{"id":"ASB-A-230492955","details":"In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-230492955","CVE-2023-21081"],"modified":"2026-04-29T15:10:00.007170Z","published":"2023-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/6aba151873bfae198ef9eceb10f943e18b52d58c"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-04-01"}]}],"versions":["13-next"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-230492955-00dafc30","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"waitForInstallConstraints","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":722,"function_hash":"171981411219919283052065122381487322215"}},{"id":"ASB-A-230492955-0422cade","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"sendIntent","file":"core/java/android/content/IntentSender.java"},"signature_type":"Function","digest":{"length":177,"function_hash":"87046432260736714533777865737454901035"}},{"id":"ASB-A-230492955-15daf81b","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"dispatchSessionPreappoved","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":425,"function_hash":"25368376629260852412473134905972457080"}},{"id":"ASB-A-230492955-2879bfc7","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"onRestoreComplete","file":"services/core/java/com/android/server/pm/InstallPackageHelper.java"},"signature_type":"Function","digest":{"length":292,"function_hash":"219308357351614869912350567215185510115"}},{"id":"ASB-A-230492955-298c3719","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"sendIntent","file":"core/java/android/content/IntentSender.java"},"signature_type":"Function","digest":{"length":565,"function_hash":"261947732213692486771292604919295703646"}},{"id":"ASB-A-230492955-3c726a6d","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"onUserActionRequired","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":437,"function_hash":"258031307705374909764478382548455210238"}},{"id":"ASB-A-230492955-3e67d829","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"sendOnPackageInstalled","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":1414,"function_hash":"292361900949960515964060990264855268018"}},{"id":"ASB-A-230492955-5eb8bd61","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"file":"core/java/android/content/IntentSender.java"},"signature_type":"Line","digest":{"line_hashes":["116358059063153312272392918688819042471","261035936267247573398677075023807630530","44069007036476793968103769503927574052","207412659919279566920597658500824671150","259158488790864349618409429793376897242","29331431292022645715683518506356303460","36866981505683834809250132793602798996","116660579404883386993233008672162868534","114806641617446633542301985421514924282","275731395159690849144790421027941906494","128452031570740390892707905408347831960","314607729991727419006701614927516068134","4176302984295456083585541823566050908","65452900290876898748797794998033409553","297962181431848582035406008076561957061","309922748554431808629801311406896912873","56587729412198089865606410257809448228","271270608742521877492686433569877601550"],"threshold":0.9}},{"id":"ASB-A-230492955-76a74bf8","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"sendOnUserActionRequired","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":581,"function_hash":"115771163367087147238223973273834156157"}},{"id":"ASB-A-230492955-abdb8ff0","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"sendPendingStreaming","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":754,"function_hash":"174224566600324625455511757873748490543"}},{"id":"ASB-A-230492955-aeacdca0","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"onPackageDeleted","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":818,"function_hash":"314651487143942883914736967300515752730"}},{"id":"ASB-A-230492955-b6442640","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Line","digest":{"line_hashes":["323412635192497196527178943371003595188","16027203025332034435611508736853592440","224002682681926482644142831315174294709","236986350412559622266216948784221704259","121211820100394126309209462841010091130","16656867866537009168619989958772658203","249289125319625592591056665968392361265","323715380489153043554238641731102943142","85395633170205573464174811960492861150","68611945343770282914225145140944487968","137861408629469069889710535831228376880","141200585161276211919809719145833048400","302021338729705551774464323738952841613","252998963622672028187326744797960770102","137861408629469069889710535831228376880","141200585161276211919809719145833048400"],"threshold":0.9}},{"id":"ASB-A-230492955-d92e30e9","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/InstallPackageHelper.java"},"signature_type":"Line","digest":{"line_hashes":["92960042013192522150184712629554949343","186518114013922891760086471429720921629","11123291332103204746933074636169787786","280007723443490694062922911995634611338","252779524570715209015010914293074764443","183930070490569877087458265804754943352","237649437396064158548480520350490479791","200