{"id":"ASB-A-256590210","details":"In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-256590210","CVE-2023-20962"],"modified":"2026-05-26T15:46:26.044149249Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-03-01"}]}],"versions":["13-next"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"digest":{"function_hash":"112506446779645939618809771884614919549","length":1369},"target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java","function":"getSliceEndItem"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a","signature_type":"Function","id":"ASB-A-256590210-1c3a4f7b","signature_version":"v1","deprecated":false},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a","digest":{"line_hashes":["2515871916174150255799763824649463257","298836900560150201302479999804498096907","69522089916178489900932734138740572745","57865836528454852670306520309248702019","37781278548710382719472231090868775778","48545541848750326640869001537836142463","48365835297228604622638209361776787666","85808235985644850924488554010393157934"],"threshold":0.9},"id":"ASB-A-256590210-7955dfd0","signature_type":"Line","target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java"},"signature_version":"v1","deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a"],"types":["ID"],"spl":"2023-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-256590210.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java","function":"getSliceEndItem"},"id":"ASB-A-256590210-527d4d71","digest":{"function_hash":"229157261693608242773145203535346763423","length":1239},"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0dcd6a5492fae67e0d7f1fb83f6d4db7eaa15b55","signature_version":"v1","deprecated":false},{"target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0dcd6a5492fae67e0d7f1fb83f6d4db7eaa15b55","id":"ASB-A-256590210-7f81de89","signature_type":"Line","digest":{"line_hashes":["2515871916174150255799763824649463257","298836900560150201302479999804498096907","69522089916178489900932734138740572745","57865836528454852670306520309248702019","65900709389474950378267103208749820698","189586809716431586901542998965821551222","48365835297228604622638209361776787666","85808235985644850924488554010393157934"],"threshold":0.9},"signature_version":"v1","deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/0dcd6a5492fae67e0d7f1fb83f6d4db7eaa15b55"],"types":["ID"],"spl":"2023-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-256590210.json"}}],"schema_version":"1.7.5"}