{"id":"ASB-A-246300272","details":"In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-246300272","CVE-2023-20904"],"modified":"2026-04-17T15:55:28.020024Z","published":"2023-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/0d461c5bedc547bf4e42c5034ce7d04f51cedf54"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-01-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/dd7d2d766a259d88044b737401381190b4e1878f"],"types":["EoP"],"spl":"2023-01-01","severity":"High","vanir_signatures":[{"digest":{"length":638,"function_hash":"313847549557812398867720977074883296588"},"signature_version":"v1","deprecated":false,"id":"ASB-A-246300272-138e04a3","signature_type":"Function","target":{"function":"getTrampolineIntent","file":"src/com/android/settings/SettingsActivity.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/dd7d2d766a259d88044b737401381190b4e1878f"},{"digest":{"line_hashes":["216513490008190699999292568760206557388","227553894561068462676972630373671659678","101048752366881599882543783758217053989","294155992287282054009475498465247555003"],"threshold":0.9},"signature_version":"v1","deprecated":false,"id":"ASB-A-246300272-e3dc4bc8","signature_type":"Line","target":{"file":"src/com/android/settings/SettingsActivity.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/dd7d2d766a259d88044b737401381190b4e1878f"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-246300272.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-01-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/dd7d2d766a259d88044b737401381190b4e1878f"],"types":["EoP"],"spl":"2023-01-01","severity":"High","vanir_signatures":[{"digest":{"line_hashes":["216513490008190699999292568760206557388","227553894561068462676972630373671659678","101048752366881599882543783758217053989","294155992287282054009475498465247555003"],"threshold":0.9},"signature_version":"v1","deprecated":false,"id":"ASB-A-246300272-2b6e2bd1","signature_type":"Line","target":{"file":"src/com/android/settings/SettingsActivity.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/dd7d2d766a259d88044b737401381190b4e1878f"},{"digest":{"length":638,"function_hash":"313847549557812398867720977074883296588"},"signature_version":"v1","deprecated":false,"id":"ASB-A-246300272-cfb7ef30","signature_type":"Function","target":{"function":"getTrampolineIntent","file":"src/com/android/settings/SettingsActivity.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/dd7d2d766a259d88044b737401381190b4e1878f"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-246300272.json"}}],"schema_version":"1.7.5"}