ASB-A-326926596

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-326926596.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-326926596
Aliases
  • A-326926596
  • CVE-2025-32329
Published
2025-12-01T00:00:00Z
Modified
2025-12-11T16:45:01.015345Z
Summary
[none]
Details

In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2-next:0
Fixed
16-qpr2-next:2025-12-01

Affected versions

Other

16-qpr2-next

Ecosystem specific

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "56176386317686736946649217063705566830",
                "length": 798.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-0cbfe076",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "initialAuthenticationLayout"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "233001280945690766024866032804020106263",
                    "299280155137900456369389346906834625687",
                    "253670570635601349012097703140517091330",
                    "6763710524091997994082961324208427908",
                    "287455098598448921071329745868061349234",
                    "227805279402260074562908927996850584221",
                    "30116608954614319447183709923452508562",
                    "36371748056050285340289618795231278841",
                    "147157243943221651853800518330012291856",
                    "116013423297009835675761786228615335497",
                    "282334189601084331727543333066433232872",
                    "309855511319383992738640197427288476813",
                    "257575552362915492264443229615036330102",
                    "137364990574650661356629752006353102068",
                    "7346143077645295169490143337655292533",
                    "271203066595628114305843115488139558909",
                    "246313342684578862837160232182440545029",
                    "286744740604751949071305350356414253060",
                    "79209834993743233989565171484452365304",
                    "256992858442147664412152207376856907832",
                    "128684448498299491058223853214834730128",
                    "91477332951031294087869336262530769873",
                    "262407970360489148064772787139793786883",
                    "227529702526648491498747353364192306840",
                    "315705055866936701374609147536543227212",
                    "224849018509674106895395965745940104149",
                    "134008103952047155517677989125449306039",
                    "208363551722438043749201696435822980457",
                    "238878178207896271984965833527827184793",
                    "246153676559498975996525891840438850912",
                    "319314867881549470635797636500735414577"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-1808480d",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "38359472700061354235414716544997536502",
                "length": 7279.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-1e44ee4d",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
                "function": "SaveUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "58588869078857813296908308804826833385",
                "length": 1468.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-26511c2d",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "DialogFillUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "214829691709375686425688750163675762444",
                    "31173660224107888955468676996662291970",
                    "75717993223470930286438961849158473008",
                    "303972587534416303383394155165688117343",
                    "259449713830477777317285782905283199576",
                    "117229051275493355373779713481641589010",
                    "127284537694877960079216639377672371216",
                    "299252079355722630865613843433637167635",
                    "264330761225222907849056040899046276371",
                    "265301051241449904846147560721618625883",
                    "15165947783158235074656931996515737571"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-3cb86a1d",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "82837857977102568369555572329393044920",
                "length": 1699.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-4353f25f",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "createDatasetItems"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "57289658741123446022184100211094355310",
                "length": 290.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-462be10c",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Session.java",
                "function": "getServiceIcon"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "57289658741123446022184100211094355310",
                "length": 290.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-66d61923",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Session.java",
