{"id":"ASB-A-153879813", "published":"2020-11-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2020-0418", "A-153879813"], "details":"In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/PackageInstaller", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11-next:0"}, {"fixed":"11-next:2020-11-01"}]}], "versions":["11-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326"], "severity":"High", "spl":"2020-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["37925561105198431630717745790828790684", "219287598882371033529806209618474068027", "298763219835494780669175459853844982874", "209655467123332919768863699961963627156", "40114476709787190422983461599401703534", "247353648771061224465061843466230902834", "76352909448916489125446734972169222230", "181897413462654198924741599906239203466", "287533071508793355115780566379354344535", "71171353936523782008731091691351139718", "56064697485911087042407131353651945496"], "threshold":0.9}, "id":"ASB-A-153879813-09ab3b44", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/AppPermissionActivity.java"}}, {"deprecated":false, "digest":{"line_hashes":["315632021902950073329438787307376568481", "261916289649077366168711332859027657550", "312666148479856056165833947207930468263", "195274880116815738658686983971960448149", "304364707912588388963284692455970177592", "169008971192786616617681705135161989896", "261759793356371998045026300995922035658", "70910198186196192214606322475080963584", "101210631309914025099179111628005223085", "78568229840689730595097465199250759032", "268690232495153323947015627442530225006", "144232311752542731695671407028254779303", "258490661488857709760280150728044743506", "127998766776323917095608392885645692069", "182874484485167770165689928578842610386", "119806966164046371368007162585019497215", "178202993728459695866790588932346413683", "277097042280809402697502777302815815355", "235307374399567114252592690014191648561", "223410786167399526904708904927790308484", "201733335352420824795653814057274395036", "100225958177266062541135526911531198889", "215471952254974892038785341178838995569", "60513016204536019508541297369582452455", "211744090877283438027651630079088559126", "38727064947208784485551288058278673731", "26429971252028574250485110051578280831", "209661605481822543987240273134127280467", "161972996676335062437501776225066573507", "76201354548455460964940916669867334675", "175991905828121461065502542088594567986", "240219597786972104956372912372852174579", "278087052742512136192999115683898963316", "75686290068209577439597857272780025855", "23402386752393102897487032946079120352"], "threshold":0.9}, "id":"ASB-A-153879813-134ae616", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java"}}, {"deprecated":false, "digest":{"function_hash":"97638338110788014445327403786247247325", "length":63}, "id":"ASB-A-153879813-1ca899ac", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"77508562250161306438632359657420739590", "length":44}, "id":"ASB-A-153879813-48ce92d7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java", "function":"getPermissions"}}, {"deprecated":false, "digest":{"function_hash":"177043306142393696012957388116413227996", "length":43}, "id":"ASB-A-153879813-66f07063", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManageCustomPermissionsFragment.java", "function":"updatePermissionsUi"}}, {"deprecated":false, "digest":{"function_hash":"265275345214550851928026134854060496519", "length":1612}, "id":"ASB-A-153879813-7533ab72", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/AppPermissionActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"137029480368865936152179341224023352446", "length":420}, "id":"ASB-A-153879813-8c518ad5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["240421885281523220504737685699711607772", "133354012011649426688162836859297628638", "25028548583884681085987705913039428237", "69758756908463145193305519404754820027", "275542392431003576653830777602722618246", "168908835039623807735102151135103618432", "281605528389519518340692967754458886837", "94931240325969579977278641106554102332", "98679556559382798801416737210061356470", "330821720142973818836467177343221116263", "261512736778151672603723003679402458732", "96656247510146617664616861570430156625", "221278426452134745709784690705762199815", "248723125539946056433034484526563710787", "38643054319455062848419412135673511789", "276505574018708649404093798535526013816", "168987274960068579136661251256333743730", "21413999799850174146843212392083567212", "248243721026397703906763323299333520053", "30154083117587905605945493552034046400", "150158541092085987314545093814444774336", "253352426661235099776316685435256914049", "132856444806108926521627483339596441515", "67226570156706152626174148739501866073", "89115162934441166927156231714146684864", "317790907848113193071553698658452212246", "156616898090401647040918786932045401634", "42249644254584273393259405587853602333", "29950546620506361516550174430781394968", "37359656501852956259305044897301679331", "325031903715653389434578030197016753048", "107790734375637638403041833638143865738", "188315162464040997967792144609126303629", "209065030976753715376694121495634329938", "126664468216838655130284199776972278678", "234453886225269847878285348963026183434", "309231848129758958582587949422103313807", "161760655162483629612550961537987333475", "281318861011048426723543960756078887132", "49257161228209947466390173692829946194", "206148232200886207759694016645808523312", "91615939155803316952164922375811166473", "2440771630730657362233805257221300552", "307450721061485424692793785229964889838", "58933388320043690982168261429130660557", "67660034922338739407562148616264764771", "15032390110756356597189892254947851697", "191197004601953152390210658693312256515", "70556117699155999567490026638785557847", "30550012090436760585487627536411960023", "157891645500743814206343216225000712175", "236625591762049778969221982855620946523", "55987373683958908957739053327409640092", "72284964350901152879245029171661512011", "269662719625918520261262134303043136905", "231131478662582047306267489594937787393", "231197660515699879566363531401410138648", "156017262202790837782151132751556589191", "214786656202815865377903246378114347517", "63611131708361068021078992448707462127", "269078685590062059480691661441620337093", "99260633492693