{"id":"ASB-A-250576066","details":"In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-250576066","CVE-2023-20930"],"modified":"2026-05-26T15:46:26.044149249Z","published":"2023-05-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-05-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/a8cd2d5733372d7dfd61fbd1ac4c6468da12eefd"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-05-01"}]}],"versions":["13-next"],"ecosystem_specific":{"types":["DoS"],"spl":"2023-05-01","vanir_signatures":[{"signature_type":"Line","id":"ASB-A-250576066-3b2ea84b","source":"https://android.googlesource.com/platform/frameworks/base/+/a6e7958ab84edbd9e5f4653d4d1f56a7438cd7dc","digest":{"threshold":0.9,"line_hashes":["263319105436304544669465896104837762292","209433139401287827018802582806077355352","87903803937766089760555569733262964194","176777970042277569770102167999729227598","318293070038876033060965832004201044489","220930443646617294108905458302761787011","317626222385978607443868078557241336954","66687373854084663651112606406651461070","173971672301406110322133855611485683397","336404952339228199475508797695935597283","86974169324915387921699013212513577618","315191164901161336847818578323290075880","317862923198000710319511510430566844411","8308687824363671500918457600922454598","201429495463495163230532660688924447305","164883290371370547310355437226293042824","255443617585254975062586346019909869731"]},"target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"signature_version":"v1"},{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["112819135667818622446167179094097966434","305443486794261425947495537347947738044","52496095293216530187806415669181992772","273294942800010947632445066696433199181","182039256878973102887855388334708670016","213712598735335796825173873896994422015","226013295120343190781462209522498665875","68876529634684499168618134949861631031","146675904964950339001636685030019199363","193324184626042728143722075020275764","23038817158246762162577687466723167446","74235277546563375252276512014703583595","292124414530965314300501740429402732744","159891601196343205709917921063675260670","243874798345107531105067913894287967099","313530287294025289666857944009157029531","2707482573143663031893681920786570239","134894423297946876213991423773651345330","65452582583506499115640090295345008438","38257340611505229403524659553585825240","46396027059303578089109893954900213043","127447808061736971444819786883721833855","128733845685596833468573023789068192609","22607210886048257108461673154602897390","176380756201037962097357587604007030118","145473821102774981767364482628189524482","205973053757258408909553876029435734269","251152543086343203274031177235164608745","187872204431872691416818133930619955739"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/a6e7958ab84edbd9e5f4653d4d1f56a7438cd7dc","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java"},"signature_version":"v1","id":"ASB-A-250576066-8379bd43"},{"signature_version":"v1","digest":{"function_hash":"219633561347647050194707406149672564765","length":1435},"source":"https://android.googlesource.com/platform/frameworks/base/+/a6e7958ab84edbd9e5f4653d4d1f56a7438cd7dc","signature_type":"Function","target":{"function":"updateConfigurationLocked","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"id":"ASB-A-250576066-e838ea21","deprecated":false},{"signature_version":"v1","digest":{"function_hash":"138504845774840384346845059392139743860","length":2064},"source":"https://android.googlesource.com/platform/frameworks/base/+/a6e7958ab84edbd9e5f4653d4d1f56a7438cd7dc","signature_type":"Function","target":{"function":"pushDynamicShortcut","file":"services/core/java/com/android/server/pm/ShortcutPackage.java"},"id":"ASB-A-250576066-f3677138","deprecated":false}],"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/a6e7958ab84edbd9e5f4653d4d1f56a7438cd7dc"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-250576066.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-05-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"signature_type":"Function","digest":{"function_hash":"97531938974707997750877757211182068554","length":1118},"source":"https://android.googlesource.com/platform/frameworks/base/+/2296ccfde0678b86f22e1da7bd57518f3bfafbba","id":"ASB-A-250576066-a0d978d5","target":{"function":"pushDynamicShortcut","file":"services/core/java/com/android/server/pm/ShortcutPackage.java"},"deprecated":false,"signature_version":"v1"},{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["139863919492038479745206774863257480367","206323315581079548946504532864036965495","320713686089525601840439796260115321844","54504074822801364046197543760070336546","112819135667818622446167179094097966434","305443486794261425947495537347947738044","52496095293216530187806415669181992772","90043954721652029395247301710681832898","2583973546731652273985425307414353193","41405625506682932809210278687386351834","226013295120343190781462209522498665875","68876529634684499168618134949861631031","273923886341444755969076375559086187882","284616085952041963968440058155756522585","65452582583506499115640090295345008438","172532342879144110601374080233970417022","324374432826698901441158664862637118462","127447808061736971444819786883721833855","128733845685596833468573023789068192609","153163077706541616796376872791441618058","307294065339775968206176423023106608104","162029462156746683458273888147080494042","205973053757258408909553876029435734269","251152543086343203274031177235164608745","187872204431872691416818133930619955739"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