647927988515877784747341304982809954"],"threshold":0.9}},{"id":"ASB-A-230492955-dd5b4c37","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Line","digest":{"line_hashes":["142853875768019227638751984942571758701","250456287636855603695304993127276667751","94747253718215377661370998370068262425","87972040715053793152432707735096436799","258053734376362344767901118276607707116","63408651734611183357545190172934392792","99772112913731084301793178882874656913","242078930604775561962530105346441125257","330051605356705577846629823000266352464","27071684052070866868946552865275153029","325121086141240965494681112050441347414","229983836956600975182129729820539834024","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131476104713659483632416649792814749776","60072063488631917831194234377837912101","237649437396064158548480520350490479791","200647927988515877784747341304982809954","30219924095508504389926441055972838396","274074480419655705059611601531171683689","227233343654581734988281036650679773683","222599868586406303440594060360557978417"],"threshold":0.9}},{"id":"ASB-A-230492955-fb4206d1","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Line","digest":{"line_hashes":["230350746094761608679930749460581319244","234383486024453296436807950542586909656","33611807596878687146775765485897014386","49168145632882497069893885308677445712","219403249346833228025896062802996982120","193966766531547199235117269987079816873","203049254234965103924479873428524893312","5665436218258329645774250914523640581"],"threshold":0.9}},{"id":"ASB-A-230492955-fe92a207","source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","deprecated":false,"target":{"function":"freeStorage","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Function","digest":{"length":581,"function_hash":"159379097775954217395148525443538899085"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd"],"severity":"High","spl":"2023-04-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-230492955.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-04-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-230492955-0ba82880","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"function":"sendOnUserActionRequired","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":437,"function_hash":"18028586340217595494749058636609117368"}},{"id":"ASB-A-230492955-13763d62","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"function":"freeStorage","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Function","digest":{"length":517,"function_hash":"10473893671143963680998946290762191544"}},{"id":"ASB-A-230492955-15536f14","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"function":"statusUpdate","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":1339,"function_hash":"29552642141151798496881742405061617980"}},{"id":"ASB-A-230492955-2431443e","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"function":"onPackageDeleted","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":818,"function_hash":"314651487143942883914736967300515752730"}},{"id":"ASB-A-230492955-27cea484","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Line","digest":{"line_hashes":["30905036997200962689487109711574692900","16027203025332034435611508736853592440","224002682681926482644142831315174294709","236986350412559622266216948784221704259","85395633170205573464174811960492861150","68611945343770282914225145140944487968","137861408629469069889710535831228376880","141200585161276211919809719145833048400","302021338729705551774464323738952841613","252998963622672028187326744797960770102","137861408629469069889710535831228376880","141200585161276211919809719145833048400"],"threshold":0.9}},{"id":"ASB-A-230492955-3b22cc7c","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"function":"onRestoreComplete","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Function","digest":{"length":284,"function_hash":"160490511048139809329378764510816041911"}},{"id":"ASB-A-230492955-995781c9","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"function":"sendIntent","file":"core/java/android/content/IntentSender.java"},"signature_type":"Function","digest":{"length":494,"function_hash":"95153075995565927400725679275297696168"}},{"id":"ASB-A-230492955-a72b258b","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"function":"sendPendingStreaming","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":790,"function_hash":"287690672280276988455249403263415368143"}},{"id":"ASB-A-230492955-a7fd9b3c","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"function":"onUserActionRequired","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":437,"function_hash":"258031307705374909764478382548455210238"}},{"id":"ASB-A-230492955-c656c6fd","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"function":"sendIntent","file":"core/java/android/content/IntentSender.java"},"signature_type":"Function","digest":{"length":177,"function_hash":"87046432260736714533777865737454901035"}},{"id":"ASB-A-230492955-ca3b1ebf","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