In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "fixes": [ "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bf66a79ddcd8d93f502bf908621469893f513780" ], "severity": "High", "types": [ "ID" ], "spl": "2025-03-01", "vanir_signatures": [ { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java" }, "id": "ASB-A-304497167-05f72f23", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "11178458602711922477761236377671491738", "323964476593927769308130635745737529357", "198801690648515183445420070595674785819", "127124046656771281563741059096162754659", "212922888651005646510001940762947434719", "302796504643020493678420551773153536195", "158007238757640493293704202778375990501", "221550556625264261387627442779069723423", "104922033756251506235816196514269916351" ] }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bf66a79ddcd8d93f502bf908621469893f513780", "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java", "function": "checkDownloadedFilePath" }, "id": "ASB-A-304497167-e86f2d98", "deprecated": false, "digest": { "function_hash": "151107043774485541674138510849676846659", "length": 852.0 }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bf66a79ddcd8d93f502bf908621469893f513780", "signature_type": "Function", "signature_version": "v1" } ] }
{ "fixes": [ "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e" ], "severity": "High", "types": [ "ID" ], "spl": "2025-03-01", "vanir_signatures": [ { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java" }, "id": "ASB-A-304497167-a253a0b7", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "11178458602711922477761236377671491738", "323964476593927769308130635745737529357", "198801690648515183445420070595674785819", "127124046656771281563741059096162754659", "212922888651005646510001940762947434719", "302796504643020493678420551773153536195", "158007238757640493293704202778375990501", "221550556625264261387627442779069723423", "104922033756251506235816196514269916351" ] }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e", "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java", "function": "checkDownloadedFilePath" }, "id": "ASB-A-304497167-c9c90dd9", "deprecated": false, "digest": { "function_hash": "151107043774485541674138510849676846659", "length": 852.0 }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e", "signature_type": "Function", "signature_version": "v1" } ] }
{ "fixes": [ "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e" ], "severity": "High", "types": [ "ID" ], "spl": "2025-03-01", "vanir_signatures": [ { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java" }, "id": "ASB-A-304497167-80e34c00", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "11178458602711922477761236377671491738", "323964476593927769308130635745737529357", "198801690648515183445420070595674785819", "127124046656771281563741059096162754659", "212922888651005646510001940762947434719", "302796504643020493678420551773153536195", "158007238757640493293704202778375990501", "221550556625264261387627442779069723423", "104922033756251506235816196514269916351" ] }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e", "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java", "function": "checkDownloadedFilePath" }, "id": "ASB-A-304497167-e181120e", "deprecated": false, "digest": { "function_hash": "151107043774485541674138510849676846659", "length": 852.0 }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e", "signature_type": "Function", "signature_version": "v1" } ] }
{ "fixes": [ "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a2e3e8c7bec2b51f9192ca44757f170c0bde34a5" ], "severity": "High", "types": [ "ID" ], "spl": "2025-03-01", "vanir_signatures": [ { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java", "function": "checkDownloadedFilePath" }, "id": "ASB-A-304497167-9ba3fa5e", "deprecated": false, "digest": { "function_hash": "151107043774485541674138510849676846659", "length": 852.0 }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a2e3e8c7bec2b51f9192ca44757f170c0bde34a5", "signature_type": "Function", "signature_version": "v1" }, { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java" }, "id": "ASB-A-304497167-9e21b710", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "11178458602711922477761236377671491738", "323964476593927769308130635745737529357", "198801690648515183445420070595674785819", "127124046656771281563741059096162754659", "212922888651005646510001940762947434719", "302796504643020493678420551773153536195", "158007238757640493293704202778375990501", "221550556625264261387627442779069723423", "104922033756251506235816196514269916351" ] }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a2e3e8c7bec2b51f9192ca44757f170c0bde34a5", "signature_type": "Line", "signature_version": "v1" } ] }
{ "fixes": [ "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e" ], "severity": "High", "types": [ "ID" ], "spl": "2025-03-01", "vanir_signatures": [ { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java" }, "id": "ASB-A-304497167-7d273ba1", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "11178458602711922477761236377671491738", "323964476593927769308130635745737529357", "198801690648515183445420070595674785819", "127124046656771281563741059096162754659", "212922888651005646510001940762947434719", "302796504643020493678420551773153536195", "158007238757640493293704202778375990501", "221550556625264261387627442779069723423", "104922033756251506235816196514269916351" ] }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e", "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java", "function": "checkDownloadedFilePath" }, "id": "ASB-A-304497167-8214e529", "deprecated": false, "digest": { "function_hash": "151107043774485541674138510849676846659", "length": 852.0 }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e", "signature_type": "Function", "signature_version": "v1" } ] }
{ "fixes": [ "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e" ], "severity": "High", "types": [ "ID" ], "spl": "2025-03-01", "vanir_signatures": [ { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java", "function": "checkDownloadedFilePath" }, "id": "ASB-A-304497167-0e7bae2c", "deprecated": false, "digest": { "function_hash": "151107043774485541674138510849676846659", "length": 852.0 }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e", "signature_type": "Function", "signature_version": "v1" }, { "target": { "file": "src/com/android/providers/downloads/DownloadProvider.java" }, "id": "ASB-A-304497167-4b7f6cc4", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "11178458602711922477761236377671491738", "323964476593927769308130635745737529357", "198801690648515183445420070595674785819", "127124046656771281563741059096162754659", "212922888651005646510001940762947434719", "302796504643020493678420551773153536195", "158007238757640493293704202778375990501", "221550556625264261387627442779069723423", "104922033756251506235816196514269916351" ] }, "source": "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e", "signature_type": "Line", "signature_version": "v1" } ] }