In multiple locations, there is a possible way to read files from another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"types": [
"ID"
],
"spl": "2025-12-01",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-2c7addc2",
"digest": {
"length": 1003.0,
"function_hash": "275745261686135935980908476896948263577"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac",
"target": {
"file": "src/com/android/mms/service/MmsService.java",
"function": "writePduToContentUri"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-3e4d0609",
"digest": {
"line_hashes": [
"60120558583932501315592848821714907875",
"155404683051889803650849691983762447816",
"125340111724790192037784919650722663493",
"55356249250784118293275964716332904649",
"104055590352399984203045585003691238905",
"39053956087200974338638523925615942953",
"226063554008217350318244628602580163148",
"185403641265886757349043619166930843103",
"323759534006544161932777523168961198155",
"274765871379649737914849938782266903320",
"92510606722320008626496340272139944959",
"317419915406133658487809506207437673323"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac",
"target": {
"file": "src/com/android/mms/service/MmsService.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-4438573a",
"digest": {
"line_hashes": [
"242219402647729238502980058986287319280",
"147791069043761527274924743221522601694",
"106190327178936603262636237697936389490",
"165666751650439715948375068125202699112",
"203135259857874745770500395310889264584",
"276373080477785055609196109899019923016",
"156703147780933996135860709928764115886",
"305886423109541646352080166336576054601",
"159421756380555111544658298868048946313",
"336506438036152906926621812608965860923",
"172641615680431228239340712219673271156",
"215924667855646535299914628112485589137",
"19500615365740582381662426346702055794",
"66378209549746310570722038109360726670"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-4f00c942",
"digest": {
"length": 2230.0,
"function_hash": "216052344530283643434890836570539302572"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac",
"target": {
"file": "src/com/android/mms/service/MmsService.java",
"function": "downloadMessage"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-77db9803",
"digest": {
"line_hashes": [
"298926404034321525593693902307339273911",
"235461626068140338304846413500431985728",
"276321038560159966645955360166825734193",
"163365049768395309941544272984952386782"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac",
"target": {
"file": "src/com/android/mms/service/MmsRequest.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-a32b1e50",
"digest": {
"length": 114.0,
"function_hash": "72483541520626523506149712796859787199"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java",
"function": "transferResponse"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-e324895e",
"digest": {
"length": 315.0,
"function_hash": "80034780403587610234008728669611325682"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java",
"function": "DownloadRequest"
},
"deprecated": false
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac"
],
"severity": "High"
}{
"types": [
"ID"
],
"spl": "2025-12-01",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-48945752",
"digest": {
"line_hashes": [
"298926404034321525593693902307339273911",
"235461626068140338304846413500431985728",
"276321038560159966645955360166825734193",
"163365049768395309941544272984952386782"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728",
"target": {
"file": "src/com/android/mms/service/MmsRequest.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-5ef10673",
"digest": {
"length": 2230.0,
"function_hash": "216052344530283643434890836570539302572"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728",
"target": {
"file": "src/com/android/mms/service/MmsService.java",
"function": "downloadMessage"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-82c9a05a",
"digest": {
"length": 315.0,
"function_hash": "80034780403587610234008728669611325682"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java",
"function": "DownloadRequest"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-9479470b",
"digest": {
"length": 114.0,
"function_hash": "72483541520626523506149712796859787199"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java",
"function": "transferResponse"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-a389ae75",
"digest": {
"line_hashes": [
"60120558583932501315592848821714907875",
"155404683051889803650849691983762447816",
"125340111724790192037784919650722663493",
"55356249250784118293275964716332904649",
"104055590352399984203045585003691238905",
"39053956087200974338638523925615942953",
"226063554008217350318244628602580163148",
"185403641265886757349043619166930843103",
"323759534006544161932777523168961198155",
"274765871379649737914849938782266903320",
"92510606722320008626496340272139944959",
"317419915406133658487809506207437673323"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728",
"target": {
"file": "src/com/android/mms/service/MmsService.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-c3a21a94",
"digest": {
