{"id":"ASB-A-156959408", "published":"2020-09-01T00:00:00Z", "modified":"2026-06-12T15:08:17.296522730Z", "aliases":["CVE-2020-0389", "A-156959408"], "details":"In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2020-09-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6ae2bd0e59636254c32896f7f01379d1d704f42d"], "severity":"High", "spl":"2020-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["166967141681192876332707137772531185598", "108593911619665110881421425818806505612", "280771889052294879080489651367731115359", "318389877388348892640337590604855827589"], "threshold":0.9}, "id":"ASB-A-156959408-078f59f2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ae2bd0e59636254c32896f7f01379d1d704f42d", "target":{"file":"packages/SystemUI/src/com/android/systemui/screenrecord/RecordingService.java"}}, {"deprecated":false, "digest":{"function_hash":"4047731910663841265383619558238240257", "length":1723}, "id":"ASB-A-156959408-bac2f50b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6ae2bd0e59636254c32896f7f01379d1d704f42d", "target":{"file":"packages/SystemUI/src/com/android/systemui/screenrecord/RecordingService.java", "function":"createSaveNotification"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2020-09-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/6ae2bd0e59636254c32896f7f01379d1d704f42d"}]}