{"id":"ASB-A-168692734", "published":"2020-12-01T00:00:00Z", "modified":"2026-07-09T15:25:53.339171538Z", "aliases":["CVE-2020-0469", "A-168692734"], "details":"In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2020-12-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1a6f1fb402b96df561b9672aef1e4fce8a13de80"], "severity":"High", "spl":"2020-12-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"331169300333107926343020140939072705206", "length":855}, "id":"ASB-A-168692734-b39cebbf", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1a6f1fb402b96df561b9672aef1e4fce8a13de80", "target":{"file":"services/core/java/com/android/server/locksettings/LockSettingsService.java", "function":"initializeSyntheticPasswordLocked"}}, {"deprecated":false, "digest":{"function_hash":"96394997500601448676737221830763040134", "length":48}, "id":"ASB-A-168692734-e1250ca6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1a6f1fb402b96df561b9672aef1e4fce8a13de80", "target":{"file":"services/core/java/com/android/server/locksettings/LockSettingsService.java", "function":"shouldMigrateToSyntheticPasswordLocked"}}, {"deprecated":false, "digest":{"line_hashes":["251550690581497423073937327260480606352", "170125846614404205879020400085042593894", "138144614483412455258960286212840580277", "156587801624632000706238271320574735130", "17748398500746310132563250961750529776", "338776862070514492001845004348732116951", "271723429315829656446388442982048252443", "259288527986033092891475662013340766746", "102766727341725255193336268302347785160", "318955282145310672252016941305067844070", "327608454589390501832279443579911710309", "248850631743975608060784979100489083508"], "threshold":0.9}, "id":"ASB-A-168692734-fbc3e40c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1a6f1fb402b96df561b9672aef1e4fce8a13de80", "target":{"file":"services/core/java/com/android/server/locksettings/LockSettingsService.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2020-12-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/1a6f1fb402b96df561b9672aef1e4fce8a13de80"}]}