{"id":"ASB-A-242537498", "published":"2023-03-01T00:00:00Z", "modified":"2026-07-10T15:26:01.587957612Z", "aliases":["CVE-2023-20911", "A-242537498"], "details":"In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13-next:0"}, {"fixed":"13-next:2023-03-01"}]}], "versions":["13-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/11c306e3db5f015dee0952efe1c26fa6343201ae"], "severity":"High", "spl":"2023-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["327582123559858781977117958780113467126", "83537071210620035477133119881071565690", "44333672605357550839179852586856802716", "241802534055844365783328220125817648603", "97112676878571324541325114554768250135", "64220535494009218787422161738013770246"], "threshold":0.9}, "id":"ASB-A-242537498-75a2c2f4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/11c306e3db5f015dee0952efe1c26fa6343201ae", "target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerServiceImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"26013401248605620036221261771773677390", "length":1009}, "id":"ASB-A-242537498-f1e30483", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/11c306e3db5f015dee0952efe1c26fa6343201ae", "target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerServiceImpl.java", "function":"addPermission"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2023-03-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8fdf4530aac096d87c8d6afe64036f972a3835be"], "severity":"High", "spl":"2023-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["295703079519489327374525897052801992582", "238878028724186134214475222640892592517", "44333672605357550839179852586856802716", "281036421207129532321443332768700420552", "187617202663803963190501833925435569594", "45358327056640962482356134104137831131"], "threshold":0.9}, "id":"ASB-A-242537498-2bd6224b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8fdf4530aac096d87c8d6afe64036f972a3835be", "target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"262889252496986112574238164846940992953", "length":1015}, "id":"ASB-A-242537498-5fe4a35b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8fdf4530aac096d87c8d6afe64036f972a3835be", "target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java", "function":"addPermission"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2023-03-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1d86c8b29922525972559e00e26c1fcd6f496353"], "severity":"High", "spl":"2023-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"140617909913934172325911125204063752014", "length":1000}, "id":"ASB-A-242537498-60defdb8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1d86c8b29922525972559e00e26c1fcd6f496353", "target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java", "function":"addPermission"}}, {"deprecated":false, "digest":{"line_hashes":["327582123559858781977117958780113467126", "83537071210620035477133119881071565690", "44333672605357550839179852586856802716", "241802534055844365783328220125817648603", "97112676878571324541325114554768250135", "64220535494009218787422161738013770246"], "threshold":0.9}, "id":"ASB-A-242537498-ebf3b092", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1d86c8b29922525972559e00e26c1fcd6f496353", "target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2023-03-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/90e7b4cc40a51bad7d26809fc4c0662e5a129ec7"], "severity":"High", "spl":"2023-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"140617909913934172325911125204063752014", "length":1000}, "id":"ASB-A-242537498-230ca2f0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90e7b4cc40a51bad7d26809fc4c0662e5a129ec7", "target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java", "function":"addPermission"}}, {"deprecated":false, "digest":{"line_hashes":["327582123559858781977117958780113467126", "83537071210620035477133119881071565690", "44333672605357550839179852586856802716", "241802534055844365783328220125817648603", "97112676878571324541325114554768250135", "64220535494009218787422161738013770246"], "threshold":0.9}, "id":"ASB-A-242537498-dd1e0e41", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90e7b4cc40a51bad7d26809fc4c0662e5a129ec7", "target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-03-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/973c67f7fc5d1321ff38e861dfe256a2877af5f0"], "severity":"High", "spl":"2023-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["327582123559858781977117958780113467126", "83537071210620035477133119881071565690", "44333672605357550839179852586856802716", "241802534055844365783328220125817648603", "97112676878571324541325114554768250135", "64220535494009218787422161738013770246"], "threshold":0.9}, "id":"ASB-A-242537498-86f5b37b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/973c67f7fc5d1321ff38e861dfe256a2877af5f0", "target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerServiceImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"26013401248605620036221261771773677390", "length":1009}, "id":"ASB-A-242537498-a0c792fc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/973c67f7fc5d1321ff38e861dfe256a2877af5f0", "target":{"file":"services/core/java/com/android/server/pm/permission/PermissionManagerServiceImpl.java", "function":"addPermission"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-03-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/1d86c8b29922525972559e00e26c1fcd6f496353"}]}