ASB-A-296915500

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-296915500.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-296915500
Aliases
  • A-296915500
  • CVE-2024-49728
Published
2025-04-01T00:00:00Z
Modified
2025-11-06T16:39:24.500007Z
Summary
[none]
Details

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android

platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2025-04-01

Affected versions

Other

15-next

Ecosystem specific 

{
    "types": [
        "ID"
    ],
    "severity": "High",
    "spl": "2025-04-01",
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5d66a17fa296117b44f23ae45ff7338cee6ae85"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "310464502783358808731355411214931475372",
                "length": 6828.0
            },
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java",
                "function": "generateFileInfo"
            },
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5d66a17fa296117b44f23ae45ff7338cee6ae85",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "id": "ASB-A-296915500-20430850"
        },
        {
            "digest": {
                "line_hashes": [
                    "50361072087287655901888329471936174932",
                    "121845403833178851004282735359276431864",
                    "262251516898660165507780780419640996931",
                    "105598966285062567154528998693568200516",
                    "30174369586259591690482816430433378549",
                    "204432403054961511955038099375169281483",
                    "49833795518394411772161861300052649279",
                    "27337898617899203000871999642392745760",
                    "64739084715090043238196109301508449165",
                    "156362479383866266865893582664059420791",
                    "315453649490880073579904066497326411611",
                    "257514193656426976875766054884252333199",
                    "54638474997242602742890622500091766434",
                    "196061202865139653099726819319029542276",
                    "4792377229830908462556355398952756154"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            },
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5d66a17fa296117b44f23ae45ff7338cee6ae85",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "id": "ASB-A-296915500-9275289e"
        }
    ]
}

platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-04-01

Affected versions

Other

15

Ecosystem specific 

{
    "types": [
        "ID"
    ],
    "severity": "High",
    "spl": "2025-04-01",
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e17b3fcb3946abf2f307fc8393ecc347c3df67d9"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "line_hashes": [
                    "50361072087287655901888329471936174932",
                    "121845403833178851004282735359276431864",
                    "262251516898660165507780780419640996931",
                    "105598966285062567154528998693568200516",
                    "30174369586259591690482816430433378549",
                    "204432403054961511955038099375169281483",
                    "49833795518394411772161861300052649279",
                    "27337898617899203000871999642392745760",
                    "64739084715090043238196109301508449165",
                    "156362479383866266865893582664059420791",
                    "315453649490880073579904066497326411611",
                    "257514193656426976875766054884252333199",
                    "54638474997242602742890622500091766434",
                    "196061202865139653099726819319029542276",
                    "4792377229830908462556355398952756154"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            },
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e17b3fcb3946abf2f307fc8393ecc347c3df67d9",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "id": "ASB-A-296915500-5f3dff28"
        },
        {
            "digest": {
                "function_hash": "310464502783358808731355411214931475372",
                "length": 6828.0
            },
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java",
                "function": "generateFileInfo"
            },
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e17b3fcb3946abf2f307fc8393ecc347c3df67d9",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "id": "ASB-A-296915500-ea52ef2c"
        }
    ]
}

platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-04-01

Affected versions

Other

13

Ecosystem specific 

{
    "types": [
        "ID"
    ],
    "severity": "High",
    "spl": "2025-04-01",
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5bcfd347823f1d3893d843db2286f2013923fad8"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "line_hashes": [
                    "189014771623161666538395564364398214511",
                    "121845403833178851004282735359276431864",
                    "262251516898660165507780780419640996931",
                    "105598966285062567154528998693568200516",
                    "317359883940541754133914101727535757081",
                    "204432403054961511955038099375169281483",
                    "49833795518394411772161861300052649279",
                    "27337898617899203000871999642392745760",
                    "139406057071785338861518184548622748508",
                    "89636947875856846358939766277269167282",
                    "315453649490880073579904066497326411611",
                    "257514193656426976875766054884252333199",
                    "54638474997242602742890622500091766434",
                    "196061202865139653099726819319029542276",
                    "4792377229830908462556355398952756154"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            },
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5bcfd347823f1d3893d843db2286f2013923fad8",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "id": "ASB-A-296915500-bc293155"
        },
        {
            "digest": {
                "function_hash": "3343094387847156907146336674838837384",
                "length": 3536.0
            },
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java",
                "function": "generateFileInfo"
            },
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5bcfd347823f1d3893d843db2286f2013923fad8",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "id": "ASB-A-296915500-ee691c02"
        }
    ]
}

platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-04-01

Affected versions

Other

14

Ecosystem specific 

{
    "types": [
        "ID"
    ],
    "severity": "High",
    "spl": "2025-04-01",
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/2c5add83a18d87ea4a46bc8ab7f675e32c8d6a56"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "183911023901520138653190158611739293803",
                "length": 3726.0
            },
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java",
                "function": "generateFileInfo"
            },
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/2c5add83a18d87ea4a46bc8ab7f675e32c8d6a56",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "id": "ASB-A-296915500-19970b57"
        },
        {
            "digest": {
                "line_hashes": [
                    "189014771623161666538395564364398214511",
                    "121845403833178851004282735359276431864",
                    "262251516898660165507780780419640996931",
                    "105598966285062567154528998693568200516",
                    "30174369586259591690482816430433378549",
                    "204432403054961511955038099375169281483",
                    "49833795518394411772161861300052649279",
                    "27337898617899203000871999642392745760",
                    "139406057071785338861518184548622748508",
                    "89636947875856846358939766277269167282",
                    "315453649490880073579904066497326411611",
                    "257514193656426976875766054884252333199",
                    "54638474997242602742890622500091766434",
                    "196061202865139653099726819319029542276",
                    "4792377229830908462556355398952756154"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            },
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/2c5add83a18d87ea4a46bc8ab7f675e32c8d6a56",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "id": "ASB-A-296915500-8128ebc1"
        }
    ]
}