{"id":"ASB-A-243377226", "published":"2023-04-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2023-21099", "A-243377226"], "details":"In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13-next:0"}, {"fixed":"13-next:2023-04-01"}]}], "versions":["13-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd"], "severity":"High", "spl":"2023-04-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"171981411219919283052065122381487322215", "length":722}, "id":"ASB-A-243377226-00dafc30", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"waitForInstallConstraints"}}, {"deprecated":false, "digest":{"function_hash":"87046432260736714533777865737454901035", "length":177}, "id":"ASB-A-243377226-0422cade", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"core/java/android/content/IntentSender.java", "function":"sendIntent"}}, {"deprecated":false, "digest":{"function_hash":"25368376629260852412473134905972457080", "length":425}, "id":"ASB-A-243377226-15daf81b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"dispatchSessionPreappoved"}}, {"deprecated":false, "digest":{"function_hash":"219308357351614869912350567215185510115", "length":292}, "id":"ASB-A-243377226-2879bfc7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/InstallPackageHelper.java", "function":"onRestoreComplete"}}, {"deprecated":false, "digest":{"function_hash":"261947732213692486771292604919295703646", "length":565}, "id":"ASB-A-243377226-298c3719", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"core/java/android/content/IntentSender.java", "function":"sendIntent"}}, {"deprecated":false, "digest":{"function_hash":"258031307705374909764478382548455210238", "length":437}, "id":"ASB-A-243377226-3c726a6d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"onUserActionRequired"}}, {"deprecated":false, "digest":{"function_hash":"292361900949960515964060990264855268018", "length":1414}, "id":"ASB-A-243377226-3e67d829", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendOnPackageInstalled"}}, {"deprecated":false, "digest":{"line_hashes":["116358059063153312272392918688819042471", "261035936267247573398677075023807630530", "44069007036476793968103769503927574052", "207412659919279566920597658500824671150", "259158488790864349618409429793376897242", "29331431292022645715683518506356303460", "36866981505683834809250132793602798996", "116660579404883386993233008672162868534", "114806641617446633542301985421514924282", "275731395159690849144790421027941906494", "128452031570740390892707905408347831960", "314607729991727419006701614927516068134", "4176302984295456083585541823566050908", "65452900290876898748797794998033409553", "297962181431848582035406008076561957061", "309922748554431808629801311406896912873", "56587729412198089865606410257809448228", "271270608742521877492686433569877601550"], "threshold":0.9}, "id":"ASB-A-243377226-5eb8bd61", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"core/java/android/content/IntentSender.java"}}, {"deprecated":false, "digest":{"function_hash":"115771163367087147238223973273834156157", "length":581}, "id":"ASB-A-243377226-76a74bf8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendOnUserActionRequired"}}, {"deprecated":false, "digest":{"function_hash":"174224566600324625455511757873748490543", "length":754}, "id":"ASB-A-243377226-abdb8ff0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendPendingStreaming"}}, {"deprecated":false, "digest":{"function_hash":"314651487143942883914736967300515752730", "length":818}, "id":"ASB-A-243377226-aeacdca0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"onPackageDeleted"}}, {"deprecated":false, "digest":{"line_hashes":["323412635192497196527178943371003595188", "16027203025332034435611508736853592440", "224002682681926482644142831315174294709", "236986350412559622266216948784221704259", "121211820100394126309209462841010091130", "16656867866537009168619989958772658203", "249289125319625592591056665968392361265", "323715380489153043554238641731102943142", "85395633170205573464174811960492861150", "68611945343770282914225145140944487968", "137861408629469069889710535831228376880", "141200585161276211919809719145833048400", "302021338729705551774464323738952841613", "252998963622672028187326744797960770102", "137861408629469069889710535831228376880", "141200585161276211919809719145833048400"], "threshold":0.9}, "id":"ASB-A-243377226-b6442640", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"}}, {"deprecated":false, "digest":{"line_hashes":["92960042013192522150184712629554949343", "186518114013922891760086471429720921629", "11123291332103204746933074636169787786", "280007723443490694062922911995634611338", "252779524570715209015010914293074764443", "183930070490569877087458265804754943352", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954"], "threshold":0.9}, "id":"ASB-A-243377226-d92e30e9", