In applyCustomDescription of SaveUi.java, there is a possible way to view another user's image content. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"https://android.googlesource.com/platform/frameworks/base/+/ed132ae5552fb7080e4c9f73ab32d42bccae7849",
"https://android.googlesource.com/platform/frameworks/base/+/73e2b35a63d8c5da528b7a2dad2091f40b0f49c1"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
},
"digest": {
"line_hashes": [
"152706124914265209826722211813105497440",
"122457438830031755697776489763091500155",
"9557648870503328618362177008065891024",
"21424190766785613237481844130356205668",
"318743049332437221904056720756700357292",
"19494396699293671953931356471127301788",
"125685506690105876920915180744054100445",
"193060436326013056668025233908441392097",
"45525861848201633409686579962243666914",
"247171390140834564838122080548466479325",
"11417974425339281741084590764620266974",
"63675271650473437443478445002199682738",
"337643276294840670681719171796552205364",
"120308007170846405930104003764350781053",
"110491743816707019839998419656968232453",
"290369119132319450297915760482112743456",
"318831208973307593363994768019606516553",
"118585930299939295491472408901765825976"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"signature_version": "v1",
"id": "ASB-A-286235483-06445f7a"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"digest": {
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"131797680883177356094980231743236799214",
"13743237982565477192462131139233942864",
"220855508336303408398916928186082455251",
"329619481055895590037036631590622970823",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"117549971729738303213187240697902417647",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"111796235914419191665964098960243226521",
"207213852785232402439269374595379165908",
"203848945185388572641881933342812273789",
"85290425299232820361070354058640610311",
"324514966097401313249705843429493881194",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/73e2b35a63d8c5da528b7a2dad2091f40b0f49c1",
"signature_version": "v1",
"id": "ASB-A-286235483-3731be54"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"digest": {
"length": 3696.0,
"function_hash": "110995354895912650465302359732992851334"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"signature_version": "v1",
"id": "ASB-A-286235483-4124815a"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"digest": {
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"333330205953434566825133141790243117107",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/73e2b35a63d8c5da528b7a2dad2091f40b0f49c1",
"signature_version": "v1",
"id": "ASB-A-286235483-43a65616"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/73e2b35a63d8c5da528b7a2dad2091f40b0f49c1",
"signature_version": "v1",
"id": "ASB-A-286235483-5fd37c0e"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ed132ae5552fb7080e4c9f73ab32d42bccae7849",
"signature_version": "v1",
"id": "ASB-A-286235483-63d6a911"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "initialAuthenticationLayout"
},
"digest": {
"length": 754.0,
"function_hash": "49532191195551615746744837755912801092"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"signature_version": "v1",
"id": "ASB-A-286235483-6438f6a0"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"digest": {
"line_hashes": [
"70384187207969473467724071990317729398",
"320418546227076084465594181217435078892",
"139034975296227356350451546793061696188",
"198840029242654939539433467117586934531",
"313245536086977364838236582966126120156",
"9821241575628344625617058172907797661",
"84864080468086762366722034388010268348",
"321713212781640076910098641929018121181",
"60835553322294116645322918846401089571",
"194254830192584495059033577937727898134",
"147075656553749944497531376143451541327",
"11224255276186999251427813799537284016",
"190000541700740439308365212289947348130"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"signature_version": "v1",
"id": "ASB-A-286235483-77854c22"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"digest": {
"length": 6510.0,
"function_hash": "31646391903980341277154471442477253944"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"signature_version": "v1",
"id": "ASB-A-286235483-80fd7a71"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"digest": {
"line_hashes": [
"148303161279659643660660451501034279234",
"125883638802437311423689325172088876430",
"68109407143103339498063405506151933519",
"141851605057521366089072764562061264673"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"signature_version": "v1",
"id": "ASB-A-286235483-a53a4b64"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"digest": {
"line_hashes": [
"195550187764114165661677033491385867525",
"207939012160879388942929324645558281641",
"197882718764834178866649541080794831380",
"239233852245253813103569443623407063279",
"44698807005793972678540295405764893919",
"21183059188807409401714516310665780128",
"300048194628243201263727493046361281547",
"303844278245018911624601514776114041871",
"229695913011207263233075675270896549026",
"55169701512537227256118636456135333684",
"198388733492753553705907241123091591212",