603214009222294315847351", "273519930856175810104219443053804647120", "199326235507753559172400817120390676364", "11995834029232317693757157597574476796", "161347243583608689717915535235880491817", "7261633179225423013425236374354277522", "183663134470502461380912674462487810956", "146224542669151959093025228705316451319", "178645576261877285419209672062826544963", "320800175989783525817083741037613574991", "3909593436085849150221466120503982378", "168583469155591975393374374793447944927", "234985698718584228430379092668016110384", "113885355849063439600296448097371970809", "165067328281243776711567823522485275418", "69915225373839479242231542521371760173"], "threshold":0.9}, "id":"ASB-A-153879813-91648bda", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java"}}, {"deprecated":false, "digest":{"line_hashes":["110099095951763546534456953554164949511", "192661012282718645500055210439664582322", "108409893385006154114697267565505121947", "5594895317219537006712694639670392148", "56973588922552945113402326847348679294", "97980882823056707073981587727983692870", "4439615171372414052146478269376545725", "61418336610958516805053548442293889981", "146031582152571818741982535435403937867", "220830402357624645707541772088021142512", "64770946434387703184095910757083661301"], "threshold":0.9}, "id":"ASB-A-153879813-945a761b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/utils/Utils.java"}}, {"deprecated":false, "digest":{"function_hash":"227845937029046851892533576030166535850", "length":1224}, "id":"ASB-A-153879813-96a3d553", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java", "function":"updatePermissionsUi"}}, {"deprecated":false, "digest":{"line_hashes":["268161710305744900132231279765458430802", "66779987153428475293412003723736464654", "287047369144279941626281801633306636001", "26102362043560212234854302899996703792", "337482907000638804251220540090491886041", "53267559892298747375929259396119512255", "75844506737463162174135050609710425133", "287523481456116284029263113434566365612", "109193520002395164497285531273961489193", "235307374399567114252592690014191648561", "221709491476990488272978692603337461265", "46899209564565260189249461678550389599", "190413120792584766526414646190547651925"], "threshold":0.9}, "id":"ASB-A-153879813-c7adc430", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManageCustomPermissionsFragment.java"}}, {"deprecated":false, "digest":{"function_hash":"208972022311035733844886350694903749572", "length":37}, "id":"ASB-A-153879813-c96a1676", "match_only_versions":["11-next"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java", "function":"onPermissionGroupsChanged"}}, {"deprecated":false, "digest":{"function_hash":"266955580306784250954883025052735837438", "length":211}, "id":"ASB-A-153879813-ceecbae7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/utils/Utils.java", "function":"getPermissionInfosForGroup"}}, {"deprecated":false, "digest":{"function_hash":"304993889737481510896831156289748759116", "length":20}, "id":"ASB-A-153879813-d042f902", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java", "function":"updatePermissionsUi"}}, {"deprecated":false, "digest":{"function_hash":"303283544610584327529046130986039057895", "length":1176}, "id":"ASB-A-153879813-eacff4ba", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManageStandardPermissionsFragment.java", "function":"updatePermissionsUi"}}, {"deprecated":false, "digest":{"function_hash":"142374556800398351345354105549699687048", "length":525}, "id":"ASB-A-153879813-fdb50305", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/7e9c62996eb7009d677fee99f3b1dcad8bf49326", "target":{"file":"src/com/android/packageinstaller/permission/ui/handheld/ManagePermissionsFragment.java", "function":"onPreferenceClick"}}]}}, {"package":{"name":"platform/packages/apps/PackageInstaller", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2020-11-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a"], "severity":"High", "spl":"2020-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["234313598412056486043284828466060306736", "21923750258978695531762103156272468378", "6124665663430185512169264032751165363"], "threshold":0.9}, "id":"ASB-A-153879813-2a0f26a8", "match_only_versions":["10"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a", "target":{"file":"src/com/android/packageinstaller/permission/ui/GrantPermissionsActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"266955580306784250954883025052735837438", "length":211}, "id":"ASB-A-153879813-6848562a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a", "target":{"file":"src/com/android/packageinstaller/permission/utils/Utils.java", "function":"getPermissionInfosForGroup"}}, {"deprecated":false, "digest":{"line_hashes":["306958079687056447884669764837349335261", "248415811608635560014478564784839317575", "39397916374352069445815716002098561740", "283162938228251623632314616422175742691", "47434107548427479256198968945616336465", "201646817754642558195316124291070889862", "110959809400831136447195181045651190208", "224724940023597329410643627561444504074", "246941056700526996886870170761768140662", "10973729175679088721493329227948590012", "68827460266646834950380429093531413092"], "threshold":0.9}, "id":"ASB-A-153879813-9db935c7", "match_only_versions":["10"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a", "target":{"file":"src/com/android/packageinstaller/permission/utils/SafetyNetLogger.java"}}, {"deprecated":false, "digest":{"function_hash":"155269418000446953758025949038387156254", "length":3441}, "id":"ASB-A-153879813-c4c3bef7", "match_only_versions":["10"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a", "target":{"file":"src/com/android/packageinstaller/permission/ui/GrantPermissionsActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["327884605714745277504937997217095596897", "230459611331252932704968786228486782408", "4439615171372414052146478269376545725", "61418336610958516805053548442293889981"], "threshold":0.9}, "id":"ASB-A-153879813-e0e5551c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/f454ed41d3b1500d60ab2fc260d6d3b87f6c935a", "target":{"file":"src/com/android/packageinstaller/permission/utils/Utils.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2020-11-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/5148967312f4d59c456160463bbf120cf58abba2"}]}