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/InstallPackageHelper.java"}}, {"deprecated":false, "digest":{"line_hashes":["142853875768019227638751984942571758701", "250456287636855603695304993127276667751", "94747253718215377661370998370068262425", "87972040715053793152432707735096436799", "258053734376362344767901118276607707116", "63408651734611183357545190172934392792", "99772112913731084301793178882874656913", "242078930604775561962530105346441125257", "330051605356705577846629823000266352464", "27071684052070866868946552865275153029", "325121086141240965494681112050441347414", "229983836956600975182129729820539834024", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954", "131476104713659483632416649792814749776", "60072063488631917831194234377837912101", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954", "30219924095508504389926441055972838396", "274074480419655705059611601531171683689", "227233343654581734988281036650679773683", "222599868586406303440594060360557978417"], "threshold":0.9}, "id":"ASB-A-243377226-dd5b4c37", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"}}, {"deprecated":false, "digest":{"line_hashes":["230350746094761608679930749460581319244", "234383486024453296436807950542586909656", "33611807596878687146775765485897014386", "49168145632882497069893885308677445712", "219403249346833228025896062802996982120", "193966766531547199235117269987079816873", "203049254234965103924479873428524893312", "5665436218258329645774250914523640581"], "threshold":0.9}, "id":"ASB-A-243377226-fb4206d1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"159379097775954217395148525443538899085", "length":581}, "id":"ASB-A-243377226-fe92a207", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2be553067f56f21c0cf599ffa6b1ff24052a12fd", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java", "function":"freeStorage"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2023-04-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f"], "severity":"High", "spl":"2023-04-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"18028586340217595494749058636609117368", "length":437}, "id":"ASB-A-243377226-0ba82880", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendOnUserActionRequired"}}, {"deprecated":false, "digest":{"function_hash":"10473893671143963680998946290762191544", "length":517}, "id":"ASB-A-243377226-13763d62", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java", "function":"freeStorage"}}, {"deprecated":false, "digest":{"function_hash":"29552642141151798496881742405061617980", "length":1339}, "id":"ASB-A-243377226-15536f14", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"statusUpdate"}}, {"deprecated":false, "digest":{"function_hash":"314651487143942883914736967300515752730", "length":818}, "id":"ASB-A-243377226-2431443e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"onPackageDeleted"}}, {"deprecated":false, "digest":{"line_hashes":["30905036997200962689487109711574692900", "16027203025332034435611508736853592440", "224002682681926482644142831315174294709", "236986350412559622266216948784221704259", "85395633170205573464174811960492861150", "68611945343770282914225145140944487968", "137861408629469069889710535831228376880", "141200585161276211919809719145833048400", "302021338729705551774464323738952841613", "252998963622672028187326744797960770102", "137861408629469069889710535831228376880", "141200585161276211919809719145833048400"], "threshold":0.9}, "id":"ASB-A-243377226-27cea484", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"}}, {"deprecated":false, "digest":{"function_hash":"160490511048139809329378764510816041911", "length":284}, "id":"ASB-A-243377226-3b22cc7c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java", "function":"onRestoreComplete"}}, {"deprecated":false, "digest":{"function_hash":"95153075995565927400725679275297696168", "length":494}, "id":"ASB-A-243377226-995781c9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"core/java/android/content/IntentSender.java", "function":"sendIntent"}}, {"deprecated":false, "digest":{"function_hash":"287690672280276988455249403263415368143", "length":790}, "id":"ASB-A-243377226-a72b258b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendPendingStreaming"}}, {"deprecated":false, "digest":{"function_hash":"258031307705374909764478382548455210238", "length":437}, "id":"ASB-A-243377226-a7fd9b3c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"onUserActionRequired"}}, {"deprecated":false, "digest":{"function_hash":"87046432260736714533777865737454901035", "length":177}, "id":"ASB-A-243377226-c656c6fd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"core/java/android/content/IntentSender.java", "function":"sendIntent"}}, {"deprecated":false, "digest":{"line_hashes":["154087426921860121778145240968476090813", "250270813916669270644255294855217615402", "205044427342703872228822795858