{"id":"PUB-A-246750467","details":"In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-246750467","CVE-2023-20999"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["333909502572637350254575411617029527565","71119825256875954793588215558956123656","183636523337613638614260686233165493483","260757368009967888633462593031057031062"]},"id":"PUB-A-246750467-0e4f50d7","deprecated":false,"signature_version":"v1","target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"}},{"signature_type":"Line","target":{"file":"services/core/java/com/android/server/pm/PreferredActivityHelper.java"},"digest":{"threshold":0.9,"line_hashes":["279912400626022739138427290625382397145","132826694883517297373598954230676465802","121876994837889994575555354132856331238","306689344806679354061660248634602379314","167720786307100582346939081219941766805","53254870991677183784443954544874008036","12675648155970293321718287878686190954","209025369150670861404556002964603713688"]},"id":"PUB-A-246750467-56bb019d","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","signature_version":"v1"},{"target":{"file":"core/java/android/os/PatternMatcher.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["185172673667394821057040888178185855686","168755391003902483147454097930233846694","118359020763303613638789440506146290863","254443724483560403493984571636500727978"]},"signature_type":"Line","match_only_versions":["13"],"id":"PUB-A-246750467-5d216730","deprecated":false},{"target":{"file":"core/java/android/content/IntentFilter.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","match_only_versions":["13"],"signature_version":"v1","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["244099178048703686799889249578382494630","87757709127002976124648166301533588272","263073503298371768976632595349144114364"]},"id":"PUB-A-246750467-69bd56a6","deprecated":false},{"signature_version":"v1","signature_type":"Function","digest":{"length":950,"function_hash":"233316096577551699801006799542387108229"},"id":"PUB-A-246750467-b5f05252","deprecated":false,"target":{"function":"addCrossProfileIntentFilter","file":"services/core/java/com/android/server/pm/PackageManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"},{"target":{"file":"services/core/java/com/android/server/pm/WatchedIntentFilter.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","match_only_versions":["13"],"id":"PUB-A-246750467-da996657","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["28765179891852124875360932244760138810","107881260498526304342166441944131280985","320716616228806852363083062970979268624"]},"signature_version":"v1","deprecated":false},{"signature_type":"Function","target":{"function":"addPersistentPreferredActivity","file":"services/core/java/com/android/server/pm/PreferredActivityHelper.java"},"digest":{"length":824,"function_hash":"327553553477137823602492266032538602024"},"id":"PUB-A-246750467-e3ac8b95","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9","signature_version":"v1"}],"types":["DoS"],"severity":"Moderate","spl":"2023-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-246750467.json"}}],"schema_version":"1.7.5"}