"304920987658179113312826479999607115028",
"269055928370450172860520757506759510794",
"237757000885932752970060260599884987089",
"33379483823330199745001603645193499184"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"signature_version": "v1",
"id": "ASB-A-286235483-ad39c60e"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"digest": {
"length": 313.0,
"function_hash": "294333741050012603622705831431024664218"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/73e2b35a63d8c5da528b7a2dad2091f40b0f49c1",
"signature_version": "v1",
"id": "ASB-A-286235483-d6904a05"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "createDatasetItems"
},
"digest": {
"length": 1677.0,
"function_hash": "14933855057066592257347322952625317997"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"signature_version": "v1",
"id": "ASB-A-286235483-e69baae4"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "setHeader"
},
"digest": {
"length": 498.0,
"function_hash": "243658678464188710220306003597891618027"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"signature_version": "v1",
"id": "ASB-A-286235483-eeb818cb"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"digest": {
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ed132ae5552fb7080e4c9f73ab32d42bccae7849",
"signature_version": "v1",
"id": "ASB-A-286235483-f736212f"
}
],
"spl": "2025-02-01",
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"digest": {
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"284941637186884576196230685734131204928",
"321634460043371652687586406768793962657",
"110285166450574441902084564330346162982",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"173131988331465702442932404114481572319",
"21486416942560900997186924977493908859",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"signature_version": "v1",
"id": "ASB-A-286235483-000b4702"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"signature_version": "v1",
"id": "ASB-A-286235483-339bd43d"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"digest": {
"length": 314.0,
"function_hash": "188489595388106952960806512309835331279"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"signature_version": "v1",
"id": "ASB-A-286235483-452cb38e"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"signature_version": "v1",
"id": "ASB-A-286235483-4b2a22a0"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"digest": {
"line_hashes": [
"70384187207969473467724071990317729398",
"320418546227076084465594181217435078892",
"139034975296227356350451546793061696188",
"198840029242654939539433467117586934531",
"313245536086977364838236582966126120156",
"9821241575628344625617058172907797661",
"84864080468086762366722034388010268348",
"321713212781640076910098641929018121181",
"60835553322294116645322918846401089571",
"194254830192584495059033577937727898134",
"147075656553749944497531376143451541327",
"11224255276186999251427813799537284016",
"190000541700740439308365212289947348130"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"signature_version": "v1",
"id": "ASB-A-286235483-4bba6ff2"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"digest": {
"line_hashes": [
"206563368113645024653705304061605275981",
"197882718764834178866649541080794831380",
"239233852245253813103569443623407063279",
"44698807005793972678540295405764893919",
"21183059188807409401714516310665780128",
"300048194628243201263727493046361281547",
"200644165688969314273219891189461360855",
"77496428704198062703578586753481553588",
"55169701512537227256118636456135333684",
"198388733492753553705907241123091591212",
"304920987658179113312826479999607115028",
"269055928370450172860520757506759510794",
"237757000885932752970060260599884987089",
"33379483823330199745001603645193499184"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"signature_version": "v1",
"id": "ASB-A-286235483-5897c9bc"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"digest": {
"length": 6466.0,
"function_hash": "155518773178166328024443815934004657924"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"signature_version": "v1",
"id": "ASB-A-286235483-9791299f"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"digest": {
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"signature_version": "v1",
"id": "ASB-A-286235483-9c0241b7"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"digest": {
"length": 3696.0,
"function_hash": "110995354895912650465302359732992851334"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"signature_version": "v1",
"id": "ASB-A-286235483-be69d6ef"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"digest": {
"line_hashes": [
"148303161279659643660660451501034279234",
"125883638802437311423689325172088876430",
"68109407143103339498063405506151933519",
"141851605057521366089072764562061264673"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"signature_version": "v1",
"id": "ASB-A-286235483-d4299c57"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"digest": {
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"109535534066620136114047541315525119830",
"39969641276167070584553621571552279175",
"273102936699452161018250453562184661223",
