{"id":"ASB-A-250576066", "published":"2023-05-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2023-20930", "A-250576066"], "details":"In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13-next:0"}, {"fixed":"13-next:2023-05-01"}]}], "versions":["13-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a6e7958ab84edbd9e5f4653d4d1f56a7438cd7dc"], "severity":"High", "spl":"2023-05-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["263319105436304544669465896104837762292", "209433139401287827018802582806077355352", "87903803937766089760555569733262964194", "176777970042277569770102167999729227598", "318293070038876033060965832004201044489", "220930443646617294108905458302761787011", "317626222385978607443868078557241336954", "66687373854084663651112606406651461070", "173971672301406110322133855611485683397", "336404952339228199475508797695935597283", "86974169324915387921699013212513577618", "315191164901161336847818578323290075880", "317862923198000710319511510430566844411", "8308687824363671500918457600922454598", "201429495463495163230532660688924447305", "164883290371370547310355437226293042824", "255443617585254975062586346019909869731"], "threshold":0.9}, "id":"ASB-A-250576066-3b2ea84b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a6e7958ab84edbd9e5f4653d4d1f56a7438cd7dc", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}, {"deprecated":false, "digest":{"line_hashes":["112819135667818622446167179094097966434", "305443486794261425947495537347947738044", "52496095293216530187806415669181992772", "273294942800010947632445066696433199181", "182039256878973102887855388334708670016", "213712598735335796825173873896994422015", "226013295120343190781462209522498665875", "68876529634684499168618134949861631031", "146675904964950339001636685030019199363", "193324184626042728143722075020275764", "23038817158246762162577687466723167446", "74235277546563375252276512014703583595", "292124414530965314300501740429402732744", "159891601196343205709917921063675260670", "243874798345107531105067913894287967099", "313530287294025289666857944009157029531", "2707482573143663031893681920786570239", "134894423297946876213991423773651345330", "65452582583506499115640090295345008438", "38257340611505229403524659553585825240", "46396027059303578089109893954900213043", "127447808061736971444819786883721833855", "128733845685596833468573023789068192609", "22607210886048257108461673154602897390", "176380756201037962097357587604007030118", "145473821102774981767364482628189524482", "205973053757258408909553876029435734269", "251152543086343203274031177235164608745", "187872204431872691416818133930619955739"], "threshold":0.9}, "id":"ASB-A-250576066-8379bd43", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a6e7958ab84edbd9e5f4653d4d1f56a7438cd7dc", "target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java"}}, {"deprecated":false, "digest":{"function_hash":"219633561347647050194707406149672564765", "length":1435}, "id":"ASB-A-250576066-e838ea21", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a6e7958ab84edbd9e5f4653d4d1f56a7438cd7dc", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateConfigurationLocked"}}, {"deprecated":false, "digest":{"function_hash":"138504845774840384346845059392139743860", "length":2064}, "id":"ASB-A-250576066-f3677138", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a6e7958ab84edbd9e5f4653d4d1f56a7438cd7dc", "target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java", "function":"pushDynamicShortcut"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2023-05-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2296ccfde0678b86f22e1da7bd57518f3bfafbba"], "severity":"High", "spl":"2023-05-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"97531938974707997750877757211182068554", "length":1118}, "id":"ASB-A-250576066-a0d978d5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2296ccfde0678b86f22e1da7bd57518f3bfafbba", "target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"line_hashes":["139863919492038479745206774863257480367", "206323315581079548946504532864036965495", "320713686089525601840439796260115321844", "54504074822801364046197543760070336546", "112819135667818622446167179094097966434", "305443486794261425947495537347947738044", "52496095293216530187806415669181992772", "90043954721652029395247301710681832898", "2583973546731652273985425307414353193", "41405625506682932809210278687386351834", "226013295120343190781462209522498665875", "68876529634684499168618134949861631031", "273923886341444755969076375559086187882", "284616085952041963968440058155756522585", "65452582583506499115640090295345008438", "172532342879144110601374080233970417022", "324374432826698901441158664862637118462", "127447808061736971444819786883721833855", "128733845685596833468573023789068192609", "153163077706541616796376872791441618058", "307294065339775968206176423023106608104", "162029462156746683458273888147080494