"line_hashes": [
"242219402647729238502980058986287319280",
"147791069043761527274924743221522601694",
"106190327178936603262636237697936389490",
"165666751650439715948375068125202699112",
"203135259857874745770500395310889264584",
"276373080477785055609196109899019923016",
"156703147780933996135860709928764115886",
"305886423109541646352080166336576054601",
"159421756380555111544658298868048946313",
"336506438036152906926621812608965860923",
"172641615680431228239340712219673271156",
"215924667855646535299914628112485589137",
"19500615365740582381662426346702055794",
"66378209549746310570722038109360726670"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-d916f616",
"digest": {
"length": 1003.0,
"function_hash": "275745261686135935980908476896948263577"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728",
"target": {
"file": "src/com/android/mms/service/MmsService.java",
"function": "writePduToContentUri"
},
"deprecated": false
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728"
],
"severity": "High"
}{
"types": [
"ID"
],
"spl": "2025-12-01",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-303ecb88",
"digest": {
"length": 2230.0,
"function_hash": "216052344530283643434890836570539302572"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf",
"target": {
"file": "src/com/android/mms/service/MmsService.java",
"function": "downloadMessage"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-3ff957ca",
"digest": {
"length": 315.0,
"function_hash": "80034780403587610234008728669611325682"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java",
"function": "DownloadRequest"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-4d9ad241",
"digest": {
"line_hashes": [
"298926404034321525593693902307339273911",
"235461626068140338304846413500431985728",
"276321038560159966645955360166825734193",
"163365049768395309941544272984952386782"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf",
"target": {
"file": "src/com/android/mms/service/MmsRequest.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-6bb5f270",
"digest": {
"length": 114.0,
"function_hash": "72483541520626523506149712796859787199"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java",
"function": "transferResponse"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-8a8de7a1",
"digest": {
"line_hashes": [
"60120558583932501315592848821714907875",
"155404683051889803650849691983762447816",
"125340111724790192037784919650722663493",
"55356249250784118293275964716332904649",
"104055590352399984203045585003691238905",
"39053956087200974338638523925615942953",
"226063554008217350318244628602580163148",
"185403641265886757349043619166930843103",
"323759534006544161932777523168961198155",
"274765871379649737914849938782266903320",
"92510606722320008626496340272139944959",
"317419915406133658487809506207437673323"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf",
"target": {
"file": "src/com/android/mms/service/MmsService.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-c2ad124a",
"digest": {
"line_hashes": [
"242219402647729238502980058986287319280",
"147791069043761527274924743221522601694",
"106190327178936603262636237697936389490",
"165666751650439715948375068125202699112",
"203135259857874745770500395310889264584",
"276373080477785055609196109899019923016",
"156703147780933996135860709928764115886",
"305886423109541646352080166336576054601",
"159421756380555111544658298868048946313",
"336506438036152906926621812608965860923",
"172641615680431228239340712219673271156",
"215924667855646535299914628112485589137",
"19500615365740582381662426346702055794",
"66378209549746310570722038109360726670"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-ed0c3dcb",
"digest": {
"length": 1003.0,
"function_hash": "275745261686135935980908476896948263577"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf",
"target": {
"file": "src/com/android/mms/service/MmsService.java",
"function": "writePduToContentUri"
},
"deprecated": false
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf"
],
"severity": "High"
}{
"types": [
"ID"
],
"spl": "2025-12-01",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-0aeb5590",
"digest": {
"line_hashes": [
"298926404034321525593693902307339273911",
"235461626068140338304846413500431985728",
"276321038560159966645955360166825734193",
"163365049768395309941544272984952386782"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290",
"target": {
"file": "src/com/android/mms/service/MmsRequest.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-12f48796",
"digest": {
"length": 114.0,
"function_hash": "72483541520626523506149712796859787199"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java",
"function": "transferResponse"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-86067e82",
"digest": {
"length": 1936.0,
"function_hash": "159973842497947681771408392025550624669"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290",
"target": {
"file": "src/com/android/mms/service/MmsService.java",
"function": "downloadMessage"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-94864c7a",
"digest": {
"length": 271.0,
