{"id":"ASB-A-201667614","details":"In multiple locations of MediaProvider.java, there is a possible way to get read/write access to other applications’ dedicated, app-specific directory within external storage due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-201667614","CVE-2021-39795"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bb4ec053ea16931e827f30c7b697cb35185a32be"}],"affected":[{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2022-12-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2022-12-01","types":["EoP"],"vanir_signatures":[{"target":{"function":"ensureFileColumns","file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"function_hash":"238681272684009509383892680196642260979","length":8745},"id":"ASB-A-201667614-072f7191","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"updateInternal"},"deprecated":false,"digest":{"function_hash":"55922196151606136305071815842798393970","length":10040},"id":"ASB-A-201667614-2b284275"},{"target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"extractPathOwnerPackageName"},"deprecated":false,"digest":{"function_hash":"251402470808749008164339335217852146753","length":223},"id":"ASB-A-201667614-32dc88ef","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d"},{"id":"ASB-A-201667614-3f2697c9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d","target":{"file":"src/com/android/providers/media/util/PermissionUtils.java"},"deprecated":false,"digest":{"line_hashes":["40247249623713749474410405883757770596","144027290734087633198927767430221278844","170274567414164237222669859121030355046","196898841004659287838550322794180386037","335371926614206587632036346733358511741","264655383602886545954307294114886718442","12276096629291540471079989167559476498","301410199096718789459479207902051532937","233219412961679289816736886436377987034"],"threshold":0.9}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["152568169090691484226729192467133202422","154828587764305331725276644817766806839","34670544298078652802877997313666671568","194452766113564198757105252971180352761","169209056988517876143400226951660716308","2217923254148000743702341213546210096","139308651869404623383043968546664871510","151620959614470802133835928987946490891","241192064302170081027962000632153555791","272042624386267939551800973679424420896","67016657172376363136643347182872579037","116271456339711922632708797759889762148","259689705919500848733661263264770076238","111451870466154766697415397757684466980","128112815894408821646148036948963920175","168567070325589414999088676482220455184","13484918867230189051472578681231415252","25045084646583255037188728037128435950","58791666578357728470507368996142945929","141314279896525631411536076799068072924","107337934385098130526106849872909580471","316335424435118614043147239494655930900","325390957140957071938411876682230776780","267512788186167861476631922890987391574","288297358822084163379766481892345001841","302425542002261694847505035487952325336","253086247065714229568902888009774442712","30584587213142902972153208626010345669","13809216971812909067401431868069979545","154512098687775306750384408648361504255","18567738330659414243202969302276952282","336886396416830182861626467226563893503","236455967876322173453664027728001258555","181792260954261579016161356779428902101"]},"id":"ASB-A-201667614-6649fc37","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d","target":{"file":"src/com/android/providers/media/util/FileUtils.java"}},{"target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"line_hashes":["204290306502838639350211547393547247552","309845117266323894631003027945791268741","119360172874582609819956775866530162868","234618258303052702272539323629322331210","41071518793217538971511117624865296582"],"threshold":0.9},"id":"ASB-A-201667614-8bf8f201","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/eff3f473762f1cb53483aa2280d005974299e2ef"},{"target":{"file":"src/com/android/providers/media/LocalCallingIdentity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["330061013841921927404439880310134645666","279035243211235578978773495290889257717","139805934799104702474478996198724934983","204045983957087694251293698509675488250","51339408158740087838647925056850785066","184579359193662142216770856581700719745","261385049563959465991555017779246548927","114777177052799597305725342279822042751","158256496404397732468800988085537619906","155730592654275160527152088561567819709","98151776834612072365060031632019744651","306918490912684717323637554405647855681","261172514298718509221687851399192841872","128265093616841785292956062382773925080","314515909996417718359378857662812287379"]},"id":"ASB-A-201667614-8d1fdd6a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d"},{"target":{"file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["299391461899678919340206977286699020701","232454313650901851211551648154040281140","125911117328207118970251635