{"id":"ASB-A-201667614", "published":"2022-12-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2021-39795", "A-201667614"], "details":"In multiple locations of MediaProvider.java, there is a possible way to get read/write access to other applications’ dedicated, app-specific directory within external storage due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/providers/MediaProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2022-12-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/eff3f473762f1cb53483aa2280d005974299e2ef"], "severity":"High", "spl":"2022-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"238681272684009509383892680196642260979", "length":8745}, "id":"ASB-A-201667614-072f7191", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"ensureFileColumns"}}, {"deprecated":false, "digest":{"function_hash":"55922196151606136305071815842798393970", "length":10040}, "id":"ASB-A-201667614-2b284275", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"updateInternal"}}, {"deprecated":false, "digest":{"function_hash":"251402470808749008164339335217852146753", "length":223}, "id":"ASB-A-201667614-32dc88ef", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "target":{"file":"src/com/android/providers/media/util/FileUtils.java", "function":"extractPathOwnerPackageName"}}, {"deprecated":false, "digest":{"line_hashes":["40247249623713749474410405883757770596", "144027290734087633198927767430221278844", "170274567414164237222669859121030355046", "196898841004659287838550322794180386037", "335371926614206587632036346733358511741", "264655383602886545954307294114886718442", "12276096629291540471079989167559476498", "301410199096718789459479207902051532937", "233219412961679289816736886436377987034"], "threshold":0.9}, "id":"ASB-A-201667614-3f2697c9", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "target":{"file":"src/com/android/providers/media/util/PermissionUtils.java"}}, {"deprecated":false, "digest":{"line_hashes":["152568169090691484226729192467133202422", "154828587764305331725276644817766806839", "34670544298078652802877997313666671568", "194452766113564198757105252971180352761", "169209056988517876143400226951660716308", "2217923254148000743702341213546210096", "139308651869404623383043968546664871510", "151620959614470802133835928987946490891", "241192064302170081027962000632153555791", "272042624386267939551800973679424420896", "67016657172376363136643347182872579037", "116271456339711922632708797759889762148", "259689705919500848733661263264770076238", "111451870466154766697415397757684466980", "128112815894408821646148036948963920175", "168567070325589414999088676482220455184", "13484918867230189051472578681231415252", "25045084646583255037188728037128435950", "58791666578357728470507368996142945929", "141314279896525631411536076799068072924", "107337934385098130526106849872909580471", "316335424435118614043147239494655930900", "325390957140957071938411876682230776780", "267512788186167861476631922890987391574", "288297358822084163379766481892345001841", "302425542002261694847505035487952325336", "253086247065714229568902888009774442712", "30584587213142902972153208626010345669", "13809216971812909067401431868069979545", "154512098687775306750384408648361504255", "18567738330659414243202969302276952282", "336886396416830182861626467226563893503", "236455967876322173453664027728001258555", "181792260954261579016161356779428902101"], "threshold":0.9}, "id":"ASB-A-201667614-6649fc37", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "target":{"file":"src/com/android/providers/media/util/FileUtils.java"}}, {"deprecated":false, "digest":{"line_hashes":["204290306502838639350211547393547247552", "309845117266323894631003027945791268741", "119360172874582609819956775866530162868", "234618258303052702272539323629322331210", "41071518793217538971511117624865296582"], "threshold":0.9}, "id":"ASB-A-201667614-8bf8f201", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/eff3f473762f1cb53483aa2280d005974299e2ef", "target":{"file":"src/com/android/providers/media/util/FileUtils.java"}}, {"deprecated":false, "digest":{"line_hashes":["330061013841921927404439880310134645666", "279035243211235578978773495290889257717", "139805934799104702474478996198724934983", "204045983957087694251293698509675488250", "51339408158740087838647925056850785066", "184579359193662142216770856581700719745", "261385049563959465991555017779246548927", "114777177052799597305725342279822042751", "158256496404397732468800988085537619906", "155730592654275160527152088561567819709", "98151776834612072365060031632019744651", "306918490912684717323637554405647855681", "261172514298718509221687851399192841872", "128265093616841785292956062382773925080", "314515909996417718359378857662812287379"], "threshold":0.9}, "id":"ASB-A-201667614-8d1fdd6a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "target":{"file":"src/com/android/providers/media/LocalCallingIdentity.java"}}, {"deprecated":false, "digest":{"line_hashes":["299391461899678919340206977286699020701", "232454313650