                "function": "getServiceLabel"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "337276213812603930001841971103435567683",
                "length": 6914.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-82ecfc79",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
                "function": "FillUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "232925101570296434580965003579058750578",
                "length": 520.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-886ee113",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "setHeader"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "275360925765748613756556327536913270530",
                "length": 2553.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-894a7e5b",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
                "function": "dump"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "147970609522738711682570941621357862514",
                    "99688209858480151987959042898705195723",
                    "159528535452217599658308375414822941606",
                    "226494725607023412914596331337564914285",
                    "129231880453292375756121266455606840347",
                    "259545855947006792562166870978494910102",
                    "211966466024317453947413305491351570506",
                    "299955936703988313777666839291065749734",
                    "138670454602168716927049345311235552388",
                    "259039622594416815211422634790083140238",
                    "291601608691826183706509385019023236983",
                    "239196817897099031902353265860786865338",
                    "39730096403312739749054541694199342419",
                    "176563944769267069899858614194414818962",
                    "125827276761289425613209756329496419863",
                    "239196817897099031902353265860786865338",
                    "39730096403312739749054541694199342419",
                    "176563944769267069899858614194414818962",
                    "252639957790865787812438357176888523414",
                    "227529702526648491498747353364192306840",
                    "315705055866936701374609147536543227212",
                    "224849018509674106895395965745940104149",
                    "134008103952047155517677989125449306039"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-8c2dd10d",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "195550187764114165661677033491385867525",
                    "298497138299562978700772105186371160186",
                    "156681404185485594211687436684168302104",
                    "60637664312035269760776169815005113432",
                    "220855508336303408398916928186082455251",
                    "329619481055895590037036631590622970823",
                    "240481412043703972796096684412755948793",
                    "216793313798955561512914603505750478780",
                    "142548056876858934317447270565251659585",
                    "303175247934198869648397341081908772561",
                    "250169775779716262098479289038361735106",
                    "118836924277658266060750236114637557467",
                    "204286604721725778250531106701901155250",
                    "200979458900658699994251331348558277928",
                    "324514966097401313249705843429493881194",
                    "5974945123024092751966245155268981445",
                    "207635776789743471905519417928232511528"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-d2179c75",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Helper.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "268352417521028367845542076301610446755",
                    "239924179753459631721185019549570366933",
                    "98889634726560196287370948075464876438",
                    "178289728046244122145941446463267876599",
                    "274157703640419043228222739474027404333",
                    "66660066677846037961325816338297534785",
                    "54076257002702924454182198608258883419",
                    "335958806433036555948979627022064975558",
                    "41045878133738289792592106977067306250",
                    "115113670473088224954500224237874146587",
                    "82321371675401198119989668316979288526",
                    "214382261250007213528048088883786706276",
                    "13312323333809348206037951157692816031",
                    "186635348450611877814792078694135061174",
                    "274694428001707897135556115432386156432",
                    "87982586563280194210829105479109417817"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
            "id": "ASB-A-326926596-ee6cea3c",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Session.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        }
    ],
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-12-01