042", "205973053757258408909553876029435734269", "251152543086343203274031177235164608745", "187872204431872691416818133930619955739"], "threshold":0.9}, "id":"ASB-A-250576066-c98524be", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2296ccfde0678b86f22e1da7bd57518f3bfafbba", "target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java"}}, {"deprecated":false, "digest":{"function_hash":"219633561347647050194707406149672564765", "length":1435}, "id":"ASB-A-250576066-db402f94", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2296ccfde0678b86f22e1da7bd57518f3bfafbba", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateConfigurationLocked"}}, {"deprecated":false, "digest":{"line_hashes":["263319105436304544669465896104837762292", "209433139401287827018802582806077355352", "87903803937766089760555569733262964194", "176777970042277569770102167999729227598", "318293070038876033060965832004201044489", "220930443646617294108905458302761787011", "317626222385978607443868078557241336954", "249012837729439389713894278016821472567", "173971672301406110322133855611485683397", "336404952339228199475508797695935597283", "86974169324915387921699013212513577618", "315191164901161336847818578323290075880", "317862923198000710319511510430566844411", "8308687824363671500918457600922454598", "241253404296607784736844515963210454506", "4533706422710046450914612664722107183", "81775421182764501649966897227256281070"], "threshold":0.9}, "id":"ASB-A-250576066-dbd33f79", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2296ccfde0678b86f22e1da7bd57518f3bfafbba", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2023-05-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d"], "severity":"High", "spl":"2023-05-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["112819135667818622446167179094097966434", "305443486794261425947495537347947738044", "52496095293216530187806415669181992772", "273294942800010947632445066696433199181", "182039256878973102887855388334708670016", "213712598735335796825173873896994422015", "226013295120343190781462209522498665875", "68876529634684499168618134949861631031", "273923886341444755969076375559086187882", "284616085952041963968440058155756522585", "65452582583506499115640090295345008438", "172532342879144110601374080233970417022", "324374432826698901441158664862637118462", "127447808061736971444819786883721833855", "128733845685596833468573023789068192609", "22607210886048257108461673154602897390", "176380756201037962097357587604007030118", "170383425406217083133573192457904054039", "205973053757258408909553876029435734269", "251152543086343203274031177235164608745", "187872204431872691416818133930619955739"], "threshold":0.9}, "id":"ASB-A-250576066-1eb47114", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java"}}, {"deprecated":false, "digest":{"function_hash":"121852738350275285628229651759622807722", "length":1475}, "id":"ASB-A-250576066-6184fe10", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"function_hash":"219633561347647050194707406149672564765", "length":1435}, "id":"ASB-A-250576066-e28c9ff4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateConfigurationLocked"}}, {"deprecated":false, "digest":{"line_hashes":["263319105436304544669465896104837762292", "209433139401287827018802582806077355352", "87903803937766089760555569733262964194", "176777970042277569770102167999729227598", "318293070038876033060965832004201044489", "220930443646617294108905458302761787011", "317626222385978607443868078557241336954", "66687373854084663651112606406651461070", "173971672301406110322133855611485683397", "336404952339228199475508797695935597283", "86974169324915387921699013212513577618", "315191164901161336847818578323290075880", "317862923198000710319511510430566844411", "8308687824363671500918457600922454598", "241253404296607784736844515963210454506", "4533706422710046450914612664722107183", "81775421182764501649966897227256281070"], "threshold":0.9}, "id":"ASB-A-250576066-ee21804b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2023-05-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d"], "severity":"High", "spl":"2023-05-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"121852738350275285628229651759622807722", "length":1475}, "id":"ASB-A-250576066-29557bcc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"line_hashes":["263319105436304544669465896104837762292", "209433139401287827018802582806077355352", "87903803937766089760555569733262964194", "176777970042277569770102167999729227598", "318293070038876033060965832004201044489", "220930443646617294108905458302761787011", "317626222385978607443868078557241336954", "66687373854084663651112606406651461070", "173971672301406110322133855611485683397", "336404952339228199475508797695935597283", "86974169324915387921699013212513577618", "315191164901161336847818578323290075880", "317862923198000710319511510430566844411", "8308687824363671500918457600922454