{"id":"ASB-A-243377226","details":"In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-243377226","CVE-2023-21099"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2023-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/6aba151873bfae198ef9eceb10f943e18b52d58c"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-04-01"}]}],"versions":["13-next"],"ecosystem_specific":{"spl":"2023-04-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd"],"types":["EoP"],"severity":"High","vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"waitForInstallConstraints"},"signature_type":"Function","id":"ASB-A-243377226-00dafc30","digest":{"function_hash":"171981411219919283052065122381487322215","length":722},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-0422cade","digest":{"function_hash":"87046432260736714533777865737454901035","length":177},"target":{"file":"core/java/android/content/IntentSender.java","function":"sendIntent"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-15daf81b","digest":{"function_hash":"25368376629260852412473134905972457080","length":425},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"dispatchSessionPreappoved"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-2879bfc7","digest":{"function_hash":"219308357351614869912350567215185510115","length":292},"target":{"file":"services/core/java/com/android/server/pm/InstallPackageHelper.java","function":"onRestoreComplete"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-298c3719","digest":{"function_hash":"261947732213692486771292604919295703646","length":565},"target":{"file":"core/java/android/content/IntentSender.java","function":"sendIntent"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-3c726a6d","digest":{"function_hash":"258031307705374909764478382548455210238","length":437},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"onUserActionRequired"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-3e67d829","digest":{"function_hash":"292361900949960515964060990264855268018","length":1414},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendOnPackageInstalled"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","target":{"file":"core/java/android/content/IntentSender.java"},"signature_type":"Line","id":"ASB-A-243377226-5eb8bd61","digest":{"threshold":0.9,"line_hashes":["116358059063153312272392918688819042471","261035936267247573398677075023807630530","44069007036476793968103769503927574052","207412659919279566920597658500824671150","259158488790864349618409429793376897242","29331431292022645715683518506356303460","36866981505683834809250132793602798996","116660579404883386993233008672162868534","114806641617446633542301985421514924282","275731395159690849144790421027941906494","128452031570740390892707905408347831960","314607729991727419006701614927516068134","4176302984295456083585541823566050908","65452900290876898748797794998033409553","297962181431848582035406008076561957061","309922748554431808629801311406896912873","56587729412198089865606410257809448228","271270608742521877492686433569877601550"]},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-76a74bf8","digest":{"function_hash":"115771163367087147238223973273834156157","length":581},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendOnUserActionRequired"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-abdb8ff0","digest":{"function_hash":"174224566600324625455511757873748490543","length":754},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendPendingStreaming"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-aeacdca0","digest":{"function_hash":"314651487143942883914736967300515752730","length":818},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"onPackageDeleted"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-b6442640","digest":{"threshold":0.9,"line_hashes":["323412635192497196527178943371003595188","16027203025332034435611508736853592440","224002682681926482644142831315174294709","236986350412559622266216948784221704259","121211820100394126309209462841010091130","16656867866537009168619989958772658203","249289125319625592591056665968392361265","323715380489153043554238641731102943142","85395633170205573464174811960492861150","68611945343770282914225145140944487968","137861408629469069889710535831228376880","141200585161276211919809719145833048400","302021338729705551774464323738952841613","252998963622672028187326744797960770102","137861408629469069889710535831228376880","141200585161276211919809719145833048400"]},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-d92e30e9","digest":{"threshold":0.9,"line_hashes":["92960042013192522150184712629554949343","186518114013922891760086471429720921629","11123291332103204746933074636169787786","280007723443490694062922911995634611338","252779524570715209015010914293074764443","183930070490569877087458265804754943352","237649437396064158548480520350490479791","200647927988515877784747341304982809954"]},"target":{"file":"services/core/java/com/android/server/pm/InstallPackageHelper.