ASB-A-313418699

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-313418699.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-313418699
Aliases
  • A-313418699
  • CVE-2026-58943
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T16:56:18Z
Summary
[none]
Details

In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/d3534b7d0f7fc61bcaeb0f47f0001d201a81707e"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "194365308924960940794496665503731965163",
                "length":  1289
            },
            "id":  "ASB-A-313418699-2907e34b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/d3534b7d0f7fc61bcaeb0f47f0001d201a81707e",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java",
                "function":  "run"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "231040450946816645150177675870623488963",
                    "133981481359775543714746967838171563200",
                    "51423928422532330003191418466314049116",
                    "176833134972182007356409370417212464392",
                    "105449182843398668722248605571737464017",
                    "171431870936241403939289297422323926192",
                    "18508963950461200741042946838025236871",
                    "326313859143273143133507057129275371392",
                    "50123458323918389635972703208695361651",
                    "219325016065893450305490402825637188830",
                    "319652244828281951889943310953128256312",
                    "32392067108528320633570600300771055991",
                    "181963379944312962558504600923436550736",
                    "152835222621716611578843931731114164929",
                    "187078125845248219950100068119928723184",
                    "316289188087037736258676582828955388861",
                    "214419799937458248601334964805801161044",
                    "185395813266936124766724370491844058931",
                    "295747577431459138783214723720080232905",
                    "326147484758573081732165241444333677847",
                    "31759940807133187746312226648005882376",
                    "180787186465057521516667641705173514318"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-313418699-e39b1cf9",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/d3534b7d0f7fc61bcaeb0f47f0001d201a81707e",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/8e8cdc27eb8faf6efefd9d9433738d738b38884e"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "194365308924960940794496665503731965163",
                "length":  1289
            },
            "id":  "ASB-A-313418699-1feaf06d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/8e8cdc27eb8faf6efefd9d9433738d738b38884e",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java",
                "function":  "run"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "133981481359775543714746967838171563200",
                    "51423928422532330003191418466314049116",
                    "176833134972182007356409370417212464392",
                    "105449182843398668722248605571737464017",
                    "171431870936241403939289297422323926192",
                    "18508963950461200741042946838025236871",
                    "326313859143273143133507057129275371392",
                    "50123458323918389635972703208695361651",
                    "187078125845248219950100068119928723184",
                    "316289188087037736258676582828955388861",
                    "214419799937458248601334964805801161044",
                    "185395813266936124766724370491844058931",
                    "295747577431459138783214723720080232905",
                    "326147484758573081732165241444333677847",
                    "31759940807133187746312226648005882376",
                    "180787186465057521516667641705173514318"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-313418699-2d54d1f2",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/8e8cdc27eb8faf6efefd9d9433738d738b38884e",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/99b46cf4f495c5d9842a2016f960c7fb779e0e03"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "194365308924960940794496665503731965163",
                "length":  1289
            },
            "id":  "ASB-A-313418699-10fc8a0d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/99b46cf4f495c5d9842a2016f960c7fb779e0e03",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java",
                "function":  "run"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "231040450946816645150177675870623488963",
                    "133981481359775543714746967838171563200",
                    "51423928422532330003191418466314049116",
                    "176833134972182007356409370417212464392",
                    "105449182843398668722248605571737464017",
                    "171431870936241403939289297422323926192",
                    "18508963950461200741042946838025236871",
                    "326313859143273143133507057129275371392",
                    "50123458323918389635972703208695361651",
                    "219325016065893450305490402825637188830",
                    "319652244828281951889943310953128256312",
                    "32392067108528320633570600300771055991",
                    "181963379944312962558504600923436550736",
                    "152835222621716611578843931731114164929",
                    "187078125845248219950100068119928723184",
                    "316289188087037736258676582828955388861",
                    "214419799937458248601334964805801161044",
                    "185395813266936124766724370491844058931",
                    "295747577431459138783214723720080232905",
                    "326147484758573081732165241444333677847",
                    "31759940807133187746312226648005882376",