"336957761749332893969238411852890882197",
"129960398606289640900436180927353833227",
"237703053832879051061104204999411942989",
"163913456718500460619567237726221108710",
"207422323756427847318687779668421267848",
"90656393623779830526015349851986904249",
"319878405943239932225760530864971781909",
"333330205953434566825133141790243117107",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"signature_version": "v1",
"id": "ASB-A-286235483-df1f98e3"
}
],
"spl": "2025-02-01",
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"digest": {
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"109535534066620136114047541315525119830",
"39969641276167070584553621571552279175",
"273102936699452161018250453562184661223",
"336957761749332893969238411852890882197",
"129960398606289640900436180927353833227",
"237703053832879051061104204999411942989",
"163913456718500460619567237726221108710",
"207422323756427847318687779668421267848",
"90656393623779830526015349851986904249",
"319878405943239932225760530864971781909",
"333330205953434566825133141790243117107",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"signature_version": "v1",
"id": "ASB-A-286235483-0061e4bb"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"digest": {
"line_hashes": [
"206563368113645024653705304061605275981",
"197882718764834178866649541080794831380",
"239233852245253813103569443623407063279",
"44698807005793972678540295405764893919",
"21183059188807409401714516310665780128",
"300048194628243201263727493046361281547",
"200644165688969314273219891189461360855",
"77496428704198062703578586753481553588",
"55169701512537227256118636456135333684",
"198388733492753553705907241123091591212",
"304920987658179113312826479999607115028",
"269055928370450172860520757506759510794",
"237757000885932752970060260599884987089",
"33379483823330199745001603645193499184"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"signature_version": "v1",
"id": "ASB-A-286235483-4b9be62e"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"digest": {
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"284941637186884576196230685734131204928",
"321634460043371652687586406768793962657",
"110285166450574441902084564330346162982",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"173131988331465702442932404114481572319",
"21486416942560900997186924977493908859",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"signature_version": "v1",
"id": "ASB-A-286235483-62af7399"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"digest": {
"length": 6466.0,
"function_hash": "155518773178166328024443815934004657924"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"signature_version": "v1",
"id": "ASB-A-286235483-69bfefd7"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"signature_version": "v1",
"id": "ASB-A-286235483-9b515141"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"digest": {
"length": 314.0,
"function_hash": "188489595388106952960806512309835331279"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"signature_version": "v1",
"id": "ASB-A-286235483-9eb4608b"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"digest": {
"length": 3696.0,
"function_hash": "110995354895912650465302359732992851334"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"signature_version": "v1",
"id": "ASB-A-286235483-c0f2a3a7"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"digest": {
"line_hashes": [
"148303161279659643660660451501034279234",
"125883638802437311423689325172088876430",
"68109407143103339498063405506151933519",
"141851605057521366089072764562061264673"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"signature_version": "v1",
"id": "ASB-A-286235483-d7552cd1"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"signature_version": "v1",
"id": "ASB-A-286235483-e241027c"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"digest": {
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"signature_version": "v1",
"id": "ASB-A-286235483-e533f972"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"digest": {
"line_hashes": [
"70384187207969473467724071990317729398",
"320418546227076084465594181217435078892",
"139034975296227356350451546793061696188",
"198840029242654939539433467117586934531",
"313245536086977364838236582966126120156",
"9821241575628344625617058172907797661",
"84864080468086762366722034388010268348",
"321713212781640076910098641929018121181",
"60835553322294116645322918846401089571",
"194254830192584495059033577937727898134",
"147075656553749944497531376143451541327",
"11224255276186999251427813799537284016",
"190000541700740439308365212289947348130"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"signature_version": "v1",
"id": "ASB-A-286235483-f36bcf55"
}
],
"spl": "2025-02-01",
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/91388db0875db874d53ea9d3f3a39d925af631d8"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"digest": {
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"131797680883177356094980231743236799214",
"13743237982565477192462131139233942864",
"220855508336303408398916928186082455251",
"329619481055895590037036631590622970823",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"111796235914419191665964098960243226521",
