{"id":"ASB-A-154627439", "published":"2020-08-01T00:00:00Z", "modified":"2026-06-10T14:58:40.911641763Z", "aliases":["CVE-2020-0248", "A-154627439"], "details":"In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2020-08-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c4d6e387984e09e86a58e6485555a2d651f0481f"], "severity":"High", "spl":"2020-08-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["333745780663701399853090878611809961303", "111017089467091198578482121265288638631", "54253536793200433303581408966800721547", "182269932108093676351081698526636743916"], "threshold":0.9}, "id":"ASB-A-154627439-33d32631", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4d6e387984e09e86a58e6485555a2d651f0481f", "target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/InstantAppNotifier.java"}}, {"deprecated":false, "digest":{"function_hash":"13543462697105500942143149013863363675", "length":2881}, "id":"ASB-A-154627439-ff977797", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c4d6e387984e09e86a58e6485555a2d651f0481f", "target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/InstantAppNotifier.java", "function":"postInstantAppNotif"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2020-08-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/c4d6e387984e09e86a58e6485555a2d651f0481f"}]}