598", "241253404296607784736844515963210454506", "4533706422710046450914612664722107183", "81775421182764501649966897227256281070"], "threshold":0.9}, "id":"ASB-A-250576066-50e13619", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}, {"deprecated":false, "digest":{"function_hash":"219633561347647050194707406149672564765", "length":1435}, "id":"ASB-A-250576066-cb7e0b20", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateConfigurationLocked"}}, {"deprecated":false, "digest":{"line_hashes":["112819135667818622446167179094097966434", "305443486794261425947495537347947738044", "52496095293216530187806415669181992772", "273294942800010947632445066696433199181", "182039256878973102887855388334708670016", "213712598735335796825173873896994422015", "226013295120343190781462209522498665875", "68876529634684499168618134949861631031", "273923886341444755969076375559086187882", "284616085952041963968440058155756522585", "65452582583506499115640090295345008438", "172532342879144110601374080233970417022", "324374432826698901441158664862637118462", "127447808061736971444819786883721833855", "128733845685596833468573023789068192609", "22607210886048257108461673154602897390", "176380756201037962097357587604007030118", "170383425406217083133573192457904054039", "205973053757258408909553876029435734269", "251152543086343203274031177235164608745", "187872204431872691416818133930619955739"], "threshold":0.9}, "id":"ASB-A-250576066-d05f9c7d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94437e989c0391b2dbf28d33120fdc28a4ce8d4d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-05-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/be9d9c04db77c2ccd22ec98d257524102f2f16a5"], "severity":"High", "spl":"2023-05-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"138504845774840384346845059392139743860", "length":2064}, "id":"ASB-A-250576066-65857391", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/be9d9c04db77c2ccd22ec98d257524102f2f16a5", "target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"line_hashes":["263319105436304544669465896104837762292", "209433139401287827018802582806077355352", "87903803937766089760555569733262964194", "176777970042277569770102167999729227598", "318293070038876033060965832004201044489", "220930443646617294108905458302761787011", "317626222385978607443868078557241336954", "66687373854084663651112606406651461070", "173971672301406110322133855611485683397", "336404952339228199475508797695935597283", "86974169324915387921699013212513577618", "315191164901161336847818578323290075880", "317862923198000710319511510430566844411", "8308687824363671500918457600922454598", "201429495463495163230532660688924447305", "164883290371370547310355437226293042824", "255443617585254975062586346019909869731"], "threshold":0.9}, "id":"ASB-A-250576066-8d7dd9b4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/be9d9c04db77c2ccd22ec98d257524102f2f16a5", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}, {"deprecated":false, "digest":{"function_hash":"219633561347647050194707406149672564765", "length":1435}, "id":"ASB-A-250576066-9555501d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/be9d9c04db77c2ccd22ec98d257524102f2f16a5", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateConfigurationLocked"}}, {"deprecated":false, "digest":{"line_hashes":["112819135667818622446167179094097966434", "305443486794261425947495537347947738044", "52496095293216530187806415669181992772", "273294942800010947632445066696433199181", "182039256878973102887855388334708670016", "213712598735335796825173873896994422015", "226013295120343190781462209522498665875", "68876529634684499168618134949861631031", "146675904964950339001636685030019199363", "193324184626042728143722075020275764", "23038817158246762162577687466723167446", "74235277546563375252276512014703583595", "292124414530965314300501740429402732744", "159891601196343205709917921063675260670", "243874798345107531105067913894287967099", "313530287294025289666857944009157029531", "2707482573143663031893681920786570239", "134894423297946876213991423773651345330", "65452582583506499115640090295345008438", "38257340611505229403524659553585825240", "46396027059303578089109893954900213043", "127447808061736971444819786883721833855", "128733845685596833468573023789068192609", "22607210886048257108461673154602897390", "176380756201037962097357587604007030118", "145473821102774981767364482628189524482", "205973053757258408909553876029435734269", "251152543086343203274031177235164608745", "187872204431872691416818133930619955739"], "threshold":0.9}, "id":"ASB-A-250576066-b69a981a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/be9d9c04db77c2ccd22ec98d257524102f2f16a5", "target":{"file":"services/core/java/com/android/server/pm/ShortcutPackage.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-05-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/a8cd2d5733372d7dfd61fbd1ac4c6468da12eefd"}]}