{"id":"ASB-A-250589026","details":"In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-250589026","CVE-2023-20960"],"modified":"2026-05-26T15:46:26.044149249Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/23412ad94a4f74d93d9daf3271d4c013c6fb8e58"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/f964b68feee28f29e284221cd9c902a8abbb2dc7"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/95ff0752446fa7da96e60f1aa1bdacf104907764"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-03-01"}]}],"versions":["13-next"],"ecosystem_specific":{"spl":"2023-03-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/c3141fa91147fc0d9128f11071bd646d049f4b5a","https://android.googlesource.com/platform/packages/apps/Settings/+/1a49146508c82f719a8f500b1b7d50d90d1f57cb","https://android.googlesource.com/platform/packages/apps/Settings/+/0c18e8990c8cff93798fca7efb4fd06beb6611bd"],"types":["EoP"],"severity":"High","vanir_signatures":[{"digest":{"length":2539,"function_hash":"339421717270082967262275541619017842136"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1a49146508c82f719a8f500b1b7d50d90d1f57cb","id":"ASB-A-250589026-4653285b","target":{"function":"launchDeepLinkIntentToRight","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c3141fa91147fc0d9128f11071bd646d049f4b5a","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["19889703709643230488778874176412450130","58132085359130408064566981382968716564","158140440155223958624199652509803424124","240446787160798014109067111765586555296","40634345392637169147082143391141836917","243079669508775449528771644024702410519","46125533419279030785052189527591963180","155453018098868068692857679935943795376","208391914246697731056143312329637714581","180315719519565156681574041963180082389","303286173403469396541551464862290456344","161517627858608494507889177611303110769","241332110960668271551896344741156299646","99757496631693121228548180803939082625","245156924449676098785869003413302747187"]},"target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Line","id":"ASB-A-250589026-4dc87418"},{"digest":{"length":1923,"function_hash":"24380505762495570664279962281205100398"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/c3141fa91147fc0d9128f11071bd646d049f4b5a","target":{"function":"launchDeepLinkIntentToRight","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Function","id":"ASB-A-250589026-54d6a026"},{"digest":{"length":776,"function_hash":"179007188764865184077512315624074331826"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0c18e8990c8cff93798fca7efb4fd06beb6611bd","signature_version":"v1","signature_type":"Function","id":"ASB-A-250589026-67f2644d","target":{"function":"hasPrivilegedAccess","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"}},{"digest":{"threshold":0.9,"line_hashes":["279001664620559821039327681521744713323","121848592500763049162629720978306299042","266681223894601969669553490837426827867","22501573967827479589136736356387917634","73362776874150102349739150773389548885","166675980660359806194381639092935511269","161517627858608494507889177611303110769","97122821754810891388058054792915903440","137331323032868630210459966031857916047","325650289632194185458797874617594052508","107115511119344962959782955780790120586","218175375021224294036182551920933626664","111617273830044295002543004954162935568","323735617409954472858062057115385234496","262646873950258666471571453293369551395","102600391902106702682419807621370759860","149149902581443407792017138648236229797","19478771865707359211088310935574037641","250357508606991189553214358717752531411","179678239652480956958923969440302926473","223274336014301246156429891483789781796","285080588398437311645964231559474726463"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0c18e8990c8cff93798fca7efb4fd06beb6611bd","signature_version":"v1","signature_type":"Line","id":"ASB-A-250589026-6ec29ad2","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"}},{"digest":{"length":2454,"function_hash":"240452586968966900727690033827188499916"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0c18e8990c8cff93798fca7efb4fd06beb6611bd","id":"ASB-A-250589026-87b29671","target":{"function":"launchDeepLinkIntentToRight","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["96853627072202321601979615406377984092","129637261089028594323390862762482315262","158974529263604796097333864534803461755","317202621517561104950015159086261898572","215351192949000577678557906525404601221","139883733641404800436845491007955882674","35529274653875053700670340285732519952","134185449990923178857248208953814102684","55482394578634608527976766338064574937","297935819184373740089850799222408589935","339274332969742977069216660171244180037","219456573291838433529742558373648438725","305813723206918506200606996142269263314","243284249451979974689967824885550164285","332650477830802640915889058868925074882","169697112848468621755471600210040999006","111815228042114161374480079867852065288","199754703728896267472723952964689091990","152519958985905396308246001784585535083","213364364349878563343713287693281805444","158643977296960506799112394821889109345","117217185018086354671765608732309492961","180718939313278496677208509002453749131"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1a49146508c82f719a8f500b1b7d50d90d1f57cb","signature_type":"Line","id":"ASB-A-250589026-c368295d","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-250589026.