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-dd5b4c37","digest":{"threshold":0.9,"line_hashes":["142853875768019227638751984942571758701","250456287636855603695304993127276667751","94747253718215377661370998370068262425","87972040715053793152432707735096436799","258053734376362344767901118276607707116","63408651734611183357545190172934392792","99772112913731084301793178882874656913","242078930604775561962530105346441125257","330051605356705577846629823000266352464","27071684052070866868946552865275153029","325121086141240965494681112050441347414","229983836956600975182129729820539834024","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131476104713659483632416649792814749776","60072063488631917831194234377837912101","237649437396064158548480520350490479791","200647927988515877784747341304982809954","30219924095508504389926441055972838396","274074480419655705059611601531171683689","227233343654581734988281036650679773683","222599868586406303440594060360557978417"]},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-fb4206d1","digest":{"threshold":0.9,"line_hashes":["230350746094761608679930749460581319244","234383486024453296436807950542586909656","33611807596878687146775765485897014386","49168145632882497069893885308677445712","219403249346833228025896062802996982120","193966766531547199235117269987079816873","203049254234965103924479873428524893312","5665436218258329645774250914523640581"]},"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-fe92a207","digest":{"function_hash":"159379097775954217395148525443538899085","length":581},"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"freeStorage"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-243377226.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-04-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2023-04-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f"],"types":["EoP"],"severity":"High","vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendOnUserActionRequired"},"signature_type":"Function","id":"ASB-A-243377226-0ba82880","digest":{"function_hash":"18028586340217595494749058636609117368","length":437},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-13763d62","digest":{"function_hash":"10473893671143963680998946290762191544","length":517},"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"freeStorage"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-15536f14","digest":{"function_hash":"29552642141151798496881742405061617980","length":1339},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"statusUpdate"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"onPackageDeleted"},"signature_type":"Function","id":"ASB-A-243377226-2431443e","digest":{"function_hash":"314651487143942883914736967300515752730","length":818},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"signature_type":"Line","id":"ASB-A-243377226-27cea484","digest":{"threshold":0.9,"line_hashes":["30905036997200962689487109711574692900","16027203025332034435611508736853592440","224002682681926482644142831315174294709","236986350412559622266216948784221704259","85395633170205573464174811960492861150","68611945343770282914225145140944487968","137861408629469069889710535831228376880","141200585161276211919809719145833048400","302021338729705551774464323738952841613","252998963622672028187326744797960770102","137861408629469069889710535831228376880","141200585161276211919809719145833048400"]},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-3b22cc7c","digest":{"function_hash":"160490511048139809329378764510816041911","length":284},"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"onRestoreComplete"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","target":{"file":"core/java/android/content/IntentSender.java","function":"sendIntent"},"signature_type":"Function","id":"ASB-A-243377226-995781c9","digest":{"function_hash":"95153075995565927400725679275297696168","length":494},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendPendingStreaming"},"signature_type":"Function","id":"ASB-A-243377226-a72b258b","digest":{"function_hash":"287690672280276988455249403263415368143","length":790},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-a7fd9b3c","digest":{"function_hash":"258031307705374909764478382548455210238","length":437},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"onUserActionRequired"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-c656c6fd","digest":{"function_hash":"87046432260736714533777865737454901035","length":177},"target":{"file":"core/java/android/content/IntentSender.java","function":"sendIntent"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-ca3b1ebf","digest":{"threshold":0.9,"line_hashes":["154087426921860121778145240968476090813","250270813916669270644255294855217615402","205044427342703872228822795858602839190","6582538567083935914024145771823875296","250839058658008320794706121171605168752","58311447738158313575199732874226678031","62192874276832276887684678768737345227","171749872417742255366638158186767616288","323341898668904173402620650759852769871","298287488721407398242028041904582418017","582342744661768209444636663593397435","309679254971135653718485858800575588443","281385543019782044022159079231999744968","308562075519780914882709395061138408249","92511822287182473929235481835458359535","161061822454643210250476455399929476201","281385543019782044022159079231999744968","171749872417742255366638158186767616288","256059965063197078311078052208086041001","229983836956600975182129729820539834024","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131476104713659483632416649792814749776","60072063488631917831194234377837912101","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131733860578281390808292043737809998320","60153867802836665897257106456222091464","137329737294610573143698624667595740721","122215696873370329265761368937601934470"]},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-cea2a130","digest":{"threshold":0.9,"line_hashes":["295317561444549671640747669301275542723","247092910472481710524076146167570130046","36866981505683834809250132793602798996","116660579404883386993233008672162868534","114806641617446633542301985421514924282","275731395159690849144790421027941906494","128452031570740390892707905408347831960","314607729991727419006701614927516068134","4176302984295456083585541823566050908","65452900290876898748797794998033409553","297962181431848582035406008076561957061","309922748554431808629801311406896912873","56587729412198089865606410257809448228","271270608742521877492686433569877601550"]},"target":{"file":"core/java/android/content/IntentSender.