{"id":"ASB-A-152410253", "published":"2020-11-01T00:00:00Z", "modified":"2026-07-09T15:25:53.339171538Z", "aliases":["CVE-2020-0443", "A-152410253"], "details":"In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11-next:0"}, {"fixed":"11-next:2020-11-01"}]}], "versions":["11-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fc8c211b436aa180818780a6ade107ad30835ef8"], "severity":"High", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"218394951640414420131403036718256549110", "length":780}, "id":"ASB-A-152410253-12d6dc74", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fc8c211b436aa180818780a6ade107ad30835ef8", "target":{"file":"core/java/android/os/LocaleList.java", "function":"LocaleList"}}, {"deprecated":false, "digest":{"line_hashes":["238487461557116481160416789943526316578", "32027329562363148066235216704948684469", "6450490191593189495233696722595877326", "73388818347119991988904423319481610072", "272986309234537080517993031560764523350", "32097239875320529168527908272061092240", "318124226491304976564873318912165140082", "333584428783147966841085669186502910250", "34417344497872019430302121069418403171", "195889735690768428855513666674587252252", "212146682679397118315602545021072673838", "45174680695960703710935086057729628656", "305292988939046770344531645153321276853", "207146939348857617032754500415336215343", "68520971589585554838460114790604608647", "268656213761657529005050364040975899650", "144999557970145722941669838172869014584", "60140273924020988673939475368939194191", "259519413668449196367552216458630761983", "92217418968860299458545339788500322246", "156943549789793866827804431486514372844", "187424443712129743225799409001096826496", "82879933959107798733564740523379219993"], "threshold":0.9}, "id":"ASB-A-152410253-a12b04ad", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fc8c211b436aa180818780a6ade107ad30835ef8", "target":{"file":"core/java/android/os/LocaleList.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.0:0"}, {"fixed":"8.0:2020-11-01"}]}], "versions":["8.0"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2cb650f9d0ea3767faf75a084bc9a566b2726234"], "severity":"High", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"218394951640414420131403036718256549110", "length":780}, "id":"ASB-A-152410253-59a191c6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2cb650f9d0ea3767faf75a084bc9a566b2726234", "target":{"file":"core/java/android/os/LocaleList.java", "function":"LocaleList"}}, {"deprecated":false, "digest":{"line_hashes":["10299455753403115806136687540556132022", "32027329562363148066235216704948684469", "6450490191593189495233696722595877326", "73388818347119991988904423319481610072", "272986309234537080517993031560764523350", "32097239875320529168527908272061092240", "318124226491304976564873318912165140082", "333584428783147966841085669186502910250", "34417344497872019430302121069418403171", "195889735690768428855513666674587252252", "212146682679397118315602545021072673838", "45174680695960703710935086057729628656", "305292988939046770344531645153321276853", "207146939348857617032754500415336215343", "68520971589585554838460114790604608647", "268656213761657529005050364040975899650", "144999557970145722941669838172869014584", "60140273924020988673939475368939194191", "259519413668449196367552216458630761983", "92217418968860299458545339788500322246", "156943549789793866827804431486514372844", "187424443712129743225799409001096826496", "82879933959107798733564740523379219993"], "threshold":0.9}, "id":"ASB-A-152410253-c3976b82", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2cb650f9d0ea3767faf75a084bc9a566b2726234", "target":{"file":"core/java/android/os/LocaleList.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2020-11-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/142ce41bfadbbe984cb42484b98b1dddf4483c91"], "severity":"High", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"218394951640414420131403036718256549110", "length":780}, "id":"ASB-A-152410253-04a40b10", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/142ce41bfadbbe984cb42484b98b1dddf4483c91", "target":{"file":"core/java/android/os/LocaleList.java", "function":"LocaleList"}}, {"deprecated":false, "digest":{"line_hashes":["10299455753403115806136687540556132022", "32027329562363148066235216704948684469", "6450490191593189495233696722595877326", "73388818347119991988904423319481610072", "272986309234537080517993031560764523350", "32097239875320529168527908272061092240", "318124226491304976564873318912165140082", "333584428783147966841085669186502910250", "34417344497872019430302121069418403171", "195889735690768428855513666674587252252", "212146682679397118315602545021072673838", "45174680695960703710935086057729628656", "305292988939046770344531645153321276853", "207146939348857617032754500415336215343", "68520971589585554838460114790604608647", "268656213761657529005050364040975899650", "144999557970145722941669838172869014584", "60140273924020988673939475368939194191", "259519413668449196367552216458630761983", "92217418968860299458545339788500322246", "156943549789793866827804431486514372844", "187424443712129743225799409001096826496", "82879933959107798733564740523379219993"], "threshold":0.9}, "id":"ASB-A-152410253-112b2f8e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/142ce41bfadbbe984cb42484b98b1dddf4483c91", "target":{"file":"core/java/android/os/LocaleList.