                    "180787186465057521516667641705173514318"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-313418699-356c95ba",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/99b46cf4f495c5d9842a2016f960c7fb779e0e03",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/d560eaf713bb3333f3f309203bd1d322c45b6cd8"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "194365308924960940794496665503731965163",
                "length":  1289
            },
            "id":  "ASB-A-313418699-96b955dc",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/d560eaf713bb3333f3f309203bd1d322c45b6cd8",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java",
                "function":  "run"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "231040450946816645150177675870623488963",
                    "133981481359775543714746967838171563200",
                    "51423928422532330003191418466314049116",
                    "176833134972182007356409370417212464392",
                    "105449182843398668722248605571737464017",
                    "171431870936241403939289297422323926192",
                    "18508963950461200741042946838025236871",
                    "326313859143273143133507057129275371392",
                    "50123458323918389635972703208695361651",
                    "219325016065893450305490402825637188830",
                    "319652244828281951889943310953128256312",
                    "32392067108528320633570600300771055991",
                    "181963379944312962558504600923436550736",
                    "152835222621716611578843931731114164929",
                    "187078125845248219950100068119928723184",
                    "316289188087037736258676582828955388861",
                    "214419799937458248601334964805801161044",
                    "185395813266936124766724370491844058931",
                    "295747577431459138783214723720080232905",
                    "326147484758573081732165241444333677847",
                    "31759940807133187746312226648005882376",
                    "180787186465057521516667641705173514318"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-313418699-d42e8e26",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/d560eaf713bb3333f3f309203bd1d322c45b6cd8",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/fa489f97abf9ef0448a63389763ab416ae1db2e2"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "231040450946816645150177675870623488963",
                    "133981481359775543714746967838171563200",
                    "51423928422532330003191418466314049116",
                    "176833134972182007356409370417212464392",
                    "105449182843398668722248605571737464017",
                    "171431870936241403939289297422323926192",
                    "18508963950461200741042946838025236871",
                    "326313859143273143133507057129275371392",
                    "50123458323918389635972703208695361651",
                    "219325016065893450305490402825637188830",
                    "319652244828281951889943310953128256312",
                    "32392067108528320633570600300771055991",
                    "181963379944312962558504600923436550736",
                    "152835222621716611578843931731114164929",
                    "187078125845248219950100068119928723184",
                    "316289188087037736258676582828955388861",
                    "214419799937458248601334964805801161044",
                    "185395813266936124766724370491844058931",
                    "295747577431459138783214723720080232905",
                    "326147484758573081732165241444333677847",
                    "31759940807133187746312226648005882376",
                    "180787186465057521516667641705173514318"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-313418699-1151d827",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/fa489f97abf9ef0448a63389763ab416ae1db2e2",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "194365308924960940794496665503731965163",
                "length":  1289
            },
            "id":  "ASB-A-313418699-a0d352a7",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/fa489f97abf9ef0448a63389763ab416ae1db2e2",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java",
                "function":  "run"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/a5a3a263a13020826758f7bec708e54f0fcefe6c"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "133981481359775543714746967838171563200",
                    "51423928422532330003191418466314049116",
                    "176833134972182007356409370417212464392",
                    "105449182843398668722248605571737464017",
                    "171431870936241403939289297422323926192",
                    "18508963950461200741042946838025236871",
                    "326313859143273143133507057129275371392",
                    "50123458323918389635972703208695361651",
                    "187078125845248219950100068119928723184",
                    "316289188087037736258676582828955388861",
                    "214419799937458248601334964805801161044",
                    "185395813266936124766724370491844058931",
                    "295747577431459138783214723720080232905",
                    "326147484758573081732165241444333677847",
                    "31759940807133187746312226648005882376",
                    "180787186465057521516667641705173514318"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-313418699-d3982172",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/a5a3a263a13020826758f7bec708e54f0fcefe6c",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "194365308924960940794496665503731965163",
                "length":  1289
            },
            "id":  "ASB-A-313418699-ed486d3d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/a5a3a263a13020826758f7bec708e54f0fcefe6c",
            "target":  {
                "file":  "src/com/android/settings/accounts/AddAccountSettings.java",
                "function":  "run"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"