"207213852785232402439269374595379165908",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/91388db0875db874d53ea9d3f3a39d925af631d8",
"signature_version": "v1",
"id": "ASB-A-286235483-4f18a5a7"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"digest": {
"length": 313.0,
"function_hash": "294333741050012603622705831431024664218"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/91388db0875db874d53ea9d3f3a39d925af631d8",
"signature_version": "v1",
"id": "ASB-A-286235483-ace37762"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/91388db0875db874d53ea9d3f3a39d925af631d8",
"signature_version": "v1",
"id": "ASB-A-286235483-bcd16bdf"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"digest": {
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"109535534066620136114047541315525119830",
"39969641276167070584553621571552279175",
"273102936699452161018250453562184661223",
"336957761749332893969238411852890882197",
"129960398606289640900436180927353833227",
"237703053832879051061104204999411942989",
"163913456718500460619567237726221108710",
"207422323756427847318687779668421267848",
"90656393623779830526015349851986904249",
"5563047589043757462169386622850731423",
"143759379317545216397527536916097700704",
"189102626901464415316969655810919033406",
"245131540180806575368969544734024544462",
"159888205038063237398178461743637855398",
"67217958381954166457199508546200067698",
"240567232716717344909651784978029474606",
"286541530287770368649486844991579581516",
"166274331552122355056395927718241162762",
"137975847977573320425778059453991540263",
"132810242104132405657307340012094167302",
"183142955510329644846449222720220875517",
"333330205953434566825133141790243117107",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/91388db0875db874d53ea9d3f3a39d925af631d8",
"signature_version": "v1",
"id": "ASB-A-286235483-f8261a1a"
}
],
"spl": "2025-02-01",
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"digest": {
"length": 3696.0,
"function_hash": "110995354895912650465302359732992851334"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"signature_version": "v1",
"id": "ASB-A-286235483-0d2943f4"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"digest": {
"line_hashes": [
"70384187207969473467724071990317729398",
"320418546227076084465594181217435078892",
"139034975296227356350451546793061696188",
"198840029242654939539433467117586934531",
"313245536086977364838236582966126120156",
"9821241575628344625617058172907797661",
"84864080468086762366722034388010268348",
"321713212781640076910098641929018121181",
"60835553322294116645322918846401089571",
"194254830192584495059033577937727898134",
"147075656553749944497531376143451541327",
"11224255276186999251427813799537284016",
"190000541700740439308365212289947348130"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"signature_version": "v1",
"id": "ASB-A-286235483-27c06beb"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "createDatasetItems"
},
"digest": {
"length": 1677.0,
"function_hash": "14933855057066592257347322952625317997"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"signature_version": "v1",
"id": "ASB-A-286235483-2b9e0a47"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"digest": {
"length": 314.0,
"function_hash": "188489595388106952960806512309835331279"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"signature_version": "v1",
"id": "ASB-A-286235483-31867ede"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"signature_version": "v1",
"id": "ASB-A-286235483-3226e078"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"digest": {
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"284941637186884576196230685734131204928",
"321634460043371652687586406768793962657",
"110285166450574441902084564330346162982",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"173131988331465702442932404114481572319",
"21486416942560900997186924977493908859",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"signature_version": "v1",
"id": "ASB-A-286235483-6c21c37f"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "initialAuthenticationLayout"
},
"digest": {
"length": 754.0,
"function_hash": "49532191195551615746744837755912801092"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"signature_version": "v1",
"id": "ASB-A-286235483-8e58e6f9"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "setHeader"
},
"digest": {
"length": 498.0,
"function_hash": "243658678464188710220306003597891618027"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"signature_version": "v1",
"id": "ASB-A-286235483-979c9889"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"digest": {
"line_hashes": [
"206563368113645024653705304061605275981",
"197882718764834178866649541080794831380",
"239233852245253813103569443623407063279",
"44698807005793972678540295405764893919",
"21183059188807409401714516310665780128",
"300048194628243201263727493046361281547",
"200644165688969314273219891189461360855",
"77496428704198062703578586753481553588",
"55169701512537227256118636456135333684",
"198388733492753553705907241123091591212",
"304920987658179113312826479999607115028",
"269055928370450172860520757506759510794",