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-03-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"length":776,"function_hash":"179007188764865184077512315624074331826"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/17cd85b946a71a3afaa569da326ac029f28c7794","signature_version":"v1","signature_type":"Function","id":"ASB-A-250589026-019df5cf","target":{"function":"hasPrivilegedAccess","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"}},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/960c96474dcf17ee7f306e1496f5fab223b2500e","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["39551354632991716986533204900880133235","46352627204329243714218300273680632049","71171198155687323734198601282655784781","241663556783717717296030283401253021059","215351192949000577678557906525404601221","139883733641404800436845491007955882674","35529274653875053700670340285732519952","134185449990923178857248208953814102684","55482394578634608527976766338064574937","297935819184373740089850799222408589935","339274332969742977069216660171244180037","219456573291838433529742558373648438725","305813723206918506200606996142269263314","243284249451979974689967824885550164285","332650477830802640915889058868925074882","169697112848468621755471600210040999006","111815228042114161374480079867852065288","199754703728896267472723952964689091990","152519958985905396308246001784585535083","213364364349878563343713287693281805444","130356810215943214823021689997587792122","51885661069432670765141214962956676881","180718939313278496677208509002453749131"]},"target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Line","id":"ASB-A-250589026-1865b5b8"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/17cd85b946a71a3afaa569da326ac029f28c7794","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["279001664620559821039327681521744713323","121848592500763049162629720978306299042","266681223894601969669553490837426827867","22501573967827479589136736356387917634","178147690360388402603895373963871279820","129832155868984039471414466489221904381","168868138148469505122814965986863330022","92624326139116946529668164688011475632","196310943967410537879892291701272256952","325650289632194185458797874617594052508","107115511119344962959782955780790120586","218175375021224294036182551920933626664","111617273830044295002543004954162935568","323735617409954472858062057115385234496","262646873950258666471571453293369551395","102600391902106702682419807621370759860","149149902581443407792017138648236229797","19478771865707359211088310935574037641","250357508606991189553214358717752531411","179678239652480956958923969440302926473","223274336014301246156429891483789781796","285080588398437311645964231559474726463"]},"target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Line","id":"ASB-A-250589026-1d1e47b5"},{"digest":{"length":2483,"function_hash":"267239687638447741246746769882060974789"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/960c96474dcf17ee7f306e1496f5fab223b2500e","id":"ASB-A-250589026-b3d94c3d","target":{"function":"launchDeepLinkIntentToRight","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fef9b97498b66d3e069feb2836701118bc41a63f","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["19889703709643230488778874176412450130","65379301213402217192144709545161134569","99072443548216301919171432832858765860","336986885691285784681492164858773842786","317772497578446096364035886651506983707","81322631065583234041859669015948942267","269672235383604724213261202439668286628","40634345392637169147082143391141836917","261123763270713304772223437745797850351","260213371996524025825568459749116062943","70500076515026072888506738331401011190","208391914246697731056143312329637714581","180315719519565156681574041963180082389","303286173403469396541551464862290456344","83454143584368830700814898929441543052","232433288306299403488564828328464688880","222068756629326058536898525545910010934","245156924449676098785869003413302747187"]},"target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Line","id":"ASB-A-250589026-c570cc7f"},{"digest":{"length":1867,"function_hash":"181591751518348970939000475911533666535"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fef9b97498b66d3e069feb2836701118bc41a63f","id":"ASB-A-250589026-cbc478d6","target":{"function":"launchDeepLinkIntentToRight","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Function"},{"digest":{"function_hash":"46098711828778360950723011065517612322","length":2398},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/17cd85b946a71a3afaa569da326ac029f28c7794","signature_version":"v1","signature_type":"Function","id":"ASB-A-250589026-dfcec170","target":{"function":"launchDeepLinkIntentToRight","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/fef9b97498b66d3e069feb2836701118bc41a63f","https://android.googlesource.com/platform/packages/apps/Settings/+/960c96474dcf17ee7f306e1496f5fab223b2500e","https://android.googlesource.com/platform/packages/apps/Settings/+/17cd85b946a71a3afaa569da326ac029f28c7794"],"types":["EoP"],"severity":"High","spl":"2023-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-250589026.