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-d4071f28","digest":{"function_hash":"113272842121288150826906473258009570421","length":1455},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendOnPackageInstalled"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-d82e7b9c","digest":{"threshold":0.9,"line_hashes":["219403249346833228025896062802996982120","193966766531547199235117269987079816873","203049254234965103924479873428524893312","5665436218258329645774250914523640581","252779524570715209015010914293074764443","225038616890867297937787119160628082289","238329617538021927936846931914070672522","316651912593467609470695356420115289494"]},"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-243377226.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-04-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2023-04-01","types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7"],"severity":"High","vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-09f15706","digest":{"threshold":0.9,"line_hashes":["73304285286796207645041454657029646762","295125738304383576455933284438075500829","108945557582781098019498898465187749155","29331431292022645715683518506356303460","36866981505683834809250132793602798996","116660579404883386993233008672162868534","114806641617446633542301985421514924282","275731395159690849144790421027941906494","128452031570740390892707905408347831960","314607729991727419006701614927516068134","4176302984295456083585541823566050908","65452900290876898748797794998033409553","297962181431848582035406008076561957061","309922748554431808629801311406896912873","56587729412198089865606410257809448228","271270608742521877492686433569877601550"]},"target":{"file":"core/java/android/content/IntentSender.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-260297b5","digest":{"threshold":0.9,"line_hashes":["323412635192497196527178943371003595188","16027203025332034435611508736853592440","224002682681926482644142831315174294709","236986350412559622266216948784221704259","85395633170205573464174811960492861150","68611945343770282914225145140944487968","137861408629469069889710535831228376880","141200585161276211919809719145833048400","302021338729705551774464323738952841613","252998963622672028187326744797960770102","137861408629469069889710535831228376880","141200585161276211919809719145833048400"]},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-309b3ebf","digest":{"function_hash":"95153075995565927400725679275297696168","length":494},"target":{"file":"core/java/android/content/IntentSender.java","function":"sendIntent"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendPendingStreaming"},"signature_type":"Function","id":"ASB-A-243377226-4d72f824","digest":{"function_hash":"174224566600324625455511757873748490543","length":754},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","target":{"file":"core/java/android/content/IntentSender.java","function":"sendIntent"},"signature_type":"Function","id":"ASB-A-243377226-72581af9","digest":{"function_hash":"87046432260736714533777865737454901035","length":177},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Line","id":"ASB-A-243377226-77d2263d","digest":{"threshold":0.9,"line_hashes":["336795017755509346792141919155033651410","177860852319508677631328805120628172030","176174153931539697176094628348835527918","87972040715053793152432707735096436799","582342744661768209444636663593397435","309679254971135653718485858800575588443","281385543019782044022159079231999744968","308562075519780914882709395061138408249","256059965063197078311078052208086041001","229983836956600975182129729820539834024","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131476104713659483632416649792814749776","60072063488631917831194234377837912101","237649437396064158548480520350490479791","200647927988515877784747341304982809954","30219924095508504389926441055972838396","274074480419655705059611601531171683689","227233343654581734988281036650679773683","222599868586406303440594060360557978417"]},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"signature_type":"Line","id":"ASB-A-243377226-90f96ca7","digest":{"threshold":0.9,"line_hashes":["219403249346833228025896062802996982120","193966766531547199235117269987079816873","203049254234965103924479873428524893312","5665436218258329645774250914523640581","252779524570715209015010914293074764443","225038616890867297937787119160628082289","238329617538021927936846931914070672522","316651912593467609470695356420115289494"]},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendOnPackageInstalled"},"signature_type":"Function","id":"ASB-A-243377226-a24a81b0","digest":{"function_hash":"93988994418747638377202196351253599131","length":1438},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"onUserActionRequired"},"signature_type":"Function","id":"ASB-A-243377226-b800f99e","digest":{"function_hash":"258031307705374909764478382548455210238","length":437},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-bc0fb96b","digest":{"function_hash":"100196446771587892735951143397347887086","length":1247},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"statusUpdate"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-c3fa0206","digest":{"function_hash":"10473893671143963680998946290762191544","length":517},"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"freeStorage"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"onRestoreComplete"},"signature_type":"Function","id":"ASB-A-243377226-f0ef024c","digest":{"function_hash":"160490511048139809329378764510816041911","length":284},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-f9155156","digest":{"function_hash":"18028586340217595494749058636609117368","length":437},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendOnUserActionRequired"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"onPackageDeleted"},"signature_type":"Function","id":"ASB-A-243377226-fbfdafac","digest":{"function_hash":"314651487143942883914736967300515752730","length":818},"signature_version":"v1","deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-243377226.