602839190", "6582538567083935914024145771823875296", "250839058658008320794706121171605168752", "58311447738158313575199732874226678031", "62192874276832276887684678768737345227", "171749872417742255366638158186767616288", "323341898668904173402620650759852769871", "298287488721407398242028041904582418017", "582342744661768209444636663593397435", "309679254971135653718485858800575588443", "281385543019782044022159079231999744968", "308562075519780914882709395061138408249", "92511822287182473929235481835458359535", "161061822454643210250476455399929476201", "281385543019782044022159079231999744968", "171749872417742255366638158186767616288", "256059965063197078311078052208086041001", "229983836956600975182129729820539834024", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954", "131476104713659483632416649792814749776", "60072063488631917831194234377837912101", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954", "131733860578281390808292043737809998320", "60153867802836665897257106456222091464", "137329737294610573143698624667595740721", "122215696873370329265761368937601934470"], "threshold":0.9}, "id":"ASB-A-243377226-ca3b1ebf", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"}}, {"deprecated":false, "digest":{"line_hashes":["295317561444549671640747669301275542723", "247092910472481710524076146167570130046", "36866981505683834809250132793602798996", "116660579404883386993233008672162868534", "114806641617446633542301985421514924282", "275731395159690849144790421027941906494", "128452031570740390892707905408347831960", "314607729991727419006701614927516068134", "4176302984295456083585541823566050908", "65452900290876898748797794998033409553", "297962181431848582035406008076561957061", "309922748554431808629801311406896912873", "56587729412198089865606410257809448228", "271270608742521877492686433569877601550"], "threshold":0.9}, "id":"ASB-A-243377226-cea2a130", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"core/java/android/content/IntentSender.java"}}, {"deprecated":false, "digest":{"function_hash":"113272842121288150826906473258009570421", "length":1455}, "id":"ASB-A-243377226-d4071f28", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendOnPackageInstalled"}}, {"deprecated":false, "digest":{"line_hashes":["219403249346833228025896062802996982120", "193966766531547199235117269987079816873", "203049254234965103924479873428524893312", "5665436218258329645774250914523640581", "252779524570715209015010914293074764443", "225038616890867297937787119160628082289", "238329617538021927936846931914070672522", "316651912593467609470695356420115289494"], "threshold":0.9}, "id":"ASB-A-243377226-d82e7b9c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b0b1ddb4b4ba5db27f5616b02ae2cdca8b63496f", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2023-04-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7"], "severity":"High", "spl":"2023-04-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["73304285286796207645041454657029646762", "295125738304383576455933284438075500829", "108945557582781098019498898465187749155", "29331431292022645715683518506356303460", "36866981505683834809250132793602798996", "116660579404883386993233008672162868534", "114806641617446633542301985421514924282", "275731395159690849144790421027941906494", "128452031570740390892707905408347831960", "314607729991727419006701614927516068134", "4176302984295456083585541823566050908", "65452900290876898748797794998033409553", "297962181431848582035406008076561957061", "309922748554431808629801311406896912873", "56587729412198089865606410257809448228", "271270608742521877492686433569877601550"], "threshold":0.9}, "id":"ASB-A-243377226-09f15706", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"core/java/android/content/IntentSender.java"}}, {"deprecated":false, "digest":{"line_hashes":["323412635192497196527178943371003595188", "16027203025332034435611508736853592440", "224002682681926482644142831315174294709", "236986350412559622266216948784221704259", "85395633170205573464174811960492861150", "68611945343770282914225145140944487968", "137861408629469069889710535831228376880", "141200585161276211919809719145833048400", "302021338729705551774464323738952841613", "252998963622672028187326744797960770102", "137861408629469069889710535831228376880", "141200585161276211919809719145833048400"], "threshold":0.9}, "id":"ASB-A-243377226-260297b5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"}}, {"deprecated":false, "digest":{"function_hash":"95153075995565927400725679275297696168", "length":494}, "id":"ASB-A-243377226-309b3ebf", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"core/java/android/content/IntentSender.java", "function":"sendIntent"}}, {"deprecated":false, "digest":{"function_hash":"174224566600324625455511757873748490543", "length":754}, "id":"ASB-A-243377226-4d72f824", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendPendingStreaming"}}, {"deprecated":false, "digest":{"function_hash":"87046432260736714533777865737454901035", "length":177}, "id":"ASB-A-243377226-72581af9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"core/java/android/content/IntentSender.java", "function":"sendIntent"}}, {"deprecated":false, "digest":{"line_hashes":["336795017755509346792141919155033651410", "177860852319508677631328805120628172030", "176174153931539697176094628348835527918", "87972040715053793152432707735096436799", "582342744661768209444636663593397435", "309679254971135653718485858800575588443", "281385543019782044022159079231999744968", "308562075519780914882709395061138408249", "256059965063197078311078052208086041001", "229983836956600975182129729820539834024", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954", "131476104713659483632416649792814749776", "60072063488631917831194234377837912101", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954", "30219924095508504389926441055972838396", "274074480419655705059611601531171683689", "227233343654581734988281036650679773683", "222599868586406303440594060360557978417"], "threshold":0.9}, "id":"ASB-A-243377226-77d2263d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"}}, {"deprecated":false, "digest":{"line_hashes":["219403249346833228025896062802996982120", "193966766531547199235117269987079816873", "203049254234965103924479873428524893312", "5665436218258329645774250914523640581", "252779524570715209015010914293074764443", "225038616890867297937787119160628082289", "238329617538021927936846931914070672522", "316651912593467609470695356420115289494"], "threshold":0.9}, "id":"ASB-A-243377226-90f96ca7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"93988994418747638377202196351253599131", "length":1438}, "id":"ASB-A-243377226-a24a81b0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendOnPackageInstalled"}}, {"deprecated":false, "digest":{"function_hash":"258031307705374909764478382548455210238", "length":437}, "id":"ASB-A-243377226-b800f99e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"onUserActionRequired"}}, {"deprecated":false, "digest":{"function_hash":"100196446771587892735951143397347887086", "length":1247}, "id":"ASB-A-243377226-bc0fb96b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"statusUpdate"}}, {"deprecated":false, "digest":{"function_hash":"10473893671143963680998946290762191544", "length":517}, "id":"ASB-A-243377226-c3fa0206", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java", "function":"freeStorage"}}, {"deprecated":false, "digest":{"function_hash":"160490511048139809329378764510816041911", "length":284}, "id":"ASB-A-243377226-f0ef024c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java", "function":"onRestoreComplete"}}, {"deprecated":false, "digest":{"function_hash":"18028586340217595494749058636609117368", "length":437}, "id":"ASB-A-243377226-f9155156", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendOnUserActionRequired"}}, {"deprecated":false, "digest":{"function_hash":"314651487143942883914736967300515752730", "length":818}, "id":"ASB-A-243377226-fbfdafac", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5f00e89989392c9ae00b360e1388d0179dfb36d7", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"onPackageDeleted"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2023-04-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb"], "severity":"High", "spl":"2023-04-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"95153075995565927400725679275297696168", "length":494}, "id":"ASB-A-243377226-0172f2c9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"core/java/android/content/IntentSender.java", "function":"sendIntent"}}, {"deprecated":false, "digest":{"function_hash":"87046432260736714533777865737454901035", "length":177}, "id":"ASB-A-243377226-0efa455e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"core/java/android/content/IntentSender.java", "function":"sendIntent"}}, {"deprecated":false, "digest":{"function_hash":"100196446771587892735951143397347887086", "length":1247}, "id":"ASB-A-243377226-57a36b40", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"statusUpdate"}}, {"deprecated":false, "digest":{"function_hash":"18028586340217595494749058636609117368", "length":437}, "id":"ASB-A-243377226-5a30913b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendOnUserActionRequired"}}, {"deprecated":false, "digest":{"line_hashes":["336795017755509346792141919155033651410", "177860852319508677631328805120628172030", "176174153931539697176094628348835527918", "87972040715053793152432707735096436799", "582342744661768209444636663593397435", "309679254971135653718485858800575588443", "281385543019782044022159079231999744968", "308562075519780914882709395061138408249", "256059965063197078311078052208086041001", "229983836956600975182