780204918352","337212658015156125924577486032578087025","264936244901107877761119424033898341960","203316991044731824910842329847763608871","177512122098981387961925517338625601161","65406077481842752029116137954123016985","122938892040161352096536151944497956311","301639778519867200694476919590881974664","277705252916818474873032517868764228201","9793782608533454780627219923948425473","99272660022297428327352778699317120559","70427129919581368163127601314162188733","208462730969786566763800476852323805786","176229831433023362504096317508907380806","13928687831790284161221191873039682545","163674429060795910141452786603709691676","195607717996301261500324087296171360761","308243660435946972706387900791982949439","179029079728252097893462326862774827739","132553652111937574765774024266027960497","152160482717337810014413000016524862220","296239268926860717848294862331152778546","40234026051336599915450110385641433801","49355162923256046976469018364956487076","70864287080050424271793023931816100205","323879024334338600775464318019027999485","178375754611835822996638729296478241621","55215906507301240652662487202220957850","58971753279519125877003992536179184902","251722274166326571608249711641793800642","266379810312609098012081933904867128840","159863572261163587028852460888872272658","42118270509841749136386277483633476128","66123719269734070237200179343020553072","171588637386397515509351370465317360225","192652305326336604983534351473504759127","139693577164498500866551585285028205958","140737702256961425681242103390462915330","242261570103900428534540469207446465034","191796074807589506785838097526846288167","50993171120317133853768135536204200826","298411779657066655246762035836590638859","82151568294862698115263759411918599548","104606064637402422255735151515742315438","332442903884402718949226678217127246067","339333955453560526507796255168618926683","295460624446162593663867317702211008498","168576390230546003140243983006368727549","307188431284420561787543462900516672228","309211443699351551154060806711929475102","194506212081823158101462700134801946728","112670671899635840355320066458871937814","125554003740724239396191628727381449","215121854707857326046061738043089652592","282178597067938571800473646182433391732","142049379116946213939204728511029948550","201102916420949544818113249440022098801","167161956976860600069795841398745676500","48832248985754763669786074792862649622","128573352913584951460806098027381460109","277278893339302183247431936053771076017","75347817492032347698373538538646216128","44378159891804183672545247462310660325","280977422154301851785168274658395874054","137249220736062192195852270769718834709","97263371583658178395925608642034711930","56302892648489863222300675777566093282","190021809855510456159409601021600392726"]},"id":"ASB-A-201667614-96983d0f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"onCreate"},"deprecated":false,"digest":{"function_hash":"311321614416423727101236189346517707422","length":2389},"id":"ASB-A-201667614-c05cecf1","signature_type":"Function"},{"target":{"function":"hasPermissionInternal","file":"src/com/android/providers/media/LocalCallingIdentity.java"},"deprecated":false,"digest":{"function_hash":"231249783640665264810135461747185926337","length":1473},"id":"ASB-A-201667614-e085acdc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d"},{"target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"isDataOrObbPath"},"deprecated":false,"digest":{"function_hash":"335301336029234532034592775896931644392","length":164},"id":"ASB-A-201667614-e8347d8a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d"}],"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d","https://android.googlesource.com/platform/packages/providers/MediaProvider/+/eff3f473762f1cb53483aa2280d005974299e2ef"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-201667614.json"}},{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-12-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"id":"ASB-A-201667614-10209dd9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isCallingIdentityExternalStorageProvider"},"deprecated":false,"digest":{"function_hash":"297293203924818324002893331432978950366","length":83}},{"target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"isDataOrObbPath"},"deprecated":false,"digest":{"function_hash":"335301336029234532034592775896931644392","length":164},"id":"ASB-A-201667614-28b06488","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"extractPathOwnerPackageName"},"deprecated":false,"digest":{"length":223,"function_hash":"251402470808749008164339335217852146753"},"id":"ASB-A-201667614-4e20f436","signature_type":"Function"},{"id":"ASB-A-201667614-4eae98b4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"function":"isObbOrChildPath","file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"function_hash":"313127495243080436215856613266458326861","length":165}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