{"id":"PUB-A-246749702","details":"In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-246749702","CVE-2023-20997"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["333909502572637350254575411617029527565","71119825256875954793588215558956123656","183636523337613638614260686233165493483","260757368009967888633462593031057031062"]},"id":"PUB-A-246749702-0e4f50d7","signature_type":"Line","signature_version":"v1"},{"id":"PUB-A-246749702-56bb019d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","target":{"file":"services/core/java/com/android/server/pm/PreferredActivityHelper.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["279912400626022739138427290625382397145","132826694883517297373598954230676465802","121876994837889994575555354132856331238","306689344806679354061660248634602379314","167720786307100582346939081219941766805","53254870991677183784443954544874008036","12675648155970293321718287878686190954","209025369150670861404556002964603713688"]}},{"match_only_versions":["13"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","target":{"file":"core/java/android/os/PatternMatcher.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["185172673667394821057040888178185855686","168755391003902483147454097930233846694","118359020763303613638789440506146290863","254443724483560403493984571636500727978"]},"id":"PUB-A-246749702-5d216730"},{"digest":{"line_hashes":["244099178048703686799889249578382494630","87757709127002976124648166301533588272","263073503298371768976632595349144114364"],"threshold":0.9},"id":"PUB-A-246749702-69bd56a6","match_only_versions":["13"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","target":{"file":"core/java/android/content/IntentFilter.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java","function":"addCrossProfileIntentFilter"},"deprecated":false,"digest":{"function_hash":"233316096577551699801006799542387108229","length":950},"id":"PUB-A-246749702-b5f05252"},{"deprecated":false,"digest":{"line_hashes":["28765179891852124875360932244760138810","107881260498526304342166441944131280985","320716616228806852363083062970979268624"],"threshold":0.9},"id":"PUB-A-246749702-da996657","match_only_versions":["13"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","target":{"file":"services/core/java/com/android/server/pm/WatchedIntentFilter.java"}},{"target":{"file":"services/core/java/com/android/server/pm/PreferredActivityHelper.java","function":"addPersistentPreferredActivity"},"deprecated":false,"digest":{"length":824,"function_hash":"327553553477137823602492266032538602024"},"id":"PUB-A-246749702-e3ac8b95","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"],"severity":"Moderate","spl":"2023-03-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-246749702.json"}}],"schema_version":"1.9.0"}