129729820539834024", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954", "131476104713659483632416649792814749776", "60072063488631917831194234377837912101", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954", "30219924095508504389926441055972838396", "274074480419655705059611601531171683689", "227233343654581734988281036650679773683", "222599868586406303440594060360557978417"], "threshold":0.9}, "id":"ASB-A-243377226-5e8d46c6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"}}, {"deprecated":false, "digest":{"function_hash":"314651487143942883914736967300515752730", "length":818}, "id":"ASB-A-243377226-6eb03f26", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"onPackageDeleted"}}, {"deprecated":false, "digest":{"function_hash":"160490511048139809329378764510816041911", "length":284}, "id":"ASB-A-243377226-7e1502d3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java", "function":"onRestoreComplete"}}, {"deprecated":false, "digest":{"function_hash":"10473893671143963680998946290762191544", "length":517}, "id":"ASB-A-243377226-8c60053e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java", "function":"freeStorage"}}, {"deprecated":false, "digest":{"line_hashes":["323412635192497196527178943371003595188", "16027203025332034435611508736853592440", "224002682681926482644142831315174294709", "236986350412559622266216948784221704259", "85395633170205573464174811960492861150", "68611945343770282914225145140944487968", "137861408629469069889710535831228376880", "141200585161276211919809719145833048400", "302021338729705551774464323738952841613", "252998963622672028187326744797960770102", "137861408629469069889710535831228376880", "141200585161276211919809719145833048400"], "threshold":0.9}, "id":"ASB-A-243377226-d9bdc21f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"}}, {"deprecated":false, "digest":{"function_hash":"93988994418747638377202196351253599131", "length":1438}, "id":"ASB-A-243377226-dd61010b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendOnPackageInstalled"}}, {"deprecated":false, "digest":{"line_hashes":["73304285286796207645041454657029646762", "295125738304383576455933284438075500829", "108945557582781098019498898465187749155", "29331431292022645715683518506356303460", "36866981505683834809250132793602798996", "116660579404883386993233008672162868534", "114806641617446633542301985421514924282", "275731395159690849144790421027941906494", "128452031570740390892707905408347831960", "314607729991727419006701614927516068134", "4176302984295456083585541823566050908", "65452900290876898748797794998033409553", "297962181431848582035406008076561957061", "309922748554431808629801311406896912873", "56587729412198089865606410257809448228", "271270608742521877492686433569877601550"], "threshold":0.9}, "id":"ASB-A-243377226-e8a7f6ff", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"core/java/android/content/IntentSender.java"}}, {"deprecated":false, "digest":{"function_hash":"174224566600324625455511757873748490543", "length":754}, "id":"ASB-A-243377226-f195c157", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendPendingStreaming"}}, {"deprecated":false, "digest":{"function_hash":"258031307705374909764478382548455210238", "length":437}, "id":"ASB-A-243377226-f3ac6298", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"onUserActionRequired"}}, {"deprecated":false, "digest":{"line_hashes":["219403249346833228025896062802996982120", "193966766531547199235117269987079816873", "203049254234965103924479873428524893312", "5665436218258329645774250914523640581", "252779524570715209015010914293074764443", "225038616890867297937787119160628082289", "238329617538021927936846931914070672522", "316651912593467609470695356420115289494"], "threshold":0.9}, "id":"ASB-A-243377226-f485f8a0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ec981d0e7ac9066984401a24569d284aa4a4beb", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-04-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73"], "severity":"High", "spl":"2023-04-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["323412635192497196527178943371003595188", "16027203025332034435611508736853592440", "224002682681926482644142831315174294709", "236986350412559622266216948784221704259", "85395633170205573464174811960492861150", "68611945343770282914225145140944487968", "137861408629469069889710535831228376880", "141200585161276211919809719145833048400", "302021338729705551774464323738952841613", "252998963622672028187326744797960770102", "137861408629469069889710535831228376880", "141200585161276211919809719145833048400"], "threshold":0.9}, "id":"ASB-A-243377226-096f35a1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"}}, {"deprecated":false, "digest":{"line_hashes":["73304285286796207645041454657029646762", "295125738304383576455933284438075500829", "108945557582781098019498898465187749155