Affected versions

Other

15

Ecosystem specific

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "57289658741123446022184100211094355310",
                "length": 290.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-04dbc899",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Session.java",
                "function": "getServiceIcon"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "337276213812603930001841971103435567683",
                "length": 6914.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-0bbdbd29",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
                "function": "FillUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "233001280945690766024866032804020106263",
                    "299280155137900456369389346906834625687",
                    "253670570635601349012097703140517091330",
                    "6763710524091997994082961324208427908",
                    "287455098598448921071329745868061349234",
                    "227805279402260074562908927996850584221",
                    "30116608954614319447183709923452508562",
                    "147157243943221651853800518330012291856",
                    "116013423297009835675761786228615335497",
                    "282334189601084331727543333066433232872",
                    "245334054565899627947978281131108584265",
                    "309855511319383992738640197427288476813",
                    "257575552362915492264443229615036330102",
                    "137364990574650661356629752006353102068",
                    "7346143077645295169490143337655292533",
                    "271203066595628114305843115488139558909",
                    "246313342684578862837160232182440545029",
                    "286744740604751949071305350356414253060",
                    "79209834993743233989565171484452365304",
                    "256992858442147664412152207376856907832",
                    "128684448498299491058223853214834730128",
                    "91477332951031294087869336262530769873",
                    "262407970360489148064772787139793786883",
                    "227529702526648491498747353364192306840",
                    "315705055866936701374609147536543227212",
                    "224849018509674106895395965745940104149",
                    "134008103952047155517677989125449306039",
                    "208363551722438043749201696435822980457",
                    "238878178207896271984965833527827184793",
                    "246153676559498975996525891840438850912",
                    "319314867881549470635797636500735414577"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-27bf9ac6",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "147970609522738711682570941621357862514",
                    "99688209858480151987959042898705195723",
                    "159528535452217599658308375414822941606",
                    "226494725607023412914596331337564914285",
                    "129231880453292375756121266455606840347",
                    "259545855947006792562166870978494910102",
                    "211966466024317453947413305491351570506",
                    "299955936703988313777666839291065749734",
                    "138670454602168716927049345311235552388",
                    "259039622594416815211422634790083140238",
                    "291601608691826183706509385019023236983",
                    "239196817897099031902353265860786865338",
                    "39730096403312739749054541694199342419",
                    "176563944769267069899858614194414818962",
                    "125827276761289425613209756329496419863",
                    "239196817897099031902353265860786865338",
                    "39730096403312739749054541694199342419",
                    "176563944769267069899858614194414818962",
                    "252639957790865787812438357176888523414",
                    "227529702526648491498747353364192306840",
                    "315705055866936701374609147536543227212",
                    "224849018509674106895395965745940104149",
                    "134008103952047155517677989125449306039"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-34ce40b8",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "232925101570296434580965003579058750578",
                "length": 520.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-40874f1e",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "setHeader"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "82837857977102568369555572329393044920",
                "length": 1699.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-7429780b",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "createDatasetItems"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "275360925765748613756556327536913270530",
                "length": 2553.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-7b0cc5c9",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
                "function": "dump"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "57289658741123446022184100211094355310",
                "length": 290.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-afdffc0f",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Session.java",
                "function": "getServiceLabel"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "214829691709375686425688750163675762444",
                    "31173660224107888955468676996662291970",
                    "75717993223470930286438961849158473008",
                    "303972587534416303383394155165688117343",
                    "259449713830477777317285782905283199576",
                    "117229051275493355373779713481641589010",
                    "127284537694877960079216639377672371216",
                    "299252079355722630865613843433637167635",
                    "264330761225222907849056040899046276371",
                    "265301051241449904846147560721618625883",
                    "15165947783158235074656931996515737571"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-cb76f1ba",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "58588869078857813296908308804826833385",
                "length": 1468.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-d7a4c447",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "DialogFillUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "195550187764114165661677033491385867525",
                    "298497138299562978700772105186371160186",
                    "156681404185485594211687436684168302104",
                    "60637664312035269760776169815005113432",
                    "220855508336303408398916928186082455251",
                    "329619481055895590037036631590622970823",
                    "240481412043703972796096684412755948793",
                    "231346208401394666704078315980602216517",
                    "324514966097401313249705843429493881194",
                    "5974945123024092751966245155268981445",
                    "207635776789743471905519417928232511528"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-f220d03c",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Helper.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "268352417521028367845542076301610446755",
                    "239924179753459631721185019549570366933",
                    "98889634726560196287370948075464876438",
                    "178289728046244122145941446463267876599",
                    "274157703640419043228222739474027404333",
                    "66660066677846037961325816338297534785",
                    "54076257002702924454182198608258883419",
                    "335958806433036555948979627022064975558",
                    "41045878133738289792592106977067306250",
                    "115113670473088224954500224237874146587",
                    "82321371675401198119989668316979288526",
                    "214382261250007213528048088883786706276",
                    "13312323333809348206037951157692816031",
                    "186635348450611877814792078694135061174",
                    "274694428001707897135556115432386156432",
                    "87982586563280194210829105479109417817"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-f2733c97",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Session.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "38359472700061354235414716544997536502",
                "length": 7279.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-f82038ff",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
                "function": "SaveUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "56176386317686736946649217063705566830",
                "length": 798.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
            "id": "ASB-A-326926596-fb5e28ce",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "initialAuthenticationLayout"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        }
    ],
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-12-01

