{"id":"ASB-A-256590210","details":"In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-256590210","CVE-2023-20962"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-03-01"}]}],"versions":["13-next"],"ecosystem_specific":{"severity":"High","spl":"2023-03-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a","target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java","function":"getSliceEndItem"},"deprecated":false,"digest":{"length":1369,"function_hash":"112506446779645939618809771884614919549"},"id":"ASB-A-256590210-1c3a4f7b","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a","target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java"},"deprecated":false,"digest":{"line_hashes":["2515871916174150255799763824649463257","298836900560150201302479999804498096907","69522089916178489900932734138740572745","57865836528454852670306520309248702019","37781278548710382719472231090868775778","48545541848750326640869001537836142463","48365835297228604622638209361776787666","85808235985644850924488554010393157934"],"threshold":0.9},"id":"ASB-A-256590210-7955dfd0","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-256590210.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0dcd6a5492fae67e0d7f1fb83f6d4db7eaa15b55","target":{"function":"getSliceEndItem","file":"src/com/android/settings/notification/MediaVolumePreferenceController.java"},"deprecated":false,"digest":{"function_hash":"229157261693608242773145203535346763423","length":1239},"id":"ASB-A-256590210-527d4d71","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java"},"deprecated":false,"digest":{"line_hashes":["2515871916174150255799763824649463257","298836900560150201302479999804498096907","69522089916178489900932734138740572745","57865836528454852670306520309248702019","65900709389474950378267103208749820698","189586809716431586901542998965821551222","48365835297228604622638209361776787666","85808235985644850924488554010393157934"],"threshold":0.9},"id":"ASB-A-256590210-7f81de89","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0dcd6a5492fae67e0d7f1fb83f6d4db7eaa15b55"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/0dcd6a5492fae67e0d7f1fb83f6d4db7eaa15b55"],"severity":"High","spl":"2023-03-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-256590210.json"}}],"schema_version":"1.9.0"}