/2296ccfde0678b86f22e1da7bd57518f3bfafbba","id":"ASB-A-250576066-c98524be","target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java"},"deprecated":false,"signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"219633561347647050194707406149672564765","length":1435},"source":"https://android.googlesource.com/platform/frameworks/base/+/2296ccfde0678b86f22e1da7bd57518f3bfafbba","signature_version":"v1","target":{"function":"updateConfigurationLocked","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"signature_type":"Function","id":"ASB-A-250576066-db402f94"},{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["263319105436304544669465896104837762292","209433139401287827018802582806077355352","87903803937766089760555569733262964194","176777970042277569770102167999729227598","318293070038876033060965832004201044489","220930443646617294108905458302761787011","317626222385978607443868078557241336954","249012837729439389713894278016821472567","173971672301406110322133855611485683397","336404952339228199475508797695935597283","86974169324915387921699013212513577618","315191164901161336847818578323290075880","317862923198000710319511510430566844411","8308687824363671500918457600922454598","241253404296607784736844515963210454506","4533706422710046450914612664722107183","81775421182764501649966897227256281070"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/2296ccfde0678b86f22e1da7bd57518f3bfafbba","id":"ASB-A-250576066-dbd33f79","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"signature_version":"v1"}],"spl":"2023-05-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/2296ccfde0678b86f22e1da7bd57518f3bfafbba"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-250576066.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-05-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["112819135667818622446167179094097966434","305443486794261425947495537347947738044","52496095293216530187806415669181992772","273294942800010947632445066696433199181","182039256878973102887855388334708670016","213712598735335796825173873896994422015","226013295120343190781462209522498665875","68876529634684499168618134949861631031","273923886341444755969076375559086187882","284616085952041963968440058155756522585","65452582583506499115640090295345008438","172532342879144110601374080233970417022","324374432826698901441158664862637118462","127447808061736971444819786883721833855","128733845685596833468573023789068192609","22607210886048257108461673154602897390","176380756201037962097357587604007030118","170383425406217083133573192457904054039","205973053757258408909553876029435734269","251152543086343203274031177235164608745","187872204431872691416818133930619955739"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d","signature_version":"v1","target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java"},"signature_type":"Line","id":"ASB-A-250576066-1eb47114"},{"signature_type":"Function","id":"ASB-A-250576066-6184fe10","source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d","digest":{"function_hash":"121852738350275285628229651759622807722","length":1475},"target":{"function":"pushDynamicShortcut","file":"services/core/java/com/android/server/pm/ShortcutPackage.java"},"deprecated":false,"signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"219633561347647050194707406149672564765","length":1435},"source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d","signature_version":"v1","target":{"function":"updateConfigurationLocked","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"signature_type":"Function","id":"ASB-A-250576066-e28c9ff4"},{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["263319105436304544669465896104837762292","209433139401287827018802582806077355352","87903803937766089760555569733262964194","176777970042277569770102167999729227598","318293070038876033060965832004201044489","220930443646617294108905458302761787011","317626222385978607443868078557241336954","66687373854084663651112606406651461070","173971672301406110322133855611485683397","336404952339228199475508797695935597283","86974169324915387921699013212513577618","315191164901161336847818578323290075880","317862923198000710319511510430566844411","8308687824363671500918457600922454598","241253404296607784736844515963210454506","4533706422710046450914612664722107183","81775421182764501649966897227256281070"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d","deprecated":false,"target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"signature_version":"v1","id":"ASB-A-250576066-ee21804b"}],"spl":"2023-05-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-250576066.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-05-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"signature_version":"v1","digest":{"function_hash":"121852738350275285628229651759622807722","length":1475},"source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d","signature_type":"Function","target":{"function":"pushDynamicShortcut","file":"services/core/java/com/android/server/pm/ShortcutPackage.java"},"id":"ASB-A-250576066-29557bcc","deprecated":false},{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["263319105436304544669465896104837762292","209433139401287827018802582806077355352","87903803937766089760555569733262964194","176777970042277569770102167999729227598","318293070038876033060965832004201044489","220930443646617294108905458302761787011","317626222385978607443868078557241336954","66687373854084663651112606406651461070","173971672301406110322133855611485683397","336404952339228199475508797