Affected versions

Other

13

Ecosystem specific

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "214829691709375686425688750163675762444",
                    "31173660224107888955468676996662291970",
                    "75717993223470930286438961849158473008",
                    "303972587534416303383394155165688117343",
                    "259449713830477777317285782905283199576",
                    "117229051275493355373779713481641589010",
                    "127284537694877960079216639377672371216",
                    "299252079355722630865613843433637167635",
                    "264330761225222907849056040899046276371",
                    "265301051241449904846147560721618625883",
                    "15165947783158235074656931996515737571"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-268dbb0b",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "82837857977102568369555572329393044920",
                "length": 1699.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-3312f04f",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "createDatasetItems"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "232925101570296434580965003579058750578",
                "length": 520.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-36d595f4",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "setHeader"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "56176386317686736946649217063705566830",
                "length": 798.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-37e111e1",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "initialAuthenticationLayout"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "146899155616903025975604170962739959823",
                "length": 2456.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-3d800b7f",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
                "function": "dump"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "208798393521612387387459446144260401344",
                "length": 6728.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-8f0805d0",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
                "function": "SaveUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "202803058704813849885025393395228740199",
                    "156681404185485594211687436684168302104",
                    "60637664312035269760776169815005113432",
                    "83419763691286668002434097066507888400",
                    "14795436758084438848802528301711224",
                    "267572380463742154569171891627222688177",
                    "231225187996353771389632669293544754112",
                    "110666001288784253692508788231137284584",
                    "110793581962218508177753359608160527948",
                    "126084369161226454611782888021927007008",
                    "221783274660102062601435397657555486203",
                    "120430312024355289347056782212703760495",
                    "324514966097401313249705843429493881194",
                    "5974945123024092751966245155268981445",
                    "207635776789743471905519417928232511528"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-c81c3128",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Helper.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "233001280945690766024866032804020106263",
                    "299280155137900456369389346906834625687",
                    "253670570635601349012097703140517091330",
                    "6763710524091997994082961324208427908",
                    "287455098598448921071329745868061349234",
                    "227805279402260074562908927996850584221",
                    "30116608954614319447183709923452508562",
                    "36371748056050285340289618795231278841",
                    "107302515774269940261729695955013239669",
                    "260652724757114145761900937580365783588",
                    "295348855014700694472100199874250373832",
                    "309855511319383992738640197427288476813",
                    "257575552362915492264443229615036330102",
                    "137364990574650661356629752006353102068",
                    "7346143077645295169490143337655292533",
                    "271203066595628114305843115488139558909",
                    "246313342684578862837160232182440545029",
                    "286744740604751949071305350356414253060",
                    "79209834993743233989565171484452365304",
                    "256992858442147664412152207376856907832",
                    "128684448498299491058223853214834730128",
                    "91477332951031294087869336262530769873",
                    "262407970360489148064772787139793786883",
                    "227529702526648491498747353364192306840",
                    "315705055866936701374609147536543227212",
                    "224849018509674106895395965745940104149",
                    "134008103952047155517677989125449306039",
                    "69312753798116405490642905263392662986",
                    "152499101737448620750513050421023204315",
                    "4274847791164019094876233726764237380",
                    "7675197094534217813054740109641222647"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-d8da1d19",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "134537761509883752126979205773406954332",
                "length": 1377.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-d8fa937a",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "DialogFillUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "200343085571453493443924269324549155542",
                "length": 6643.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-f3d64edd",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
                "function": "FillUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "147970609522738711682570941621357862514",
                    "99688209858480151987959042898705195723",
                    "159528535452217599658308375414822941606",
                    "226494725607023412914596331337564914285",
                    "129231880453292375756121266455606840347",
                    "259545855947006792562166870978494910102",
                    "211966466024317453947413305491351570506",
                    "299955936703988313777666839291065749734",
                    "138670454602168716927049345311235552388",
                    "259039622594416815211422634790083140238",
                    "135076460282510417074273764112187183250",
                    "239196817897099031902353265860786865338",
                    "39730096403312739749054541694199342419",
                    "176563944769267069899858614194414818962",
                    "125827276761289425613209756329496419863",
                    "239196817897099031902353265860786865338",
                    "39730096403312739749054541694199342419",
                    "176563944769267069899858614194414818962",
                    "252639957790865787812438357176888523414",
                    "227529702526648491498747353364192306840",
                    "315705055866936701374609147536543227212",
                    "224849018509674106895395965745940104149",
                    "134008103952047155517677989125449306039"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
            "id": "ASB-A-326926596-f903cb6e",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        }
    ],
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48"
    ],
    "severity": "High"
}