901851211551648154040281140", "125911117328207118970251635780204918352", "337212658015156125924577486032578087025", "264936244901107877761119424033898341960", "203316991044731824910842329847763608871", "177512122098981387961925517338625601161", "65406077481842752029116137954123016985", "122938892040161352096536151944497956311", "301639778519867200694476919590881974664", "277705252916818474873032517868764228201", "9793782608533454780627219923948425473", "99272660022297428327352778699317120559", "70427129919581368163127601314162188733", "208462730969786566763800476852323805786", "176229831433023362504096317508907380806", "13928687831790284161221191873039682545", "163674429060795910141452786603709691676", "195607717996301261500324087296171360761", "308243660435946972706387900791982949439", "179029079728252097893462326862774827739", "132553652111937574765774024266027960497", "152160482717337810014413000016524862220", "296239268926860717848294862331152778546", "40234026051336599915450110385641433801", "49355162923256046976469018364956487076", "70864287080050424271793023931816100205", "323879024334338600775464318019027999485", "178375754611835822996638729296478241621", "55215906507301240652662487202220957850", "58971753279519125877003992536179184902", "251722274166326571608249711641793800642", "266379810312609098012081933904867128840", "159863572261163587028852460888872272658", "42118270509841749136386277483633476128", "66123719269734070237200179343020553072", "171588637386397515509351370465317360225", "192652305326336604983534351473504759127", "139693577164498500866551585285028205958", "140737702256961425681242103390462915330", "242261570103900428534540469207446465034", "191796074807589506785838097526846288167", "50993171120317133853768135536204200826", "298411779657066655246762035836590638859", "82151568294862698115263759411918599548", "104606064637402422255735151515742315438", "332442903884402718949226678217127246067", "339333955453560526507796255168618926683", "295460624446162593663867317702211008498", "168576390230546003140243983006368727549", "307188431284420561787543462900516672228", "309211443699351551154060806711929475102", "194506212081823158101462700134801946728", "112670671899635840355320066458871937814", "125554003740724239396191628727381449", "215121854707857326046061738043089652592", "282178597067938571800473646182433391732", "142049379116946213939204728511029948550", "201102916420949544818113249440022098801", "167161956976860600069795841398745676500", "48832248985754763669786074792862649622", "128573352913584951460806098027381460109", "277278893339302183247431936053771076017", "75347817492032347698373538538646216128", "44378159891804183672545247462310660325", "280977422154301851785168274658395874054", "137249220736062192195852270769718834709", "97263371583658178395925608642034711930", "56302892648489863222300675777566093282", "190021809855510456159409601021600392726"], "threshold":0.9}, "id":"ASB-A-201667614-96983d0f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "target":{"file":"src/com/android/providers/media/MediaProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"311321614416423727101236189346517707422", "length":2389}, "id":"ASB-A-201667614-c05cecf1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"231249783640665264810135461747185926337", "length":1473}, "id":"ASB-A-201667614-e085acdc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "target":{"file":"src/com/android/providers/media/LocalCallingIdentity.java", "function":"hasPermissionInternal"}}, {"deprecated":false, "digest":{"function_hash":"335301336029234532034592775896931644392", "length":164}, "id":"ASB-A-201667614-e8347d8a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/220971d4e9dddb91d8073c0c295fe0fff057249d", "target":{"file":"src/com/android/providers/media/util/FileUtils.java", "function":"isDataOrObbPath"}}]}}, {"package":{"name":"platform/packages/providers/MediaProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2022-12-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bb4ec053ea16931e827f30c7b697cb35185a32be"], "severity":"High", "spl":"2022-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"297293203924818324002893331432978950366", "length":83}, "id":"ASB-A-201667614-10209dd9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isCallingIdentityExternalStorageProvider"}}, {"deprecated":false, "digest":{"function_hash":"335301336029234532034592775896931644392", "length":164}, "id":"ASB-A-201667614-28b06488", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/util/FileUtils.java", "function":"isDataOrObbPath"}}, {"deprecated":false, "digest":{"function_hash":"251402470808749008164339335217852146753", "length":223}, "id":"ASB-A-201667614-4e20f436", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/util/FileUtils.java", "function":"extractPathOwnerPackageName"}}, {"deprecated":false, "digest":{"function_hash":"313127495243080436215856613266458326861", "length":165}, "id":"ASB-A-201667614-4eae98b4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/util