{"id":"ASB-A-158304295", "published":"2020-11-01T00:00:00Z", "modified":"2026-06-18T15:04:46.258745422Z", "aliases":["CVE-2020-0441", "A-158304295"], "details":"In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service requiring a device reset to fix with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11-next:0"}, {"fixed":"11-next:2020-11-01"}]}], "versions":["11-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c953fdf6bc498ca791aed49df04e5a07c935b63a"], "severity":"Critical", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["25693081011143403965924570554327340062", "145135667773462807188212350943050247915", "103801210461441284299338172224434577144", "268695753093872796919241450464110276483", "46261083463634891044944826171838452135", "176910514098118386474826865368856580128", "98526589191053999908616954323828412117", "128177431757207050536224790976428229825", "319607130368601865965098141551601944972", "107251892173742551941786143315072969027", "275639386799706093579977400228926095134", "310687014227499283566324898602218088852"], "threshold":0.9}, "id":"ASB-A-158304295-397edf27", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c953fdf6bc498ca791aed49df04e5a07c935b63a", "target":{"file":"core/java/android/app/Notification.java"}}, {"deprecated":false, "digest":{"function_hash":"884783211642599066431883859307243095", "length":176}, "id":"ASB-A-158304295-761f8b42", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c953fdf6bc498ca791aed49df04e5a07c935b63a", "target":{"file":"core/java/android/app/Notification.java", "function":"Message"}}, {"deprecated":false, "digest":{"function_hash":"222671025270688948635880737328659672300", "length":644}, "id":"ASB-A-158304295-7a94299d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c953fdf6bc498ca791aed49df04e5a07c935b63a", "target":{"file":"core/java/android/app/Notification.java", "function":"toBundle"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.0:0"}, {"fixed":"8.0:2020-11-01"}]}], "versions":["8.0"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/db023fcd738bb054402b771e5de5d758db526e30"], "severity":"Critical", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"249850538892017593367435450928172592955", "length":481}, "id":"ASB-A-158304295-c2d4c3ea", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/db023fcd738bb054402b771e5de5d758db526e30", "target":{"file":"core/java/android/app/Notification.java", "function":"toBundle"}}, {"deprecated":false, "digest":{"function_hash":"130325885489704397750759730523257976396", "length":111}, "id":"ASB-A-158304295-c5c39679", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/db023fcd738bb054402b771e5de5d758db526e30", "target":{"file":"core/java/android/app/Notification.java", "function":"Message"}}, {"deprecated":false, "digest":{"line_hashes":["25693081011143403965924570554327340062", "145135667773462807188212350943050247915", "78086377271289137333884542052049714539", "56200141793655099869644449185924752249", "313030175786482230069013616059698900122", "27246985446692965280412607529203410146", "223230047906985161320695007039713239736", "82166126420729959545926416641025738484", "104985517583945412739508227244376745054", "54005927267847672694205859340955290389", "223193595611124957030305446690472011801", "303687947021586481106450517505084892623"], "threshold":0.9}, "id":"ASB-A-158304295-f7e2d9e4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/db023fcd738bb054402b771e5de5d758db526e30", "target":{"file":"core/java/android/app/Notification.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2020-11-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f6f287a1efc76ef90e8caea952fffee862359015"], "severity":"Critical", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"130325885489704397750759730523257976396", "length":111}, "id":"ASB-A-158304295-b892d1fe", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f6f287a1efc76ef90e8caea952fffee862359015", "target":{"file":"core/java/android/app/Notification.java", "function":"Message"}}, {"deprecated":false, "digest":{"line_hashes":["25693081011143403965924570554327340062", "145135667773462807188212350943050247915", "78086377271289137333884542052049714539", "56200141793655099869644449185924752249", "313030175786482230069013616059698900122", "27246985446692965280412607529203410146", "223230047906985161320695007039713239736", "82166126420729959545926416641025738484", "104985517583945412739508227244376745054", "54005927267847672694205859340955290389", "223193595611124957030305446690472011801", "303687947021586481106450517505084892623"], "threshold":0.9}, "id":"ASB-A-158304295-ccf5e19c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f6f287a1efc76ef90e8caea952fffee862359015", "target":{"file":"core/java/android/app/Notification.java"}}, {"deprecated":false, "digest":{"function_hash":"249850538892017593367435450928172592955", "length":481}, "id":"ASB-A-158304295-f48bf02f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f6f287a1efc76ef90e8caea