", "29331431292022645715683518506356303460", "36866981505683834809250132793602798996", "116660579404883386993233008672162868534", "114806641617446633542301985421514924282", "275731395159690849144790421027941906494", "128452031570740390892707905408347831960", "314607729991727419006701614927516068134", "4176302984295456083585541823566050908", "65452900290876898748797794998033409553", "297962181431848582035406008076561957061", "309922748554431808629801311406896912873", "56587729412198089865606410257809448228", "271270608742521877492686433569877601550"], "threshold":0.9}, "id":"ASB-A-243377226-1ec995ba", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"core/java/android/content/IntentSender.java"}}, {"deprecated":false, "digest":{"function_hash":"219308357351614869912350567215185510115", "length":292}, "id":"ASB-A-243377226-2bcb10cd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/InstallPackageHelper.java", "function":"onRestoreComplete"}}, {"deprecated":false, "digest":{"function_hash":"87046432260736714533777865737454901035", "length":177}, "id":"ASB-A-243377226-46f28099", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"core/java/android/content/IntentSender.java", "function":"sendIntent"}}, {"deprecated":false, "digest":{"function_hash":"314651487143942883914736967300515752730", "length":818}, "id":"ASB-A-243377226-527e34ec", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"onPackageDeleted"}}, {"deprecated":false, "digest":{"function_hash":"18028586340217595494749058636609117368", "length":437}, "id":"ASB-A-243377226-6784331b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendOnUserActionRequired"}}, {"deprecated":false, "digest":{"function_hash":"258031307705374909764478382548455210238", "length":437}, "id":"ASB-A-243377226-84657f15", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"onUserActionRequired"}}, {"deprecated":false, "digest":{"function_hash":"159379097775954217395148525443538899085", "length":581}, "id":"ASB-A-243377226-8f59daf5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java", "function":"freeStorage"}}, {"deprecated":false, "digest":{"line_hashes":["207144622467762879224534720409084504778", "35340660332901479199731445305937848243", "11123291332103204746933074636169787786", "280007723443490694062922911995634611338", "252779524570715209015010914293074764443", "183930070490569877087458265804754943352", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954"], "threshold":0.9}, "id":"ASB-A-243377226-b384a997", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/InstallPackageHelper.java"}}, {"deprecated":false, "digest":{"function_hash":"174224566600324625455511757873748490543", "length":754}, "id":"ASB-A-243377226-b8b65021", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendPendingStreaming"}}, {"deprecated":false, "digest":{"function_hash":"278886018652066584784600442955964654687", "length":1333}, "id":"ASB-A-243377226-c10fc47b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java", "function":"sendOnPackageInstalled"}}, {"deprecated":false, "digest":{"line_hashes":["142853875768019227638751984942571758701", "250456287636855603695304993127276667751", "94747253718215377661370998370068262425", "87972040715053793152432707735096436799", "256059965063197078311078052208086041001", "229983836956600975182129729820539834024", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954", "131476104713659483632416649792814749776", "60072063488631917831194234377837912101", "237649437396064158548480520350490479791", "200647927988515877784747341304982809954", "30219924095508504389926441055972838396", "274074480419655705059611601531171683689", "227233343654581734988281036650679773683", "222599868586406303440594060360557978417"], "threshold":0.9}, "id":"ASB-A-243377226-d4cde585", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerSession.java"}}, {"deprecated":false, "digest":{"line_hashes":["230350746094761608679930749460581319244", "234383486024453296436807950542586909656", "33611807596878687146775765485897014386", "49168145632882497069893885308677445712", "219403249346833228025896062802996982120", "193966766531547199235117269987079816873", "203049254234965103924479873428524893312", "5665436218258329645774250914523640581"], "threshold":0.9}, "id":"ASB-A-243377226-eb189253", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"services/core/java/com/android/server/pm/PackageManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"95153075995565927400725679275297696168", "length":494}, "id":"ASB-A-243377226-ec92cb38", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/03b77aee350696781b4d7a61768a172bedc3ac73", "target":{"file":"core/java/android/content/IntentSender.java", "function":"sendIntent"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-04-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/6aba151873bfae198ef9eceb10f943e18b52d58c"}]}