"line_hashes":["236717934069039143513944692050967782518","177231989965431248230433242515756830985","48084694514666216991863027566063787842","24597347580785972387017570648949344501","82590222942452024723401538768858218797","335325793106875720725709381344293129082","62962534448535555044625104955818939201","87555556292832071262321424327704855087","194708978014298019962881607360076158603","54111726926367223753618623529403734961","146307438629499210115969980779094215130","157049492347174593816450239977536938506","6538419491974432453348462488563490013","145664491038855867584246801884233307249","162375889599558108169710407530435316931","2217923254148000743702341213546210096","139308651869404623383043968546664871510","151620959614470802133835928987946490891","241192064302170081027962000632153555791","272042624386267939551800973679424420896","67016657172376363136643347182872579037","116271456339711922632708797759889762148","259689705919500848733661263264770076238","111451870466154766697415397757684466980","128112815894408821646148036948963920175","168567070325589414999088676482220455184","13484918867230189051472578681231415252","25045084646583255037188728037128435950","58791666578357728470507368996142945929","141314279896525631411536076799068072924","107337934385098130526106849872909580471","316335424435118614043147239494655930900","325390957140957071938411876682230776780","267512788186167861476631922890987391574","288297358822084163379766481892345001841","302425542002261694847505035487952325336","253086247065714229568902888009774442712","30584587213142902972153208626010345669","86068286971847835986773778703104905931","130180844030132176467252022446011864277","36210907196803157140823294611057953412","167803830410390491718526846786717005079","18567738330659414243202969302276952282","336886396416830182861626467226563893503","236455967876322173453664027728001258555","254632733345791973162068198796462295829","51823682839670840672415785132628897533","13221641704164253845794790806991201079","43754136076656795816877613835383556447","200374670571860574494305018877906704473","176041195732111323839694349726333063997","27338847599432817215746715644794268617","240150190257677923672568230186419392973","112398314515882725433351362832838861326","16447428364241065113991019251267328704"],"threshold":0.9},"id":"ASB-A-201667614-7ff84ea3","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"137853831715424200553488584344362434173","length":112},"id":"ASB-A-201667614-85e1fa9e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isCallingIdentityMtp"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bb4ec053ea16931e827f30c7b697cb35185a32be","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"line_hashes":["227082451382423078953520414071533952810","22613576191464637590775937452726305821","156042098569606700548283666622904837208","215794511505920084906259401026091949579","323795208999802954841461095209522292719","114219867295483757930129871934884625336","137383048737320772824913646054177780410"],"threshold":0.9},"id":"ASB-A-201667614-995f6f75"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"assertPrivatePathNotInValues"},"deprecated":false,"digest":{"function_hash":"4294939936698086743065293179125264061","length":816},"id":"ASB-A-201667614-a1d30e08"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isCallingIdentityDownloadProvider"},"deprecated":false,"digest":{"length":77,"function_hash":"258362969100274857793919268685160573592"},"id":"ASB-A-201667614-a28713c9","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isUidAllowedAccessToDataOrObbPathForFuse"},"deprecated":false,"digest":{"function_hash":"95494972414533092441636999490450228138","length":271},"id":"ASB-A-201667614-a559f9f3","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-201667614-b8ebd8e7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isUidAllowedSpecialPrivatePathAccess"},"deprecated":false,"digest":{"length":376,"function_hash":"8321995632742293194363705151469332717"}},{"deprecated":false,"digest":{"line_hashes":["114084976581220804341334582504897742804","174373154285155072241523552359252331075","300992803437122836070384257235890071968","9793782608533454780627219923948425473","99272660022297428327352778699317120559","70427129919581368163127601314162188733","259909820617150051722809354499057372935","136973990291562542058924378792467316936","311824766972067554774614541581034234709","179699092130452837921161286762514185437","123466622052181077513120375594627674916","100988109938771217952486786590536391954","49204009068460619016049015852359172001","187339036843000036958452122303669290982","310232914908502451399756897635674243405","67648006478787719664908315798040875820","115062421658022675749693953867013858556","183291289263040540015593565690014073187","234779277991134578381165600404066431533","195707829298633532852611070367350979296","139693577164498500866551585285028205958","140737