695935597283","86974169324915387921699013212513577618","315191164901161336847818578323290075880","317862923198000710319511510430566844411","8308687824363671500918457600922454598","241253404296607784736844515963210454506","4533706422710046450914612664722107183","81775421182764501649966897227256281070"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d","id":"ASB-A-250576066-50e13619","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"signature_version":"v1"},{"signature_version":"v1","digest":{"function_hash":"219633561347647050194707406149672564765","length":1435},"source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d","signature_type":"Function","target":{"function":"updateConfigurationLocked","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"id":"ASB-A-250576066-cb7e0b20","deprecated":false},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["112819135667818622446167179094097966434","305443486794261425947495537347947738044","52496095293216530187806415669181992772","273294942800010947632445066696433199181","182039256878973102887855388334708670016","213712598735335796825173873896994422015","226013295120343190781462209522498665875","68876529634684499168618134949861631031","273923886341444755969076375559086187882","284616085952041963968440058155756522585","65452582583506499115640090295345008438","172532342879144110601374080233970417022","324374432826698901441158664862637118462","127447808061736971444819786883721833855","128733845685596833468573023789068192609","22607210886048257108461673154602897390","176380756201037962097357587604007030118","170383425406217083133573192457904054039","205973053757258408909553876029435734269","251152543086343203274031177235164608745","187872204431872691416818133930619955739"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d","signature_version":"v1","target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java"},"signature_type":"Line","id":"ASB-A-250576066-d05f9c7d"}],"spl":"2023-05-01","severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-250576066.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-05-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"138504845774840384346845059392139743860","length":2064},"source":"https://android.googlesource.com/platform/frameworks/base/+/be9d9c04db77c2ccd22ec98d257524102f2f16a5","signature_version":"v1","target":{"function":"pushDynamicShortcut","file":"services/core/java/com/android/server/pm/ShortcutPackage.java"},"signature_type":"Function","id":"ASB-A-250576066-65857391"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["263319105436304544669465896104837762292","209433139401287827018802582806077355352","87903803937766089760555569733262964194","176777970042277569770102167999729227598","318293070038876033060965832004201044489","220930443646617294108905458302761787011","317626222385978607443868078557241336954","66687373854084663651112606406651461070","173971672301406110322133855611485683397","336404952339228199475508797695935597283","86974169324915387921699013212513577618","315191164901161336847818578323290075880","317862923198000710319511510430566844411","8308687824363671500918457600922454598","201429495463495163230532660688924447305","164883290371370547310355437226293042824","255443617585254975062586346019909869731"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/be9d9c04db77c2ccd22ec98d257524102f2f16a5","signature_version":"v1","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"signature_type":"Line","id":"ASB-A-250576066-8d7dd9b4"},{"signature_type":"Function","id":"ASB-A-250576066-9555501d","source":"https://android.googlesource.com/platform/frameworks/base/+/be9d9c04db77c2ccd22ec98d257524102f2f16a5","digest":{"function_hash":"219633561347647050194707406149672564765","length":1435},"target":{"function":"updateConfigurationLocked","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"signature_version":"v1"},{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["112819135667818622446167179094097966434","305443486794261425947495537347947738044","52496095293216530187806415669181992772","273294942800010947632445066696433199181","182039256878973102887855388334708670016","213712598735335796825173873896994422015","226013295120343190781462209522498665875","68876529634684499168618134949861631031","146675904964950339001636685030019199363","193324184626042728143722075020275764","23038817158246762162577687466723167446","74235277546563375252276512014703583595","292124414530965314300501740429402732744","159891601196343205709917921063675260670","243874798345107531105067913894287967099","313530287294025289666857944009157029531","2707482573143663031893681920786570239","134894423297946876213991423773651345330","65452582583506499115640090295345008438","38257340611505229403524659553585825240","46396027059303578089109893954900213043","127447808061736971444819786883721833855","128733845685596833468573023789068192609","22607210886048257108461673154602897390","176380756201037962097357587604007030118","145473821102774981767364482628189524482","205973053757258408909553876029435734269","251152543086343203274031177235164608745","187872204431872691416818133930619955739"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/be9d9c04db77c2ccd22ec98d257524102f2f16a5","signature_type":"Line","target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java"},"id":"ASB-A-250576066-b69a981a","deprecated":false}],"spl":"2023-05-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/be9d9c04db77c2ccd22ec98d257524102f2f16a5"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-250576066.json"}}],"schema_version":"1.7.5"}