Line","digest":{"line_hashes":["154087426921860121778145240968476090813","250270813916669270644255294855217615402","205044427342703872228822795858602839190","6582538567083935914024145771823875296","250839058658008320794706121171605168752","58311447738158313575199732874226678031","62192874276832276887684678768737345227","171749872417742255366638158186767616288","323341898668904173402620650759852769871","298287488721407398242028041904582418017","582342744661768209444636663593397435","309679254971135653718485858800575588443","281385543019782044022159079231999744968","308562075519780914882709395061138408249","92511822287182473929235481835458359535","161061822454643210250476455399929476201","281385543019782044022159079231999744968","171749872417742255366638158186767616288","256059965063197078311078052208086041001","229983836956600975182129729820539834024","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131476104713659483632416649792814749776","60072063488631917831194234377837912101","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131733860578281390808292043737809998320","60153867802836665897257106456222091464","137329737294610573143698624667595740721","122215696873370329265761368937601934470"],"threshold":0.9}},{"id":"ASB-A-230492955-cea2a130","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"file":"core/java/android/content/IntentSender.java"},"signature_type":"Line","digest":{"line_hashes":["295317561444549671640747669301275542723","247092910472481710524076146167570130046","36866981505683834809250132793602798996","116660579404883386993233008672162868534","114806641617446633542301985421514924282","275731395159690849144790421027941906494","128452031570740390892707905408347831960","314607729991727419006701614927516068134","4176302984295456083585541823566050908","65452900290876898748797794998033409553","297962181431848582035406008076561957061","309922748554431808629801311406896912873","56587729412198089865606410257809448228","271270608742521877492686433569877601550"],"threshold":0.9}},{"id":"ASB-A-230492955-d4071f28","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"function":"sendOnPackageInstalled","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":1455,"function_hash":"113272842121288150826906473258009570421"}},{"id":"ASB-A-230492955-d82e7b9c","source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Line","digest":{"line_hashes":["219403249346833228025896062802996982120","193966766531547199235117269987079816873","203049254234965103924479873428524893312","5665436218258329645774250914523640581","252779524570715209015010914293074764443","225038616890867297937787119160628082289","238329617538021927936846931914070672522","316651912593467609470695356420115289494"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f"],"severity":"High","spl":"2023-04-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-230492955.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-04-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-230492955-09f15706","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"file":"core/java/android/content/IntentSender.java"},"signature_type":"Line","digest":{"line_hashes":["73304285286796207645041454657029646762","295125738304383576455933284438075500829","108945557582781098019498898465187749155","29331431292022645715683518506356303460","36866981505683834809250132793602798996","116660579404883386993233008672162868534","114806641617446633542301985421514924282","275731395159690849144790421027941906494","128452031570740390892707905408347831960","314607729991727419006701614927516068134","4176302984295456083585541823566050908","65452900290876898748797794998033409553","297962181431848582035406008076561957061","309922748554431808629801311406896912873","56587729412198089865606410257809448228","271270608742521877492686433569877601550"],"threshold":0.9}},{"id":"ASB-A-230492955-260297b5","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Line","digest":{"line_hashes":["323412635192497196527178943371003595188","16027203025332034435611508736853592440","224002682681926482644142831315174294709","236986350412559622266216948784221704259","85395633170205573464174811960492861150","68611945343770282914225145140944487968","137861408629469069889710535831228376880","141200585161276211919809719145833048400","302021338729705551774464323738952841613","252998963622672028187326744797960770102","137861408629469069889710535831228376880","141200585161276211919809719145833048400"],"threshold":0.9}},{"id":"ASB-A-230492955-309b3ebf","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"function":"sendIntent","file":"core/java/android/content/IntentSender.java"},"signature_type":"Function","digest":{"length":494,"function_hash":"95153075995565927400725679275297696168"}},{"id":"ASB-A-230492955-4d72f824","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"function":"sendPendingStreaming","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":754,"function_hash":"174224566600324625455511757873748490543"}},{"id":"ASB-A-230492955-72581af9","