702256961425681242103390462915330","242261570103900428534540469207446465034","191796074807589506785838097526846288167","332442903884402718949226678217127246067","339333955453560526507796255168618926683","295460624446162593663867317702211008498","168576390230546003140243983006368727549","307188431284420561787543462900516672228","48705314605896090401227540607779761998","295721108576129250391114123988192086840","174027267995990423789824625277347597274","254074972856976548638389108236625428872","264401508927332093679895566831134138101","82150690642267993772371953959676931195","289372983150233340903846335879769801192","73202547743085761200946431316211736680","41605841195673855235997273354028679591","135837099050508610766238237856132414676","203342445627061955291491048767458923337","112482754744893855938603296495538379604","109227419116717578311215444919947070875","214599317101670275654395811799085166846","162162967668151717555648954452451540807","173755431879031289523739394597563230468","109402149507459275511097645303291244066","310856937413429908373368829299324517068","169871327454610881851808833402759055356","209236645354219586020693813861842944778","9020928934666820675605163638261335872","183309054234036924723114572105094218325","153055136395407589392801252478499098021","130837178589665409972229557949586978181","136864531108809626906444177904777987058","307751875159233340765190279109667153148","25597108129924941558002957831905309214","1342824683214414970390721498992884630","269881229432883965942011191516416005631","92954662426343925547626092904094112356","92477676094792669277335264507110207020","55063093571945704296068223891419449487","238329549334136682791578118212892898955","326023176507498196279576752654234672666","207332691013481441890902753678447906364","287358166042486738965659079252615988706","97889755441130331004520791798331627719","184489921856433884381592495864240065389","296389528915496905298240149661446179897","325719368695532143747114105677500774980","234446318027030780594538058817868899307","117504750505434063580668129150064055511","124898880952547615347580121064582398121","182505216322595849248887157698484457510","206820175676443098145579379188530016459","116017931996396925484868356424784307427","297745224029927563949845937644768878930","225343488890514688939194474557386070522","172229735532210089994471785466909935187","187998045020412671173774898208700241223","175997778560400471126944906848619150767","144972991188601817510101003754725746498","338681959307215613114332176169645319973","117033183906687735066096554980127172909","278128598310937795653278846412455945474","166879958871339804567555760572776983403","120963809190404213349299065909692543459","216790294012380003537557303316724968826","131150868638278027921439736541968804689","249495304898942033896857770614199679442","226549758348081416692860462691351302638","92477676094792669277335264507110207020","12735464951147717773683761386789966533","315994622056502690583973084896738798740","239635117775665262428407749568148295706","41950407448955977717188478906258219444","247220718631425995216564756924211628894","62223910636610670334176787785670726438","327757359698077852315051660580666431372","101368120860715626523220606557679191040","130600917130787248451137701588389390812"],"threshold":0.9},"id":"ASB-A-201667614-b98bbd65","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"file":"src/com/android/providers/media/MediaProvider.java"}},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","target":{"function":"isCallingIdentityAllowedInstallerAccess","file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"function_hash":"216120437759284472245831217526185285615","length":393},"id":"ASB-A-201667614-ed7ae572","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063","https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bb4ec053ea16931e827f30c7b697cb35185a32be"],"severity":"High","spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-201667614.json"}},{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-12-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isCallingIdentityDownloadProvider"},"deprecated":false,"digest":{"function_hash":"258362969100274857793919268685160573592","length":77},"id":"ASB-A-201667614-06ae7d2b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f"},{"target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isCallingIdentityMtp"},"deprecated":false,"digest":{"function_hash":"137853831715424200553488584344362434173","length":112},"id":"ASB-A-201667614-0826a611","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f"},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"line_hashes":["236717934069039143513944692050967782518","177231989965431248230433242515756830985","48084694514666216991863027566063787842","24597347580785972387017570648949344501","82590222942452024723401538768858218797","335325793106875720725709381344293129082","62962534448535555044625104955818