/FileUtils.java", "function":"isObbOrChildPath"}}, {"deprecated":false, "digest":{"line_hashes":["236717934069039143513944692050967782518", "177231989965431248230433242515756830985", "48084694514666216991863027566063787842", "24597347580785972387017570648949344501", "82590222942452024723401538768858218797", "335325793106875720725709381344293129082", "62962534448535555044625104955818939201", "87555556292832071262321424327704855087", "194708978014298019962881607360076158603", "54111726926367223753618623529403734961", "146307438629499210115969980779094215130", "157049492347174593816450239977536938506", "6538419491974432453348462488563490013", "145664491038855867584246801884233307249", "162375889599558108169710407530435316931", "2217923254148000743702341213546210096", "139308651869404623383043968546664871510", "151620959614470802133835928987946490891", "241192064302170081027962000632153555791", "272042624386267939551800973679424420896", "67016657172376363136643347182872579037", "116271456339711922632708797759889762148", "259689705919500848733661263264770076238", "111451870466154766697415397757684466980", "128112815894408821646148036948963920175", "168567070325589414999088676482220455184", "13484918867230189051472578681231415252", "25045084646583255037188728037128435950", "58791666578357728470507368996142945929", "141314279896525631411536076799068072924", "107337934385098130526106849872909580471", "316335424435118614043147239494655930900", "325390957140957071938411876682230776780", "267512788186167861476631922890987391574", "288297358822084163379766481892345001841", "302425542002261694847505035487952325336", "253086247065714229568902888009774442712", "30584587213142902972153208626010345669", "86068286971847835986773778703104905931", "130180844030132176467252022446011864277", "36210907196803157140823294611057953412", "167803830410390491718526846786717005079", "18567738330659414243202969302276952282", "336886396416830182861626467226563893503", "236455967876322173453664027728001258555", "254632733345791973162068198796462295829", "51823682839670840672415785132628897533", "13221641704164253845794790806991201079", "43754136076656795816877613835383556447", "200374670571860574494305018877906704473", "176041195732111323839694349726333063997", "27338847599432817215746715644794268617", "240150190257677923672568230186419392973", "112398314515882725433351362832838861326", "16447428364241065113991019251267328704"], "threshold":0.9}, "id":"ASB-A-201667614-7ff84ea3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/util/FileUtils.java"}}, {"deprecated":false, "digest":{"function_hash":"137853831715424200553488584344362434173", "length":112}, "id":"ASB-A-201667614-85e1fa9e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isCallingIdentityMtp"}}, {"deprecated":false, "digest":{"line_hashes":["227082451382423078953520414071533952810", "22613576191464637590775937452726305821", "156042098569606700548283666622904837208", "215794511505920084906259401026091949579", "323795208999802954841461095209522292719", "114219867295483757930129871934884625336", "137383048737320772824913646054177780410"], "threshold":0.9}, "id":"ASB-A-201667614-995f6f75", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bb4ec053ea16931e827f30c7b697cb35185a32be", "target":{"file":"src/com/android/providers/media/util/FileUtils.java"}}, {"deprecated":false, "digest":{"function_hash":"4294939936698086743065293179125264061", "length":816}, "id":"ASB-A-201667614-a1d30e08", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"assertPrivatePathNotInValues"}}, {"deprecated":false, "digest":{"function_hash":"258362969100274857793919268685160573592", "length":77}, "id":"ASB-A-201667614-a28713c9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isCallingIdentityDownloadProvider"}}, {"deprecated":false, "digest":{"function_hash":"95494972414533092441636999490450228138", "length":271}, "id":"ASB-A-201667614-a559f9f3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isUidAllowedAccessToDataOrObbPathForFuse"}}, {"deprecated":false, "digest":{"function_hash":"8321995632742293194363705151469332717", "length":376}, "id":"ASB-A-201667614-b8ebd8e7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isUidAllowedSpecialPrivatePathAccess"}}, {"deprecated":false, "digest":{"line_hashes":["114084976581220804341334582504897742804", "174373154285155072241523552359252331075", "300992803437122836070384257235890071968", "9793782608533454780627219923948425473", "99272660022297428327352778699317120559", "70427129919581368163127601314162188733", "259909820617150051722809354499057372935", "136973990291562542058924378792467316936", "311824766972067554774614541581034234709", "179699092130452837921161286762514185437", "123466622052181077513120375594627674916", "100988109938771217952486786590536391954", "49204009068460619016049015852359172001", "187339036843000036958452122303669290982", "310232914908502451399756897635674243405", "67648006478787719664908315798040875820", "115062421658022675749693953867013858556", "183291289263040540015593565690014