952fffee862359015", "target":{"file":"core/java/android/app/Notification.java", "function":"toBundle"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2020-11-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7857da643150e9b29f729632c68e705d7ba1ad48"], "severity":"Critical", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"222671025270688948635880737328659672300", "length":644}, "id":"ASB-A-158304295-35738ed9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7857da643150e9b29f729632c68e705d7ba1ad48", "target":{"file":"core/java/android/app/Notification.java", "function":"toBundle"}}, {"deprecated":false, "digest":{"function_hash":"884783211642599066431883859307243095", "length":176}, "id":"ASB-A-158304295-5774d460", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7857da643150e9b29f729632c68e705d7ba1ad48", "target":{"file":"core/java/android/app/Notification.java", "function":"Message"}}, {"deprecated":false, "digest":{"line_hashes":["25693081011143403965924570554327340062", "145135667773462807188212350943050247915", "123844992865351715585790036542023721288", "270179343523045032144507667929111654064", "46261083463634891044944826171838452135", "176910514098118386474826865368856580128", "98526589191053999908616954323828412117", "128177431757207050536224790976428229825", "319607130368601865965098141551601944972", "107251892173742551941786143315072969027", "275639386799706093579977400228926095134", "310687014227499283566324898602218088852"], "threshold":0.9}, "id":"ASB-A-158304295-b4d29889", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7857da643150e9b29f729632c68e705d7ba1ad48", "target":{"file":"core/java/android/app/Notification.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2020-11-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/978d31e45a67dba9d57d45a26c1d521300ba1b6f"], "severity":"Critical", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"222671025270688948635880737328659672300", "length":644}, "id":"ASB-A-158304295-7e5960e5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/978d31e45a67dba9d57d45a26c1d521300ba1b6f", "target":{"file":"core/java/android/app/Notification.java", "function":"toBundle"}}, {"deprecated":false, "digest":{"function_hash":"884783211642599066431883859307243095", "length":176}, "id":"ASB-A-158304295-c6d6ecb4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/978d31e45a67dba9d57d45a26c1d521300ba1b6f", "target":{"file":"core/java/android/app/Notification.java", "function":"Message"}}, {"deprecated":false, "digest":{"line_hashes":["25693081011143403965924570554327340062", "145135667773462807188212350943050247915", "103801210461441284299338172224434577144", "268695753093872796919241450464110276483", "46261083463634891044944826171838452135", "176910514098118386474826865368856580128", "98526589191053999908616954323828412117", "128177431757207050536224790976428229825", "319607130368601865965098141551601944972", "107251892173742551941786143315072969027", "275639386799706093579977400228926095134", "310687014227499283566324898602218088852"], "threshold":0.9}, "id":"ASB-A-158304295-f2a524d2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/978d31e45a67dba9d57d45a26c1d521300ba1b6f", "target":{"file":"core/java/android/app/Notification.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2020-11-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a19f9ed2b1c04fe7e73bab1a8ca51400dbf8a07a"], "severity":"Critical", "spl":"2020-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"884783211642599066431883859307243095", "length":176}, "id":"ASB-A-158304295-647226a5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a19f9ed2b1c04fe7e73bab1a8ca51400dbf8a07a", "target":{"file":"core/java/android/app/Notification.java", "function":"Message"}}, {"deprecated":false, "digest":{"line_hashes":["25693081011143403965924570554327340062", "145135667773462807188212350943050247915", "103801210461441284299338172224434577144", "268695753093872796919241450464110276483", "46261083463634891044944826171838452135", "176910514098118386474826865368856580128", "98526589191053999908616954323828412117", "128177431757207050536224790976428229825", "319607130368601865965098141551601944972", "107251892173742551941786143315072969027", "275639386799706093579977400228926095134", "310687014227499283566324898602218088852"], "threshold":0.9}, "id":"ASB-A-158304295-6c7fbe17", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a19f9ed2b1c04fe7e73bab1a8ca51400dbf8a07a", "target":{"file":"core/java/android/app/Notification.java"}}, {"deprecated":false, "digest":{"function_hash":"222671025270688948635880737328659672300", "length":644}, "id":"ASB-A-158304295-6f727d4d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a19f9ed2b1c04fe7e73bab1a8ca51400dbf8a07a", "target":{"file":"core/java/android/app/Notification.java", "function":"toBundle"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2020-11-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/aaf6b40e1746db6189f6078dcd28d8f153a4cc50"}]}