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"function":"sendIntent","file":"core/java/android/content/IntentSender.java"},"signature_type":"Function","digest":{"length":177,"function_hash":"87046432260736714533777865737454901035"}},{"id":"ASB-A-230492955-77d2263d","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Line","digest":{"line_hashes":["336795017755509346792141919155033651410","177860852319508677631328805120628172030","176174153931539697176094628348835527918","87972040715053793152432707735096436799","582342744661768209444636663593397435","309679254971135653718485858800575588443","281385543019782044022159079231999744968","308562075519780914882709395061138408249","256059965063197078311078052208086041001","229983836956600975182129729820539834024","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131476104713659483632416649792814749776","60072063488631917831194234377837912101","237649437396064158548480520350490479791","200647927988515877784747341304982809954","30219924095508504389926441055972838396","274074480419655705059611601531171683689","227233343654581734988281036650679773683","222599868586406303440594060360557978417"],"threshold":0.9}},{"id":"ASB-A-230492955-90f96ca7","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Line","digest":{"line_hashes":["219403249346833228025896062802996982120","193966766531547199235117269987079816873","203049254234965103924479873428524893312","5665436218258329645774250914523640581","252779524570715209015010914293074764443","225038616890867297937787119160628082289","238329617538021927936846931914070672522","316651912593467609470695356420115289494"],"threshold":0.9}},{"id":"ASB-A-230492955-a24a81b0","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"function":"sendOnPackageInstalled","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":1438,"function_hash":"93988994418747638377202196351253599131"}},{"id":"ASB-A-230492955-b800f99e","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"function":"onUserActionRequired","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":437,"function_hash":"258031307705374909764478382548455210238"}},{"id":"ASB-A-230492955-bc0fb96b","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"function":"statusUpdate","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":1247,"function_hash":"100196446771587892735951143397347887086"}},{"id":"ASB-A-230492955-c3fa0206","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"function":"freeStorage","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Function","digest":{"length":517,"function_hash":"10473893671143963680998946290762191544"}},{"id":"ASB-A-230492955-f0ef024c","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"function":"onRestoreComplete","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Function","digest":{"length":284,"function_hash":"160490511048139809329378764510816041911"}},{"id":"ASB-A-230492955-f9155156","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"function":"sendOnUserActionRequired","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":437,"function_hash":"18028586340217595494749058636609117368"}},{"id":"ASB-A-230492955-fbfdafac","source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","deprecated":false,"target":{"function":"onPackageDeleted","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":818,"function_hash":"314651487143942883914736967300515752730"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7"],"severity":"High","spl":"2023-04-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-230492955.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-04-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-230492955-0172f2c9","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"function":"sendIntent","file":"core/java/android/content/IntentSender.java"},"signature_type":"Function","digest":{"length":494,"function_hash":"95153075995565927400725679275297696168"}},{"id":"ASB-A-230492955-0efa455e","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"function":"sendIntent","file":"core/java/android/content/IntentSender.java"},"signature_type":"Function","digest":{"length":177,"function_hash":"87046432260736714533777865737454901035"}},{"id":"ASB-A-230492955-57a36b40","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"function":"statusUpdate","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":1247,"function_hash":"100196446771587892735951143397347887086"}},{"id":"ASB-A-230492955-5a30913b","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"function":"sendOnUserActionRequired","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":437,"function_hash":"18028586340217595494749058636609117368"}},{"id":"ASB-A-230492955-5e8d46c6","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Line","digest":{"line_hashes":["336795017755509346792141919155033651410","177860852319508677631328805120628172030","176174153931539697176094628348835527918","87972040715053793152432707735096436799","582342744661768209444636663593397435","309679254971135653718485858800575588443","281385543019782044