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-04-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2023-04-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb"],"types":["EoP"],"severity":"High","vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","target":{"file":"core/java/android/content/IntentSender.java","function":"sendIntent"},"signature_type":"Function","id":"ASB-A-243377226-0172f2c9","digest":{"function_hash":"95153075995565927400725679275297696168","length":494},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-0efa455e","digest":{"function_hash":"87046432260736714533777865737454901035","length":177},"target":{"file":"core/java/android/content/IntentSender.java","function":"sendIntent"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"statusUpdate"},"signature_type":"Function","id":"ASB-A-243377226-57a36b40","digest":{"function_hash":"100196446771587892735951143397347887086","length":1247},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-5a30913b","digest":{"function_hash":"18028586340217595494749058636609117368","length":437},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendOnUserActionRequired"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Line","id":"ASB-A-243377226-5e8d46c6","digest":{"threshold":0.9,"line_hashes":["336795017755509346792141919155033651410","177860852319508677631328805120628172030","176174153931539697176094628348835527918","87972040715053793152432707735096436799","582342744661768209444636663593397435","309679254971135653718485858800575588443","281385543019782044022159079231999744968","308562075519780914882709395061138408249","256059965063197078311078052208086041001","229983836956600975182129729820539834024","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131476104713659483632416649792814749776","60072063488631917831194234377837912101","237649437396064158548480520350490479791","200647927988515877784747341304982809954","30219924095508504389926441055972838396","274074480419655705059611601531171683689","227233343654581734988281036650679773683","222599868586406303440594060360557978417"]},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"onPackageDeleted"},"signature_type":"Function","id":"ASB-A-243377226-6eb03f26","digest":{"function_hash":"314651487143942883914736967300515752730","length":818},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-7e1502d3","digest":{"function_hash":"160490511048139809329378764510816041911","length":284},"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"onRestoreComplete"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-8c60053e","digest":{"function_hash":"10473893671143963680998946290762191544","length":517},"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"freeStorage"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-d9bdc21f","digest":{"threshold":0.9,"line_hashes":["323412635192497196527178943371003595188","16027203025332034435611508736853592440","224002682681926482644142831315174294709","236986350412559622266216948784221704259","85395633170205573464174811960492861150","68611945343770282914225145140944487968","137861408629469069889710535831228376880","141200585161276211919809719145833048400","302021338729705551774464323738952841613","252998963622672028187326744797960770102","137861408629469069889710535831228376880","141200585161276211919809719145833048400"]},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendOnPackageInstalled"},"signature_type":"Function","id":"ASB-A-243377226-dd61010b","digest":{"function_hash":"93988994418747638377202196351253599131","length":1438},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","target":{"file":"core/java/android/content/IntentSender.java"},"signature_type":"Line","id":"ASB-A-243377226-e8a7f6ff","digest":{"threshold":0.9,"line_hashes":["73304285286796207645041454657029646762","295125738304383576455933284438075500829","108945557582781098019498898465187749155","29331431292022645715683518506356303460","36866981505683834809250132793602798996","116660579404883386993233008672162868534","114806641617446633542301985421514924282","275731395159690849144790421027941906494","128452031570740390892707905408347831960","314607729991727419006701614927516068134","4176302984295456083585541823566050908","65452900290876898748797794998033409553","297962181431848582035406008076561957061","309922748554431808629801311406896912873","56587729412198089865606410257809448228","271270608742521877492686433569877601550"]},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendPendingStreaming"},"signature_type":"Function","id":"ASB-A-243377226-f195c157","digest":{"function_hash":"174224566600324625455511757873748490543","length":754},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-f3ac6298","digest":{"function_hash":"258031307705374909764478382548455210238","length":437},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"onUserActionRequired"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-f485f8a0","digest":{"threshold":0.9,"line_hashes":["219403249346833228025896062802996982120","193966766531547199235117269987079816873","203049254234965103924479873428524893312","5665436218258329645774250914523640581","252779524570715209015010914293074764443","225038616890867297937787119160628082289","238329617538021927936846931914070672522","316651912593467609470695356420115289494"]},"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-243377226.