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-03-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/434c8934c4aa416931a66626016d94712e47d617","https://android.googlesource.com/platform/packages/apps/Settings/+/04989073225435ffdbd04f795dcc99c269fa35d5","https://android.googlesource.com/platform/packages/apps/Settings/+/0f7f913281fff39d533b4ae325ba2fd11f0ae204"],"types":["EoP"],"severity":"High","vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0f7f913281fff39d533b4ae325ba2fd11f0ae204","deprecated":false,"digest":{"length":2542,"function_hash":"134543286869365308168318520896259825410"},"target":{"function":"launchDeepLinkIntentToRight","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Function","id":"ASB-A-250589026-058a6362"},{"digest":{"function_hash":"10088607538663335582578413175090232814","length":2011},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/434c8934c4aa416931a66626016d94712e47d617","signature_type":"Function","id":"ASB-A-250589026-10782d60","target":{"function":"launchDeepLinkIntentToRight","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["279001664620559821039327681521744713323","121848592500763049162629720978306299042","266681223894601969669553490837426827867","22501573967827479589136736356387917634","178147690360388402603895373963871279820","129832155868984039471414466489221904381","168868138148469505122814965986863330022","97122821754810891388058054792915903440","137331323032868630210459966031857916047","325650289632194185458797874617594052508","107115511119344962959782955780790120586","218175375021224294036182551920933626664","111617273830044295002543004954162935568","323735617409954472858062057115385234496","262646873950258666471571453293369551395","102600391902106702682419807621370759860","149149902581443407792017138648236229797","19478771865707359211088310935574037641","250357508606991189553214358717752531411","179678239652480956958923969440302926473","223274336014301246156429891483789781796","285080588398437311645964231559474726463"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0f7f913281fff39d533b4ae325ba2fd11f0ae204","signature_version":"v1","signature_type":"Line","id":"ASB-A-250589026-1f1b55c0","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"}},{"digest":{"function_hash":"179007188764865184077512315624074331826","length":776},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0f7f913281fff39d533b4ae325ba2fd11f0ae204","signature_version":"v1","signature_type":"Function","id":"ASB-A-250589026-64b47b43","target":{"function":"hasPrivilegedAccess","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"}},{"digest":{"threshold":0.9,"line_hashes":["96853627072202321601979615406377984092","129637261089028594323390862762482315262","158974529263604796097333864534803461755","317202621517561104950015159086261898572","215351192949000577678557906525404601221","139883733641404800436845491007955882674","35529274653875053700670340285732519952","134185449990923178857248208953814102684","55482394578634608527976766338064574937","297935819184373740089850799222408589935","339274332969742977069216660171244180037","219456573291838433529742558373648438725","305813723206918506200606996142269263314","243284249451979974689967824885550164285","332650477830802640915889058868925074882","169697112848468621755471600210040999006","111815228042114161374480079867852065288","199754703728896267472723952964689091990","152519958985905396308246001784585535083","213364364349878563343713287693281805444","158643977296960506799112394821889109345","117217185018086354671765608732309492961","180718939313278496677208509002453749131"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/04989073225435ffdbd04f795dcc99c269fa35d5","signature_version":"v1","signature_type":"Line","id":"ASB-A-250589026-85f1098c","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"}},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/04989073225435ffdbd04f795dcc99c269fa35d5","deprecated":false,"digest":{"length":2627,"function_hash":"173955643565711437913128154602182163243"},"target":{"function":"launchDeepLinkIntentToRight","file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"},"signature_version":"v1","signature_type":"Function","id":"ASB-A-250589026-a807dc12"},{"digest":{"threshold":0.9,"line_hashes":["19889703709643230488778874176412450130","58132085359130408064566981382968716564","158140440155223958624199652509803424124","240446787160798014109067111765586555296","333508925477177995037790987873290650351","31436569120441341541425603011400885872","267017598387022532936727623388492570071","40634345392637169147082143391141836917","261123763270713304772223437745797850351","260213371996524025825568459749116062943","70500076515026072888506738331401011190","208391914246697731056143312329637714581","180315719519565156681574041963180082389","303286173403469396541551464862290456344","161517627858608494507889177611303110769","241332110960668271551896344741156299646","99757496631693121228548180803939082625","245156924449676098785869003413302747187"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/434c8934c4aa416931a66626016d94712e47d617","signature_version":"v1","signature_type":"Line","id":"ASB-A-250589026-f4e77545","target":{"file":"src/com/android/settings/homepage/SettingsHomepageActivity.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-250589026.json"}}],"schema_version":"1.7.5"}