"237757000885932752970060260599884987089",
"33379483823330199745001603645193499184"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"signature_version": "v1",
"id": "ASB-A-286235483-a1b813d7"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"signature_version": "v1",
"id": "ASB-A-286235483-a73bc372"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"digest": {
"length": 6466.0,
"function_hash": "155518773178166328024443815934004657924"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"signature_version": "v1",
"id": "ASB-A-286235483-acd70eb0"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
},
"digest": {
"line_hashes": [
"152706124914265209826722211813105497440",
"122457438830031755697776489763091500155",
"9557648870503328618362177008065891024",
"21424190766785613237481844130356205668",
"318743049332437221904056720756700357292",
"19494396699293671953931356471127301788",
"125685506690105876920915180744054100445",
"193060436326013056668025233908441392097",
"45525861848201633409686579962243666914",
"247171390140834564838122080548466479325",
"11417974425339281741084590764620266974",
"63675271650473437443478445002199682738",
"337643276294840670681719171796552205364",
"120308007170846405930104003764350781053",
"110491743816707019839998419656968232453",
"290369119132319450297915760482112743456",
"318831208973307593363994768019606516553",
"118585930299939295491472408901765825976"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"signature_version": "v1",
"id": "ASB-A-286235483-b901e226"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"digest": {
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"109535534066620136114047541315525119830",
"39969641276167070584553621571552279175",
"273102936699452161018250453562184661223",
"336957761749332893969238411852890882197",
"129960398606289640900436180927353833227",
"237703053832879051061104204999411942989",
"163913456718500460619567237726221108710",
"207422323756427847318687779668421267848",
"90656393623779830526015349851986904249",
"319878405943239932225760530864971781909",
"333330205953434566825133141790243117107",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"signature_version": "v1",
"id": "ASB-A-286235483-bb4c594f"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"digest": {
"line_hashes": [
"148303161279659643660660451501034279234",
"125883638802437311423689325172088876430",
"68109407143103339498063405506151933519",
"141851605057521366089072764562061264673"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"signature_version": "v1",
"id": "ASB-A-286235483-d2b5895d"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"digest": {
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"signature_version": "v1",
"id": "ASB-A-286235483-fdc52583"
}
],
"spl": "2025-02-01",
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"digest": {
"length": 314.0,
"function_hash": "188489595388106952960806512309835331279"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"signature_version": "v1",
"id": "ASB-A-286235483-19fcbea9"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"digest": {
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"109535534066620136114047541315525119830",
"39969641276167070584553621571552279175",
"273102936699452161018250453562184661223",
"336957761749332893969238411852890882197",
"129960398606289640900436180927353833227",
"237703053832879051061104204999411942989",
"163913456718500460619567237726221108710",
"207422323756427847318687779668421267848",
"90656393623779830526015349851986904249",
"5563047589043757462169386622850731423",
"143759379317545216397527536916097700704",
"189102626901464415316969655810919033406",
"245131540180806575368969544734024544462",
"159888205038063237398178461743637855398",
"67217958381954166457199508546200067698",
"240567232716717344909651784978029474606",
"286541530287770368649486844991579581516",
"166274331552122355056395927718241162762",
"137975847977573320425778059453991540263",
"132810242104132405657307340012094167302",
"183142955510329644846449222720220875517",
"333330205953434566825133141790243117107",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"signature_version": "v1",
"id": "ASB-A-286235483-42eb3f3f"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"signature_version": "v1",
"id": "ASB-A-286235483-45a7a1d1"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"digest": {
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"signature_version": "v1",
"id": "ASB-A-286235483-7845fbb7"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"signature_version": "v1",
"id": "ASB-A-286235483-b39715fe"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"digest": {
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"131797680883177356094980231743236799214",
"13743237982565477192462131139233942864",
"220855508336303408398916928186082455251",
"329619481055895590037036631590622970823",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"173131988331465702442932404114481572319",
"21486416942560900997186924977493908859",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"signature_version": "v1",
"id": "ASB-A-286235483-e1503482"
}
],
"spl": "2025-02-01",
"severity": "High"
}