073187", "234779277991134578381165600404066431533", "195707829298633532852611070367350979296", "139693577164498500866551585285028205958", "140737702256961425681242103390462915330", "242261570103900428534540469207446465034", "191796074807589506785838097526846288167", "332442903884402718949226678217127246067", "339333955453560526507796255168618926683", "295460624446162593663867317702211008498", "168576390230546003140243983006368727549", "307188431284420561787543462900516672228", "48705314605896090401227540607779761998", "295721108576129250391114123988192086840", "174027267995990423789824625277347597274", "254074972856976548638389108236625428872", "264401508927332093679895566831134138101", "82150690642267993772371953959676931195", "289372983150233340903846335879769801192", "73202547743085761200946431316211736680", "41605841195673855235997273354028679591", "135837099050508610766238237856132414676", "203342445627061955291491048767458923337", "112482754744893855938603296495538379604", "109227419116717578311215444919947070875", "214599317101670275654395811799085166846", "162162967668151717555648954452451540807", "173755431879031289523739394597563230468", "109402149507459275511097645303291244066", "310856937413429908373368829299324517068", "169871327454610881851808833402759055356", "209236645354219586020693813861842944778", "9020928934666820675605163638261335872", "183309054234036924723114572105094218325", "153055136395407589392801252478499098021", "130837178589665409972229557949586978181", "136864531108809626906444177904777987058", "307751875159233340765190279109667153148", "25597108129924941558002957831905309214", "1342824683214414970390721498992884630", "269881229432883965942011191516416005631", "92954662426343925547626092904094112356", "92477676094792669277335264507110207020", "55063093571945704296068223891419449487", "238329549334136682791578118212892898955", "326023176507498196279576752654234672666", "207332691013481441890902753678447906364", "287358166042486738965659079252615988706", "97889755441130331004520791798331627719", "184489921856433884381592495864240065389", "296389528915496905298240149661446179897", "325719368695532143747114105677500774980", "234446318027030780594538058817868899307", "117504750505434063580668129150064055511", "124898880952547615347580121064582398121", "182505216322595849248887157698484457510", "206820175676443098145579379188530016459", "116017931996396925484868356424784307427", "297745224029927563949845937644768878930", "225343488890514688939194474557386070522", "172229735532210089994471785466909935187", "187998045020412671173774898208700241223", "175997778560400471126944906848619150767", "144972991188601817510101003754725746498", "338681959307215613114332176169645319973", "117033183906687735066096554980127172909", "278128598310937795653278846412455945474", "166879958871339804567555760572776983403", "120963809190404213349299065909692543459", "216790294012380003537557303316724968826", "131150868638278027921439736541968804689", "249495304898942033896857770614199679442", "226549758348081416692860462691351302638", "92477676094792669277335264507110207020", "12735464951147717773683761386789966533", "315994622056502690583973084896738798740", "239635117775665262428407749568148295706", "41950407448955977717188478906258219444", "247220718631425995216564756924211628894", "62223910636610670334176787785670726438", "327757359698077852315051660580666431372", "101368120860715626523220606557679191040", "130600917130787248451137701588389390812"], "threshold":0.9}, "id":"ASB-A-201667614-b98bbd65", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/MediaProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"216120437759284472245831217526185285615", "length":393}, "id":"ASB-A-201667614-ed7ae572", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/f06c4022c14e09a31404b4313c74631af1282063", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isCallingIdentityAllowedInstallerAccess"}}]}}, {"package":{"name":"platform/packages/providers/MediaProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2022-12-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/4f46f26267ceff5e6f37621ae2ede38a80d5ffde"], "severity":"High", "spl":"2022-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"258362969100274857793919268685160573592", "length":77}, "id":"ASB-A-201667614-06ae7d2b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isCallingIdentityDownloadProvider"}}, {"deprecated":false, "digest":{"function_hash":"137853831715424200553488584344362434173", "length":112}, "id":"ASB-A-201667614-0826a611", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isCallingIdentityMtp"}}, {"deprecated":false, "digest":{"line_hashes":["236717934069039143513944692050967782518", "177231989965431248230433242515756830985", "48084694514666216991863027566063787842", "24597347580785972387017570648949344501", "82590222942452024723401538768858218797", "335325793106875720725709381344293129082", "62962534448535555044625104955818939201", "87555556292832071262321424327704855087", "194708978014