,"digest":{"line_hashes":["202880964640417269071875354822510104520","110074950923504994998406545493490099609","195342410965500251883366128038446257518","91480201103759401109134463506999484996","122253094858268832040382978947616006491","117898067634301151371792576181906997534","277660230170191873295922942628532302991","295662566354620268868974089659408138537"],"threshold":0.9},"id":"ASB-A-159062405-9922b167","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/cfaf9f980aa8d3ca51cd8555ca27cd0ef561cb02","target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java","function":"getEid"},"deprecated":false,"digest":{"function_hash":"41396428793444370782310374423678732437","length":350},"id":"ASB-A-159062405-e41fc361","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/cfaf9f980aa8d3ca51cd8555ca27cd0ef561cb02"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-159062405.json"}}],"schema_version":"1.9.0"}