939201","87555556292832071262321424327704855087","194708978014298019962881607360076158603","54111726926367223753618623529403734961","146307438629499210115969980779094215130","157049492347174593816450239977536938506","6538419491974432453348462488563490013","145664491038855867584246801884233307249","162375889599558108169710407530435316931","2217923254148000743702341213546210096","139308651869404623383043968546664871510","151620959614470802133835928987946490891","241192064302170081027962000632153555791","272042624386267939551800973679424420896","67016657172376363136643347182872579037","116271456339711922632708797759889762148","259689705919500848733661263264770076238","111451870466154766697415397757684466980","128112815894408821646148036948963920175","168567070325589414999088676482220455184","13484918867230189051472578681231415252","25045084646583255037188728037128435950","58791666578357728470507368996142945929","141314279896525631411536076799068072924","107337934385098130526106849872909580471","316335424435118614043147239494655930900","325390957140957071938411876682230776780","267512788186167861476631922890987391574","288297358822084163379766481892345001841","302425542002261694847505035487952325336","253086247065714229568902888009774442712","30584587213142902972153208626010345669","86068286971847835986773778703104905931","130180844030132176467252022446011864277","36210907196803157140823294611057953412","167803830410390491718526846786717005079","18567738330659414243202969302276952282","336886396416830182861626467226563893503","236455967876322173453664027728001258555","254632733345791973162068198796462295829","51823682839670840672415785132628897533","13221641704164253845794790806991201079","43754136076656795816877613835383556447","200374670571860574494305018877906704473","176041195732111323839694349726333063997","27338847599432817215746715644794268617","240150190257677923672568230186419392973","112398314515882725433351362832838861326","16447428364241065113991019251267328704"],"threshold":0.9},"id":"ASB-A-201667614-0bb1c098","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"216120437759284472245831217526185285615","length":393},"id":"ASB-A-201667614-0c73db3d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isCallingIdentityAllowedInstallerAccess"},"deprecated":false},{"id":"ASB-A-201667614-35864144","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","target":{"function":"assertPrivatePathNotInValues","file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"function_hash":"4294939936698086743065293179125264061","length":816}},{"id":"ASB-A-201667614-661ccbfa","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","target":{"function":"isCallingIdentityExternalStorageProvider","file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"length":83,"function_hash":"297293203924818324002893331432978950366"}},{"deprecated":false,"digest":{"length":164,"function_hash":"335301336029234532034592775896931644392"},"id":"ASB-A-201667614-66ce116d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","target":{"function":"isDataOrObbPath","file":"src/com/android/providers/media/util/FileUtils.java"}},{"deprecated":false,"digest":{"length":376,"function_hash":"8321995632742293194363705151469332717"},"id":"ASB-A-201667614-804b103b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isUidAllowedSpecialPrivatePathAccess"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","target":{"file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"line_hashes":["114084976581220804341334582504897742804","174373154285155072241523552359252331075","300992803437122836070384257235890071968","9793782608533454780627219923948425473","99272660022297428327352778699317120559","70427129919581368163127601314162188733","259909820617150051722809354499057372935","136973990291562542058924378792467316936","311824766972067554774614541581034234709","179699092130452837921161286762514185437","123466622052181077513120375594627674916","100988109938771217952486786590536391954","49204009068460619016049015852359172001","187339036843000036958452122303669290982","310232914908502451399756897635674243405","67648006478787719664908315798040875820","115062421658022675749693953867013858556","183291289263040540015593565690014073187","234779277991134578381165600404066431533","195707829298633532852611070367350979296","139693577164498500866551585285028205958","140737702256961425681242103390462915330","242261570103900428534540469207446465034","191796074807589506785838097526846288167","332442903884402718949226678217127246067","339333955453560526507796255168618926683","295460624446162593663867317702211008498","168576390230546003140243983006368727549","307188431284420561787543462900516672228","48705314605896090401227540607779761998","295721108576129250391114123988192086840","174027267995990423789824625277347597274","254074972856976548638389108236625428872","264401508927332093679895566831134138101","82150690642267993772371