298019962881607360076158603", "54111726926367223753618623529403734961", "146307438629499210115969980779094215130", "157049492347174593816450239977536938506", "6538419491974432453348462488563490013", "145664491038855867584246801884233307249", "162375889599558108169710407530435316931", "2217923254148000743702341213546210096", "139308651869404623383043968546664871510", "151620959614470802133835928987946490891", "241192064302170081027962000632153555791", "272042624386267939551800973679424420896", "67016657172376363136643347182872579037", "116271456339711922632708797759889762148", "259689705919500848733661263264770076238", "111451870466154766697415397757684466980", "128112815894408821646148036948963920175", "168567070325589414999088676482220455184", "13484918867230189051472578681231415252", "25045084646583255037188728037128435950", "58791666578357728470507368996142945929", "141314279896525631411536076799068072924", "107337934385098130526106849872909580471", "316335424435118614043147239494655930900", "325390957140957071938411876682230776780", "267512788186167861476631922890987391574", "288297358822084163379766481892345001841", "302425542002261694847505035487952325336", "253086247065714229568902888009774442712", "30584587213142902972153208626010345669", "86068286971847835986773778703104905931", "130180844030132176467252022446011864277", "36210907196803157140823294611057953412", "167803830410390491718526846786717005079", "18567738330659414243202969302276952282", "336886396416830182861626467226563893503", "236455967876322173453664027728001258555", "254632733345791973162068198796462295829", "51823682839670840672415785132628897533", "13221641704164253845794790806991201079", "43754136076656795816877613835383556447", "200374670571860574494305018877906704473", "176041195732111323839694349726333063997", "27338847599432817215746715644794268617", "240150190257677923672568230186419392973", "112398314515882725433351362832838861326", "16447428364241065113991019251267328704"], "threshold":0.9}, "id":"ASB-A-201667614-0bb1c098", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/util/FileUtils.java"}}, {"deprecated":false, "digest":{"function_hash":"216120437759284472245831217526185285615", "length":393}, "id":"ASB-A-201667614-0c73db3d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isCallingIdentityAllowedInstallerAccess"}}, {"deprecated":false, "digest":{"function_hash":"4294939936698086743065293179125264061", "length":816}, "id":"ASB-A-201667614-35864144", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"assertPrivatePathNotInValues"}}, {"deprecated":false, "digest":{"function_hash":"297293203924818324002893331432978950366", "length":83}, "id":"ASB-A-201667614-661ccbfa", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isCallingIdentityExternalStorageProvider"}}, {"deprecated":false, "digest":{"function_hash":"335301336029234532034592775896931644392", "length":164}, "id":"ASB-A-201667614-66ce116d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/util/FileUtils.java", "function":"isDataOrObbPath"}}, {"deprecated":false, "digest":{"function_hash":"8321995632742293194363705151469332717", "length":376}, "id":"ASB-A-201667614-804b103b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isUidAllowedSpecialPrivatePathAccess"}}, {"deprecated":false, "digest":{"line_hashes":["114084976581220804341334582504897742804", "174373154285155072241523552359252331075", "300992803437122836070384257235890071968", "9793782608533454780627219923948425473", "99272660022297428327352778699317120559", "70427129919581368163127601314162188733", "259909820617150051722809354499057372935", "136973990291562542058924378792467316936", "311824766972067554774614541581034234709", "179699092130452837921161286762514185437", "123466622052181077513120375594627674916", "100988109938771217952486786590536391954", "49204009068460619016049015852359172001", "187339036843000036958452122303669290982", "310232914908502451399756897635674243405", "67648006478787719664908315798040875820", "115062421658022675749693953867013858556", "183291289263040540015593565690014073187", "234779277991134578381165600404066431533", "195707829298633532852611070367350979296", "139693577164498500866551585285028205958", "140737702256961425681242103390462915330", "242261570103900428534540469207446465034", "191796074807589506785838097526846288167", "332442903884402718949226678217127246067", "339333955453560526507796255168618926683", "295460624446162593663867317702211008498", "168576390230546003140243983006368727549", "307188431284420561787543462900516672228", "48705314605896090401227540607779761998", "295721108576129250391114123988192086840", "174027267995990423789824625277347597274", "254074972856976548638389108236625428872", "264401508927332093679895566831134138101", "82150690642267993772371953959676931195", "289372983150233340903846335879769801192", "73202547743085761200946431316211736680", "41605841195673855235997273354028679591", "135837099050508610766238237856132414676", "203342445627061955291491048767458923337", "112482754744893855938603296