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-12-01

Affected versions

Other

14

Ecosystem specific

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "275360925765748613756556327536913270530",
                "length": 2553.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-25d1337e",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
                "function": "dump"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "56176386317686736946649217063705566830",
                "length": 798.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-292354be",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "initialAuthenticationLayout"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "57289658741123446022184100211094355310",
                "length": 290.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-2ffb46cf",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Session.java",
                "function": "getServiceIcon"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "150207493351967929142311001508100449928",
                "length": 7100.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-561cfc5c",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
                "function": "SaveUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "304172605651726255145089741382456807706",
                "length": 6687.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-6a696a4a",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
                "function": "FillUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "82837857977102568369555572329393044920",
                "length": 1699.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-6c1062de",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "createDatasetItems"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "57289658741123446022184100211094355310",
                "length": 290.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-8ce24acc",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Session.java",
                "function": "getServiceLabel"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "58588869078857813296908308804826833385",
                "length": 1468.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-91363fc4",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "DialogFillUi"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "147970609522738711682570941621357862514",
                    "99688209858480151987959042898705195723",
                    "159528535452217599658308375414822941606",
                    "226494725607023412914596331337564914285",
                    "129231880453292375756121266455606840347",
                    "259545855947006792562166870978494910102",
                    "211966466024317453947413305491351570506",
                    "299955936703988313777666839291065749734",
                    "138670454602168716927049345311235552388",
                    "259039622594416815211422634790083140238",
                    "291601608691826183706509385019023236983",
                    "239196817897099031902353265860786865338",
                    "39730096403312739749054541694199342419",
                    "176563944769267069899858614194414818962",
                    "125827276761289425613209756329496419863",
                    "239196817897099031902353265860786865338",
                    "39730096403312739749054541694199342419",
                    "176563944769267069899858614194414818962",
                    "252639957790865787812438357176888523414",
                    "227529702526648491498747353364192306840",
                    "315705055866936701374609147536543227212",
                    "224849018509674106895395965745940104149",
                    "134008103952047155517677989125449306039"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-c61fc955",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "268352417521028367845542076301610446755",
                    "239924179753459631721185019549570366933",
                    "98889634726560196287370948075464876438",
                    "178289728046244122145941446463267876599",
                    "274157703640419043228222739474027404333",
                    "66660066677846037961325816338297534785",
                    "54076257002702924454182198608258883419",
                    "335958806433036555948979627022064975558",
                    "41045878133738289792592106977067306250",
                    "115113670473088224954500224237874146587",
                    "82321371675401198119989668316979288526",
                    "214382261250007213528048088883786706276",
                    "13312323333809348206037951157692816031",
                    "186635348450611877814792078694135061174",
                    "274694428001707897135556115432386156432",
                    "87982586563280194210829105479109417817"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-c7920e02",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Session.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "195550187764114165661677033491385867525",
                    "298497138299562978700772105186371160186",
                    "156681404185485594211687436684168302104",
                    "60637664312035269760776169815005113432",
                    "147819285426515199510027339024730015005",
                    "84740748400026015542612593340404469318",
                    "240481412043703972796096684412755948793",
                    "231346208401394666704078315980602216517",
                    "324514966097401313249705843429493881194",
                    "5974945123024092751966245155268981445",
                    "207635776789743471905519417928232511528"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-d4e93955",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/Helper.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "233001280945690766024866032804020106263",
                    "299280155137900456369389346906834625687",
                    "253670570635601349012097703140517091330",
                    "6763710524091997994082961324208427908",
                    "287455098598448921071329745868061349234",
                    "227805279402260074562908927996850584221",
                    "30116608954614319447183709923452508562",
                    "36371748056050285340289618795231278841",
                    "107302515774269940261729695955013239669",
                    "260652724757114145761900937580365783588",
                    "295348855014700694472100199874250373832",
                    "309855511319383992738640197427288476813",
                    "257575552362915492264443229615036330102",
                    "137364990574650661356629752006353102068",
                    "7346143077645295169490143337655292533",
                    "271203066595628114305843115488139558909",
                    "246313342684578862837160232182440545029",
                    "286744740604751949071305350356414253060",
                    "79209834993743233989565171484452365304",
                    "256992858442147664412152207376856907832",
                    "128684448498299491058223853214834730128",
                    "91477332951031294087869336262530769873",
                    "262407970360489148064772787139793786883",
                    "227529702526648491498747353364192306840",
                    "315705055866936701374609147536543227212",
                    "224849018509674106895395965745940104149",
                    "134008103952047155517677989125449306039",
                    "208363551722438043749201696435822980457",
                    "238878178207896271984965833527827184793",
                    "246153676559498975996525891840438850912",
                    "319314867881549470635797636500735414577"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-dbe4ad94",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        },
        {
            "digest": {
                "function_hash": "232925101570296434580965003579058750578",
                "length": 520.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-dc136aa7",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
                "function": "setHeader"
            },
            "signature_type": "Function",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "214829691709375686425688750163675762444",
                    "31173660224107888955468676996662291970",
                    "75717993223470930286438961849158473008",
                    "303972587534416303383394155165688117343",
                    "259449713830477777317285782905283199576",
                    "117229051275493355373779713481641589010",
                    "127284537694877960079216639377672371216",
                    "299252079355722630865613843433637167635",
                    "264330761225222907849056040899046276371",
                    "265301051241449904846147560721618625883",
                    "15165947783158235074656931996515737571"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
            "id": "ASB-A-326926596-dd2f4e01",
            "deprecated": false,
            "target": {
                "file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
            },
            "signature_type": "Line",
            "signature_version": "v1"
        }
    ],
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e"
    ],
    "severity": "High"
}