{"id":"ASB-A-256590210", "published":"2023-03-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2023-20962", "A-256590210"], "details":"In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13-next:0"}, {"fixed":"13-next:2023-03-01"}]}], "versions":["13-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a"], "severity":"High", "spl":"2023-03-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"112506446779645939618809771884614919549", "length":1369}, "id":"ASB-A-256590210-1c3a4f7b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a", "target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java", "function":"getSliceEndItem"}}, {"deprecated":false, "digest":{"line_hashes":["2515871916174150255799763824649463257", "298836900560150201302479999804498096907", "69522089916178489900932734138740572745", "57865836528454852670306520309248702019", "37781278548710382719472231090868775778", "48545541848750326640869001537836142463", "48365835297228604622638209361776787666", "85808235985644850924488554010393157934"], "threshold":0.9}, "id":"ASB-A-256590210-7955dfd0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a", "target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2023-03-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/0dcd6a5492fae67e0d7f1fb83f6d4db7eaa15b55"], "severity":"High", "spl":"2023-03-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"229157261693608242773145203535346763423", "length":1239}, "id":"ASB-A-256590210-527d4d71", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0dcd6a5492fae67e0d7f1fb83f6d4db7eaa15b55", "target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java", "function":"getSliceEndItem"}}, {"deprecated":false, "digest":{"line_hashes":["2515871916174150255799763824649463257", "298836900560150201302479999804498096907", "69522089916178489900932734138740572745", "57865836528454852670306520309248702019", "65900709389474950378267103208749820698", "189586809716431586901542998965821551222", "48365835297228604622638209361776787666", "85808235985644850924488554010393157934"], "threshold":0.9}, "id":"ASB-A-256590210-7f81de89", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/0dcd6a5492fae67e0d7f1fb83f6d4db7eaa15b55", "target":{"file":"src/com/android/settings/notification/MediaVolumePreferenceController.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2023-03-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Settings/+/09a6899fc2271d260ec2979b1afc8eef1847b34a"}]}