{"id":"ASB-A-153993591", "published":"2020-09-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2020-0399", "A-153993591"], "details":"In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/opt/telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.0:0"}, {"fixed":"8.0:2020-09-01"}]}], "versions":["8.0"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"], "severity":"High", "spl":"2020-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"124347352249865646556944936559596462054", "length":520}, "id":"ASB-A-153993591-5f46d6a7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7", "target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java", "function":"addResolutionIntent"}}, {"deprecated":false, "digest":{"line_hashes":["117644871708654916346245945015463275626", "223665824716409487639496807541848082315", "153896511408108601377244622035927833590", "214338118115568385601977212861965221200", "252555523724162323221182265734240667994", "262626998732534039738096859923668305917", "284733846293931103168905718368524179728", "295496958192235468506319800338169638268", "73099640744412732828548186330436131037", "145124376558202810450310734881358587716", "227614234266439378251246365778538648135"], "threshold":0.9}, "id":"ASB-A-153993591-b1a247c1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7", "target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"}}]}}, {"package":{"name":"platform/packages/services/Telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.0:0"}, {"fixed":"8.0:2020-09-01"}]}], "versions":["8.0"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4", "https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"], "severity":"High", "spl":"2020-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["41947819677962889077519451532663704680", "102135948322594920735190946348112074288", "220160467030282996760638356047881540303", "253889126629877657108515330408653953158", "276112923747055330083233450457693907914"], "threshold":0.9}, "id":"ASB-A-153993591-77c0601b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2", "target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"}}, {"deprecated":false, "digest":{"function_hash":"239929725198670433305970540035158012328", "length":1554}, "id":"ASB-A-153993591-910531fc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2", "target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java", "function":"showNotification"}}]}}, {"package":{"name":"platform/frameworks/opt/telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2020-09-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"], "severity":"High", "spl":"2020-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["117644871708654916346245945015463275626", "223665824716409487639496807541848082315", "153896511408108601377244622035927833590", "214338118115568385601977212861965221200", "252555523724162323221182265734240667994", "262626998732534039738096859923668305917", "284733846293931103168905718368524179728", "295496958192235468506319800338169638268", "73099640744412732828548186330436131037", "145124376558202810450310734881358587716", "227614234266439378251246365778538648135"], "threshold":0.9}, "id":"ASB-A-153993591-319978f2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7", "target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"}}, {"deprecated":false, "digest":{"function_hash":"124347352249865646556944936559596462054", "length":520}, "id":"ASB-A-153993591-f24e9374", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7", "target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java", "function":"addResolutionIntent"}}]}}, {"package":{"name":"platform/packages/services/Telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2020-09-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4", "https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"], "severity":"High", "spl":"2020-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["41947819677962889077519451532663704680", "102135948322594920735190946348112074288", "220160467030282996760638356047881540303", "253889126629877657108515330408653953158", "276112923747055330083233450457693907914"], "threshold":0.9}, "id":"ASB-A-153993591-7ceae2e0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2", "target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"}}, {"deprecated":false, "digest":{"function_hash":"239929725198670433305970540035158012328", "length":1554}, "id":"ASB-A-153993591-b9ee0d90", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2", "target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java", "function":"showNotification"}}]}}, {"package":{"name":"platform/frameworks/opt/telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2020-09-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"], "severity":"High", "spl":"2020-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["117644871708654916346245945015463275626", "223665824716409487639496807541848082315", "153896511408108601377244622035927833590", "214338118115568385601977212861965221200", "252555523724162323221182265734240667994", "262626998732534039738096859923668305917", "284733846293931103168905718368524179728", "295496958192235468506319800338169638268", "73099640744412732828548186330436131037", "145124376558202810450310734881358587716", "227614234266439378251246365778538648135"], "threshold":0.9}, "id":"ASB-A-153993591-9ad82ed8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7", "target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"}}, {"deprecated":false, "digest":{"function_hash":"124347352249865646556944936559596462054", "length":520}, "id":"ASB-A-153993591-a73ebb1c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7", "target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java", "function":"addResolutionIntent"}}]}}, {"package":{"name":"platform/packages/services/Telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2020-09-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4", "https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"], "severity":"High", "spl":"2020-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"239929725198670433305970540035158012328", "length":1554}, "id":"ASB-A-153993591-1a42be31", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2", "target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java", "function":"showNotification"}}, {"deprecated":false, "digest":{"line_hashes":["41947819677962889077519451532663704680", "102135948322594920735190946348112074288", "220160467030282996760638356047881540303", "253889126629877657108515330408653953158", "276112923747055330083233450457693907914"], "threshold":0.9}, "id":"ASB-A-153993591-573e3292", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2", "target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"}}]}}, {"package":{"name":"platform/frameworks/opt/telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2020-09-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"], "severity":"High", "spl":"2020-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"124347352249865646556944936559596462054", "length":520}, "id":"ASB-A-153993591-2aa7e155", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7", "target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java", "function":"addResolutionIntent"}}, {"deprecated":false, "digest":{"line_hashes":["117644871708654916346245945015463275626", "223665824716409487639496807541848082315", "153896511408108601377244622035927833590", "214338118115568385601977212861965221200", "252555523724162323221182265734240667994", "262626998732534039738096859923668305917", "284733846293931103168905718368524179728", "295496958192235468506319800338169638268", "73099640744412732828548186330436131037", "145124376558202810450310734881358587716", "227614234266439378251246365778538648135"], "threshold":0.9}, "id":"ASB-A-153993591-3f845299", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7", "target":{"file":"src/java/com/android/internal/telephony/euicc/EuiccController.java"}}]}}, {"package":{"name":"platform/packages/services/Telephony", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2020-09-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4", "https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"], "severity":"High", "spl":"2020-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["41947819677962889077519451532663704680", "102135948322594920735190946348112074288", "220160467030282996760638356047881540303", "253889126629877657108515330408653953158", "276112923747055330083233450457693907914"], "threshold":0.9}, "id":"ASB-A-153993591-313eb20d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2", "target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java"}}, {"deprecated":false, "digest":{"function_hash":"239929725198670433305970540035158012328", "length":1554}, "id":"ASB-A-153993591-aa484ca2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2", "target":{"file":"src/com/android/phone/EmergencyCallbackModeService.java", "function":"showNotification"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2020-09-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/opt/telephony/+/0126084de146b51a842d7604cddb3303f46cade7"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/services/Telephony/+/4e6a25843d7ef14301eb8cb5985c84d54785fbc4"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/services/Telephony/+/11c41d321d0c2dc3631f37d2f8f3ebc745f454d2"}]}