953959676931195","289372983150233340903846335879769801192","73202547743085761200946431316211736680","41605841195673855235997273354028679591","135837099050508610766238237856132414676","203342445627061955291491048767458923337","112482754744893855938603296495538379604","109227419116717578311215444919947070875","214599317101670275654395811799085166846","162162967668151717555648954452451540807","173755431879031289523739394597563230468","109402149507459275511097645303291244066","310856937413429908373368829299324517068","169871327454610881851808833402759055356","209236645354219586020693813861842944778","9020928934666820675605163638261335872","183309054234036924723114572105094218325","153055136395407589392801252478499098021","130837178589665409972229557949586978181","136864531108809626906444177904777987058","307751875159233340765190279109667153148","25597108129924941558002957831905309214","1342824683214414970390721498992884630","269881229432883965942011191516416005631","92954662426343925547626092904094112356","92477676094792669277335264507110207020","55063093571945704296068223891419449487","238329549334136682791578118212892898955","326023176507498196279576752654234672666","207332691013481441890902753678447906364","287358166042486738965659079252615988706","97889755441130331004520791798331627719","184489921856433884381592495864240065389","296389528915496905298240149661446179897","325719368695532143747114105677500774980","234446318027030780594538058817868899307","117504750505434063580668129150064055511","124898880952547615347580121064582398121","182505216322595849248887157698484457510","206820175676443098145579379188530016459","116017931996396925484868356424784307427","297745224029927563949845937644768878930","225343488890514688939194474557386070522","172229735532210089994471785466909935187","187998045020412671173774898208700241223","175997778560400471126944906848619150767","144972991188601817510101003754725746498","338681959307215613114332176169645319973","117033183906687735066096554980127172909","278128598310937795653278846412455945474","166879958871339804567555760572776983403","120963809190404213349299065909692543459","216790294012380003537557303316724968826","131150868638278027921439736541968804689","249495304898942033896857770614199679442","226549758348081416692860462691351302638","92477676094792669277335264507110207020","12735464951147717773683761386789966533","315994622056502690583973084896738798740","239635117775665262428407749568148295706","41950407448955977717188478906258219444","247220718631425995216564756924211628894","62223910636610670334176787785670726438","327757359698077852315051660580666431372","101368120860715626523220606557679191040","130600917130787248451137701588389390812"],"threshold":0.9},"id":"ASB-A-201667614-8f8d2e01","signature_type":"Line"},{"id":"ASB-A-201667614-d22b9785","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isUidAllowedAccessToDataOrObbPathForFuse"},"deprecated":false,"digest":{"function_hash":"95494972414533092441636999490450228138","length":271}},{"digest":{"length":165,"function_hash":"313127495243080436215856613266458326861"},"id":"ASB-A-201667614-f034ee25","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"isObbOrChildPath"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"extractPathOwnerPackageName"},"deprecated":false,"digest":{"function_hash":"251402470808749008164339335217852146753","length":223},"id":"ASB-A-201667614-f2084d82","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/4f46f26267ceff5e6f37621ae2ede38a80d5ffde","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"line_hashes":["227082451382423078953520414071533952810","22613576191464637590775937452726305821","156042098569606700548283666622904837208","215794511505920084906259401026091949579","323795208999802954841461095209522292719","114219867295483757930129871934884625336","137383048737320772824913646054177780410"],"threshold":0.9},"id":"ASB-A-201667614-ff0a9716","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f","https://android.googlesource.com/platform/packages/providers/MediaProvider/+/4f46f26267ceff5e6f37621ae2ede38a80d5ffde"],"severity":"High","spl":"2022-12-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-201667614.json"}},{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bae2794639a349d2f7b1a66915d89c51c9334164"],"severity":"High","spl":"2022-12-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["227082451382423078953520414071533952810","22613576191464637590775937452726305821","156042098569606700548283666622904837208","215794511505920084906259401026091949579","323795208999802954841461095209522292719","114219867295483757930129871934884625336","137383048737320772824913646054177780410"],"threshold":0.9},"id":"ASB-A-201667614-025fb52d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bae2794639a349d2f7b1a66915d89c51c9334164","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-201667614.json"}}],"schema_version":"1.9.0"}