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-04-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-04-01","types":["EoP"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73"],"severity":"High","vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-096f35a1","digest":{"threshold":0.9,"line_hashes":["323412635192497196527178943371003595188","16027203025332034435611508736853592440","224002682681926482644142831315174294709","236986350412559622266216948784221704259","85395633170205573464174811960492861150","68611945343770282914225145140944487968","137861408629469069889710535831228376880","141200585161276211919809719145833048400","302021338729705551774464323738952841613","252998963622672028187326744797960770102","137861408629469069889710535831228376880","141200585161276211919809719145833048400"]},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","target":{"file":"core/java/android/content/IntentSender.java"},"signature_type":"Line","id":"ASB-A-243377226-1ec995ba","digest":{"threshold":0.9,"line_hashes":["73304285286796207645041454657029646762","295125738304383576455933284438075500829","108945557582781098019498898465187749155","29331431292022645715683518506356303460","36866981505683834809250132793602798996","116660579404883386993233008672162868534","114806641617446633542301985421514924282","275731395159690849144790421027941906494","128452031570740390892707905408347831960","314607729991727419006701614927516068134","4176302984295456083585541823566050908","65452900290876898748797794998033409553","297962181431848582035406008076561957061","309922748554431808629801311406896912873","56587729412198089865606410257809448228","271270608742521877492686433569877601550"]},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","target":{"file":"services/core/java/com/android/server/pm/InstallPackageHelper.java","function":"onRestoreComplete"},"signature_type":"Function","id":"ASB-A-243377226-2bcb10cd","digest":{"function_hash":"219308357351614869912350567215185510115","length":292},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-46f28099","digest":{"function_hash":"87046432260736714533777865737454901035","length":177},"target":{"file":"core/java/android/content/IntentSender.java","function":"sendIntent"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-527e34ec","digest":{"function_hash":"314651487143942883914736967300515752730","length":818},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"onPackageDeleted"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-6784331b","digest":{"function_hash":"18028586340217595494749058636609117368","length":437},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendOnUserActionRequired"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-84657f15","digest":{"function_hash":"258031307705374909764478382548455210238","length":437},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"onUserActionRequired"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"freeStorage"},"signature_type":"Function","id":"ASB-A-243377226-8f59daf5","digest":{"function_hash":"159379097775954217395148525443538899085","length":581},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","target":{"file":"services/core/java/com/android/server/pm/InstallPackageHelper.java"},"signature_type":"Line","id":"ASB-A-243377226-b384a997","digest":{"threshold":0.9,"line_hashes":["207144622467762879224534720409084504778","35340660332901479199731445305937848243","11123291332103204746933074636169787786","280007723443490694062922911995634611338","252779524570715209015010914293074764443","183930070490569877087458265804754943352","237649437396064158548480520350490479791","200647927988515877784747341304982809954"]},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-b8b65021","digest":{"function_hash":"174224566600324625455511757873748490543","length":754},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendPendingStreaming"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","signature_type":"Function","id":"ASB-A-243377226-c10fc47b","digest":{"function_hash":"278886018652066584784600442955964654687","length":1333},"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java","function":"sendOnPackageInstalled"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"},"signature_type":"Line","id":"ASB-A-243377226-d4cde585","digest":{"threshold":0.9,"line_hashes":["142853875768019227638751984942571758701","250456287636855603695304993127276667751","94747253718215377661370998370068262425","87972040715053793152432707735096436799","256059965063197078311078052208086041001","229983836956600975182129729820539834024","237649437396064158548480520350490479791","200647927988515877784747341304982809954","131476104713659483632416649792814749776","60072063488631917831194234377837912101","237649437396064158548480520350490479791","200647927988515877784747341304982809954","30219924095508504389926441055972838396","274074480419655705059611601531171683689","227233343654581734988281036650679773683","222599868586406303440594060360557978417"]},"signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","signature_version":"v1","signature_type":"Line","id":"ASB-A-243377226-eb189253","digest":{"threshold":0.9,"line_hashes":["230350746094761608679930749460581319244","234383486024453296436807950542586909656","33611807596878687146775765485897014386","49168145632882497069893885308677445712","219403249346833228025896062802996982120","193966766531547199235117269987079816873","203049254234965103924479873428524893312","5665436218258329645774250914523640581"]},"target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73","target":{"file":"core/java/android/content/IntentSender.java","function":"sendIntent"},"signature_type":"Function","id":"ASB-A-243377226-ec92cb38","digest":{"function_hash":"95153075995565927400725679275297696168","length":494},"signature_version":"v1","deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-243377226.json"}}],"schema_version":"1.7.5"}