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2020-11-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/33ee46389e535565ae6d827438ec1d7faef1368a"], "severity":"High", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"218394951640414420131403036718256549110", "length":780}, "id":"ASB-A-152410253-452a3a57", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/33ee46389e535565ae6d827438ec1d7faef1368a", "target":{"file":"core/java/android/os/LocaleList.java", "function":"LocaleList"}}, {"deprecated":false, "digest":{"line_hashes":["168429144034833769415374479843019930405", "14706619227349896405074417952047569956", "6450490191593189495233696722595877326", "73388818347119991988904423319481610072", "272986309234537080517993031560764523350", "32097239875320529168527908272061092240", "318124226491304976564873318912165140082", "333584428783147966841085669186502910250", "34417344497872019430302121069418403171", "195889735690768428855513666674587252252", "212146682679397118315602545021072673838", "45174680695960703710935086057729628656", "305292988939046770344531645153321276853", "207146939348857617032754500415336215343", "68520971589585554838460114790604608647", "268656213761657529005050364040975899650", "144999557970145722941669838172869014584", "60140273924020988673939475368939194191", "259519413668449196367552216458630761983", "92217418968860299458545339788500322246", "156943549789793866827804431486514372844", "187424443712129743225799409001096826496", "82879933959107798733564740523379219993"], "threshold":0.9}, "id":"ASB-A-152410253-bb86e8c4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/33ee46389e535565ae6d827438ec1d7faef1368a", "target":{"file":"core/java/android/os/LocaleList.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2020-11-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3d25b3b9b4913e5bdc25dcbe51179276e4359ba8"], "severity":"High", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"218394951640414420131403036718256549110", "length":780}, "id":"ASB-A-152410253-c451b198", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d25b3b9b4913e5bdc25dcbe51179276e4359ba8", "target":{"file":"core/java/android/os/LocaleList.java", "function":"LocaleList"}}, {"deprecated":false, "digest":{"line_hashes":["127254608364221301017949977070807498925", "32027329562363148066235216704948684469", "6450490191593189495233696722595877326", "73388818347119991988904423319481610072", "272986309234537080517993031560764523350", "32097239875320529168527908272061092240", "318124226491304976564873318912165140082", "333584428783147966841085669186502910250", "34417344497872019430302121069418403171", "195889735690768428855513666674587252252", "212146682679397118315602545021072673838", "45174680695960703710935086057729628656", "305292988939046770344531645153321276853", "207146939348857617032754500415336215343", "68520971589585554838460114790604608647", "268656213761657529005050364040975899650", "144999557970145722941669838172869014584", "60140273924020988673939475368939194191", "259519413668449196367552216458630761983", "92217418968860299458545339788500322246", "156943549789793866827804431486514372844", "187424443712129743225799409001096826496", "82879933959107798733564740523379219993"], "threshold":0.9}, "id":"ASB-A-152410253-f14e985d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d25b3b9b4913e5bdc25dcbe51179276e4359ba8", "target":{"file":"core/java/android/os/LocaleList.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2020-11-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7ee68787cca0837f59658d5174e1d586dfe80ad4"], "severity":"High", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"218394951640414420131403036718256549110", "length":780}, "id":"ASB-A-152410253-49e95c7e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7ee68787cca0837f59658d5174e1d586dfe80ad4", "target":{"file":"core/java/android/os/LocaleList.java", "function":"LocaleList"}}, {"deprecated":false, "digest":{"line_hashes":["238487461557116481160416789943526316578", "32027329562363148066235216704948684469", "6450490191593189495233696722595877326", "73388818347119991988904423319481610072", "272986309234537080517993031560764523350", "32097239875320529168527908272061092240", "318124226491304976564873318912165140082", "333584428783147966841085669186502910250", "34417344497872019430302121069418403171", "195889735690768428855513666674587252252", "212146682679397118315602545021072673838", "45174680695960703710935086057729628656", "305292988939046770344531645153321276853", "207146939348857617032754500415336215343", "68520971589585554838460114790604608647", "268656213761657529005050364040975899650", "144999557970145722941669838172869014584", "60140273924020988673939475368939194191", "259519413668449196367552216458630761983", "92217418968860299458545339788500322246", "156943549789793866827804431486514372844", "187424443712129743225799409001096826496", "82879933959107798733564740523379219993"], "threshold":0.9}, "id":"ASB-A-152410253-b54d16cb", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7ee68787cca0837f59658d5174e1d586dfe80ad4", "target":{"file":"core/java/android/os/LocaleList.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2020-11-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/d3a2b5832f6ca9da74cda814ec76aec679b3389a"}]}