{"id":"ASB-A-242537498","details":"In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-242537498","CVE-2023-20911"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/1d86c8b29922525972559e00e26c1fcd6f496353"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-03-01"}]}],"versions":["13-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/11c306e3db5f015dee0952efe1c26fa6343201ae"],"severity":"High","spl":"2023-03-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/11c306e3db5f015dee0952efe1c26fa6343201ae","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerServiceImpl.java"},"deprecated":false,"digest":{"line_hashes":["327582123559858781977117958780113467126","83537071210620035477133119881071565690","44333672605357550839179852586856802716","241802534055844365783328220125817648603","97112676878571324541325114554768250135","64220535494009218787422161738013770246"],"threshold":0.9},"id":"ASB-A-242537498-75a2c2f4"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/11c306e3db5f015dee0952efe1c26fa6343201ae","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerServiceImpl.java","function":"addPermission"},"deprecated":false,"digest":{"function_hash":"26013401248605620036221261771773677390","length":1009},"id":"ASB-A-242537498-f1e30483","signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-242537498.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-03-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","spl":"2023-03-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["295703079519489327374525897052801992582","238878028724186134214475222640892592517","44333672605357550839179852586856802716","281036421207129532321443332768700420552","187617202663803963190501833925435569594","45358327056640962482356134104137831131"]},"id":"ASB-A-242537498-2bd6224b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8fdf4530aac096d87c8d6afe64036f972a3835be","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"}},{"deprecated":false,"digest":{"length":1015,"function_hash":"262889252496986112574238164846940992953"},"id":"ASB-A-242537498-5fe4a35b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8fdf4530aac096d87c8d6afe64036f972a3835be","target":{"function":"addPermission","file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8fdf4530aac096d87c8d6afe64036f972a3835be"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-242537498.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-03-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1d86c8b29922525972559e00e26c1fcd6f496353"],"severity":"High","spl":"2023-03-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1d86c8b29922525972559e00e26c1fcd6f496353","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java","function":"addPermission"},"deprecated":false,"digest":{"function_hash":"140617909913934172325911125204063752014","length":1000},"id":"ASB-A-242537498-60defdb8","signature_type":"Function"},{"id":"ASB-A-242537498-ebf3b092","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1d86c8b29922525972559e00e26c1fcd6f496353","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["327582123559858781977117958780113467126","83537071210620035477133119881071565690","44333672605357550839179852586856802716","241802534055844365783328220125817648603","97112676878571324541325114554768250135","64220535494009218787422161738013770246"]}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-242537498.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-03-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"id":"ASB-A-242537498-230ca2f0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/90e7b4cc40a51bad7d26809fc4c0662e5a129ec7","target":{"function":"addPermission","file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"},"deprecated":false,"digest":{"length":1000,"function_hash":"140617909913934172325911125204063752014"}},{"id":"ASB-A-242537498-dd1e0e41","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/90e7b4cc40a51bad7d26809fc4c0662e5a129ec7","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"},"deprecated":false,"digest":{"line_hashes":["327582123559858781977117958780113467126","83537071210620035477133119881071565690","44333672605357550839179852586856802716","241802534055844365783328220125817648603","97112676878571324541325114554768250135","64220535494009218787422161738013770246"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/90e7b4cc40a51bad7d26809fc4c0662e5a129ec7"],"severity":"High","spl":"2023-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-242537498.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["327582123559858781977117958780113467126","83537071210620035477133119881071565690","44333672605357550839179852586856802716","241802534055844365783328220125817648603","97112676878571324541325114554768250135","64220535494009218787422161738013770246"]},"id":"ASB-A-242537498-86f5b37b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/973c67f7fc5d1321ff38e861dfe256a2877af5f0","target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerServiceImpl.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/973c67f7fc5d1321ff38e861dfe256a2877af5f0","target":{"function":"addPermission","file":"services/core/java/com/android/server/pm/permission/PermissionManagerServiceImpl.java"},"deprecated":false,"digest":{"function_hash":"26013401248605620036221261771773677390","length":1009},"id":"ASB-A-242537498-a0c792fc"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/973c67f7fc5d1321ff38e861dfe256a2877af5f0"],"severity":"High","spl":"2023-03-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-242537498.json"}}],"schema_version":"1.9.0"}