022159079231999744968","308562075519780914882709395061138408249","256059965063197078311078052208086041001","229983836956600975182129729820539834024","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131476104713659483632416649792814749776","60072063488631917831194234377837912101","237649437396064158548480520350490479791","200647927988515877784747341304982809954","30219924095508504389926441055972838396","274074480419655705059611601531171683689","227233343654581734988281036650679773683","222599868586406303440594060360557978417"],"threshold":0.9}},{"id":"ASB-A-230492955-6eb03f26","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"function":"onPackageDeleted","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":818,"function_hash":"314651487143942883914736967300515752730"}},{"id":"ASB-A-230492955-7e1502d3","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"function":"onRestoreComplete","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Function","digest":{"length":284,"function_hash":"160490511048139809329378764510816041911"}},{"id":"ASB-A-230492955-8c60053e","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"function":"freeStorage","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Function","digest":{"length":517,"function_hash":"10473893671143963680998946290762191544"}},{"id":"ASB-A-230492955-d9bdc21f","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Line","digest":{"line_hashes":["323412635192497196527178943371003595188","16027203025332034435611508736853592440","224002682681926482644142831315174294709","236986350412559622266216948784221704259","85395633170205573464174811960492861150","68611945343770282914225145140944487968","137861408629469069889710535831228376880","141200585161276211919809719145833048400","302021338729705551774464323738952841613","252998963622672028187326744797960770102","137861408629469069889710535831228376880","141200585161276211919809719145833048400"],"threshold":0.9}},{"id":"ASB-A-230492955-dd61010b","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"function":"sendOnPackageInstalled","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":1438,"function_hash":"93988994418747638377202196351253599131"}},{"id":"ASB-A-230492955-e8a7f6ff","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"file":"core/java/android/content/IntentSender.java"},"signature_type":"Line","digest":{"line_hashes":["73304285286796207645041454657029646762","295125738304383576455933284438075500829","108945557582781098019498898465187749155","29331431292022645715683518506356303460","36866981505683834809250132793602798996","116660579404883386993233008672162868534","114806641617446633542301985421514924282","275731395159690849144790421027941906494","128452031570740390892707905408347831960","314607729991727419006701614927516068134","4176302984295456083585541823566050908","65452900290876898748797794998033409553","297962181431848582035406008076561957061","309922748554431808629801311406896912873","56587729412198089865606410257809448228","271270608742521877492686433569877601550"],"threshold":0.9}},{"id":"ASB-A-230492955-f195c157","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"function":"sendPendingStreaming","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":754,"function_hash":"174224566600324625455511757873748490543"}},{"id":"ASB-A-230492955-f3ac6298","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"function":"onUserActionRequired","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":437,"function_hash":"258031307705374909764478382548455210238"}},{"id":"ASB-A-230492955-f485f8a0","source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Line","digest":{"line_hashes":["219403249346833228025896062802996982120","193966766531547199235117269987079816873","203049254234965103924479873428524893312","5665436218258329645774250914523640581","252779524570715209015010914293074764443","225038616890867297937787119160628082289","238329617538021927936846931914070672522","316651912593467609470695356420115289494"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb"],"severity":"High","spl":"2023-04-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-230492955.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-04-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-230492955-096f35a1","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Line","digest":{"line_hashes":["323412635192497196527178943371003595188","16027203025332034435611508736853592440","224002682681926482644142831315174294709","236986350412559622266216948784221704259","85395633170205573464174811960492861150","68611945343770282914225145140944487968","137861408629469069889710535831228376880","141200585161276211919809719145833048400","302021338729705551774464323738952841613","252998963622672028187326744797960770102","137861408629469069889710535831228376880","141200585161276211919809719145833048400"],"threshold":0.9}},{"id":"ASB-A-230492955-1ec995ba","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"file":"core/java/android/content/IntentSender.java"},"signature_type":"Line","digest":{"line_hashes":["73304285286796207645041454657029646762","295125738304383576455933284438075500829","108945557582781098019498898465187749155","29331431292022645715683518506356303460","36866981505683834809250132793602798996","116660579404883386993233008672162868534","114806641617446633542301985421514924282","275731395159690849144790421027941906494","128452031570740390892707905408347831960","314607729991727419006701614927516068134","4176302984295456083585541823566050908","65452900290876898748797794998033409553","297962181431848582035406008076561957061","309922748554431808629801311406896912873","56587729412198089865606410257809448228","271270608742521877492686433569877601550"],"threshold":0.9}},{"id":"ASB-A-230492955-2bcb10cd","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"function":"onRestoreComplete","file":"services/core/java/com/android/server/pm/InstallPackageHelper.java"},"signature_type":"Function","digest":{"length":292,"function_hash":"219308357351614869912350567215185510115"}},{"id":"ASB-A-230492955-46f28099","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"function":"sendIntent","file":"core/java/android/content/IntentSender.java"},"signature_type":"Function","digest":{"length":177,"function_hash":"87046432260736714533777865737454901035"}},{"id":"ASB-A-230492955-527e34ec","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"function":"onPackageDeleted","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":818,"function_hash":"314651487143942883914736967300515752730"}},{"id":"ASB-A-230492955-6784331b","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"function":"sendOnUserActionRequired","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":437,"function_hash":"18028586340217595494749058636609117368"}},{"id":"ASB-A-230492955-84657f15","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"function":"onUserActionRequired","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Function","digest":{"length":437,"function_hash":"258031307705374909764478382548455210238"}},{"id":"ASB-A-230492955-8f59daf5","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"function":"freeStorage","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Function","digest":{"length":581,"function_hash":"159379097775954217395148525443538899085"}},{"id":"ASB-A-230492955-b384a997","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/InstallPackageHelper.java"},"signature_type":"Line","digest":{"line_hashes":["207144622467762879224534720409084504778","35340660332901479199731445305937848243","11123291332103204746933074636169787786","280007723443490694062922911995634611338","252779524570715209015010914293074764443","183930070490569877087458265804754943352","237649437396064158548480520350490479791","200647927988515877784747341304982809954"],"threshold":0.9}},{"id":"ASB-A-230492955-b8b65021","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"function":"sendPendingStreaming","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":754,"function_hash":"174224566600324625455511757873748490543"}},{"id":"ASB-A-230492955-c10fc47b","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"function":"sendOnPackageInstalled","file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Function","digest":{"length":1333,"function_hash":"278886018652066584784600442955964654687"}},{"id":"ASB-A-230492955-d4cde585","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Line","digest":{"line_hashes":["142853875768019227638751984942571758701","250456287636855603695304993127276667751","94747253718215377661370998370068262425","87972040715053793152432707735096436799","256059965063197078311078052208086041001","229983836956600975182129729820539834024","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131476104713659483632416649792814749776","60072063488631917831194234377837912101","237649437396064158548480520350490479791","200647927988515877784747341304982809954","30219924095508504389926441055972838396","274074480419655705059611601531171683689","227233343654581734988281036650679773683","222599868586406303440594060360557978417"],"threshold":0.9}},{"id":"ASB-A-230492955-eb189253","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Line","digest":{"line_hashes":["230350746094761608679930749460581319244","234383486024453296436807950542586909656","33611807596878687146775765485897014386","49168145632882497069893885308677445712","219403249346833228025896062802996982120","193966766531547199235117269987079816873","203049254234965103924479873428524893312","5665436218258329645774250914523640581"],"threshold":0.9}},{"id":"ASB-A-230492955-ec92cb38","source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","deprecated":false,"target":{"function":"sendIntent","file":"core/java/android/content/IntentSender.java"},"signature_type":"Function","digest":{"length":494,"function_hash":"95153075995565927400725679275297696168"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73"],"severity":"High","spl":"2023-04-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-230492955.json"}}],"schema_version":"1.7.5"}