"function_hash": "49741924223418066586126455673669404248"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java",
"function": "DownloadRequest"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-a6b7c6f5",
"digest": {
"line_hashes": [
"242219402647729238502980058986287319280",
"147791069043761527274924743221522601694",
"106190327178936603262636237697936389490",
"281488805198211503055061831286408733908",
"113310906926455050430552344347680310886",
"157922217397034013225085206785415530008",
"15744874512267930654385021722499792903",
"34159770773278447314153490026756322622",
"305886423109541646352080166336576054601",
"159421756380555111544658298868048946313",
"336506438036152906926621812608965860923",
"172641615680431228239340712219673271156",
"215924667855646535299914628112485589137",
"19500615365740582381662426346702055794",
"66378209549746310570722038109360726670"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-d8883d7d",
"digest": {
"line_hashes": [
"60120558583932501315592848821714907875",
"220998804226169428558260876928383390163",
"189209958330942258454768625678812436648",
"26815144203986540793087170849540303490",
"11868217836058289763407672054496291554",
"39053956087200974338638523925615942953",
"226063554008217350318244628602580163148",
"185403641265886757349043619166930843103",
"323759534006544161932777523168961198155",
"274765871379649737914849938782266903320",
"92510606722320008626496340272139944959",
"317419915406133658487809506207437673323"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290",
"target": {
"file": "src/com/android/mms/service/MmsService.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-f9d6290b",
"digest": {
"length": 1003.0,
"function_hash": "275745261686135935980908476896948263577"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290",
"target": {
"file": "src/com/android/mms/service/MmsService.java",
"function": "writePduToContentUri"
},
"deprecated": false
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290"
],
"severity": "High"
}{
"types": [
"ID"
],
"spl": "2025-12-01",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-014c32ef",
"digest": {
"line_hashes": [
"298926404034321525593693902307339273911",
"235461626068140338304846413500431985728",
"276321038560159966645955360166825734193",
"163365049768395309941544272984952386782"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a",
"target": {
"file": "src/com/android/mms/service/MmsRequest.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-0dce18d5",
"digest": {
"line_hashes": [
"242219402647729238502980058986287319280",
"147791069043761527274924743221522601694",
"106190327178936603262636237697936389490",
"167364592110446141299515496526206769656",
"250158518481756434438120405722680869258",
"65052507869498265920501187534453044878",
"333333081121696939437101739292334646212",
"213942738664712388429952331759517459257",
"305886423109541646352080166336576054601",
"159421756380555111544658298868048946313",
"336506438036152906926621812608965860923",
"172641615680431228239340712219673271156",
"215924667855646535299914628112485589137",
"19500615365740582381662426346702055794",
"66378209549746310570722038109360726670"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-2ffec536",
"digest": {
"length": 293.0,
"function_hash": "59958204528255364024613068026364083736"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java",
"function": "DownloadRequest"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-970b2d68",
"digest": {
"length": 2209.0,
"function_hash": "72060531108204601682266087161714649232"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a",
"target": {
"file": "src/com/android/mms/service/MmsService.java",
"function": "downloadMessage"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Line",
"id": "ASB-A-305710989-cd4d490a",
"digest": {
"line_hashes": [
"60120558583932501315592848821714907875",
"68190233132880696211445363448702670605",
"209180808212589440083697197881644086676",
"317098432476356993793163318345666489497",
"39053956087200974338638523925615942953",
"226063554008217350318244628602580163148",
"185403641265886757349043619166930843103",
"323759534006544161932777523168961198155",
"274765871379649737914849938782266903320",
"92510606722320008626496340272139944959",
"317419915406133658487809506207437673323"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a",
"target": {
"file": "src/com/android/mms/service/MmsService.java"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-fcc118e7",
"digest": {
"length": 114.0,
"function_hash": "72483541520626523506149712796859787199"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a",
"target": {
"file": "src/com/android/mms/service/DownloadRequest.java",
"function": "transferResponse"
},
"deprecated": false
},
{
"signature_version": "v1",
"signature_type": "Function",
"id": "ASB-A-305710989-fd882ec3",
"digest": {
"length": 1003.0,
"function_hash": "275745261686135935980908476896948263577"
},
"source": "https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a",
"target": {
"file": "src/com/android/mms/service/MmsService.java",
"function": "writePduToContentUri"
},
"deprecated": false
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a"
],
"severity": "High"
}