495538379604", "109227419116717578311215444919947070875", "214599317101670275654395811799085166846", "162162967668151717555648954452451540807", "173755431879031289523739394597563230468", "109402149507459275511097645303291244066", "310856937413429908373368829299324517068", "169871327454610881851808833402759055356", "209236645354219586020693813861842944778", "9020928934666820675605163638261335872", "183309054234036924723114572105094218325", "153055136395407589392801252478499098021", "130837178589665409972229557949586978181", "136864531108809626906444177904777987058", "307751875159233340765190279109667153148", "25597108129924941558002957831905309214", "1342824683214414970390721498992884630", "269881229432883965942011191516416005631", "92954662426343925547626092904094112356", "92477676094792669277335264507110207020", "55063093571945704296068223891419449487", "238329549334136682791578118212892898955", "326023176507498196279576752654234672666", "207332691013481441890902753678447906364", "287358166042486738965659079252615988706", "97889755441130331004520791798331627719", "184489921856433884381592495864240065389", "296389528915496905298240149661446179897", "325719368695532143747114105677500774980", "234446318027030780594538058817868899307", "117504750505434063580668129150064055511", "124898880952547615347580121064582398121", "182505216322595849248887157698484457510", "206820175676443098145579379188530016459", "116017931996396925484868356424784307427", "297745224029927563949845937644768878930", "225343488890514688939194474557386070522", "172229735532210089994471785466909935187", "187998045020412671173774898208700241223", "175997778560400471126944906848619150767", "144972991188601817510101003754725746498", "338681959307215613114332176169645319973", "117033183906687735066096554980127172909", "278128598310937795653278846412455945474", "166879958871339804567555760572776983403", "120963809190404213349299065909692543459", "216790294012380003537557303316724968826", "131150868638278027921439736541968804689", "249495304898942033896857770614199679442", "226549758348081416692860462691351302638", "92477676094792669277335264507110207020", "12735464951147717773683761386789966533", "315994622056502690583973084896738798740", "239635117775665262428407749568148295706", "41950407448955977717188478906258219444", "247220718631425995216564756924211628894", "62223910636610670334176787785670726438", "327757359698077852315051660580666431372", "101368120860715626523220606557679191040", "130600917130787248451137701588389390812"], "threshold":0.9}, "id":"ASB-A-201667614-8f8d2e01", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/MediaProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"95494972414533092441636999490450228138", "length":271}, "id":"ASB-A-201667614-d22b9785", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/MediaProvider.java", "function":"isUidAllowedAccessToDataOrObbPathForFuse"}}, {"deprecated":false, "digest":{"function_hash":"313127495243080436215856613266458326861", "length":165}, "id":"ASB-A-201667614-f034ee25", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/util/FileUtils.java", "function":"isObbOrChildPath"}}, {"deprecated":false, "digest":{"function_hash":"251402470808749008164339335217852146753", "length":223}, "id":"ASB-A-201667614-f2084d82", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1272768815dce7ec769cb01e0e52843a8839082f", "target":{"file":"src/com/android/providers/media/util/FileUtils.java", "function":"extractPathOwnerPackageName"}}, {"deprecated":false, "digest":{"line_hashes":["227082451382423078953520414071533952810", "22613576191464637590775937452726305821", "156042098569606700548283666622904837208", "215794511505920084906259401026091949579", "323795208999802954841461095209522292719", "114219867295483757930129871934884625336", "137383048737320772824913646054177780410"], "threshold":0.9}, "id":"ASB-A-201667614-ff0a9716", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/4f46f26267ceff5e6f37621ae2ede38a80d5ffde", "target":{"file":"src/com/android/providers/media/util/FileUtils.java"}}]}}, {"package":{"name":"platform/packages/providers/MediaProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2022-12-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bae2794639a349d2f7b1a66915d89c51c9334164"], "severity":"High", "spl":"2022-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["227082451382423078953520414071533952810", "22613576191464637590775937452726305821", "156042098569606700548283666622904837208", "215794511505920084906259401026091949579", "323795208999802954841461095209522292719", "114219867295483757930129871934884625336", "137383048737320772824913646054177780410"], "threshold":0.9}, "id":"ASB-A-201667614-025fb52d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bae2794639a349d2f7b1a66915d89c51c9334164", "target":{"file":"src/com/android/providers/media/util/FileUtils.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2022-12-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bb4ec053ea16931e827f30c7b697cb35185a32be"}]}