In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2025-12-01",
"vanir_signatures": [
{
"digest": {
"function_hash": "56176386317686736946649217063705566830",
"length": 798.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-0cbfe076",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "initialAuthenticationLayout"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"233001280945690766024866032804020106263",
"299280155137900456369389346906834625687",
"253670570635601349012097703140517091330",
"6763710524091997994082961324208427908",
"287455098598448921071329745868061349234",
"227805279402260074562908927996850584221",
"30116608954614319447183709923452508562",
"36371748056050285340289618795231278841",
"147157243943221651853800518330012291856",
"116013423297009835675761786228615335497",
"282334189601084331727543333066433232872",
"309855511319383992738640197427288476813",
"257575552362915492264443229615036330102",
"137364990574650661356629752006353102068",
"7346143077645295169490143337655292533",
"271203066595628114305843115488139558909",
"246313342684578862837160232182440545029",
"286744740604751949071305350356414253060",
"79209834993743233989565171484452365304",
"256992858442147664412152207376856907832",
"128684448498299491058223853214834730128",
"91477332951031294087869336262530769873",
"262407970360489148064772787139793786883",
"227529702526648491498747353364192306840",
"315705055866936701374609147536543227212",
"224849018509674106895395965745940104149",
"134008103952047155517677989125449306039",
"208363551722438043749201696435822980457",
"238878178207896271984965833527827184793",
"246153676559498975996525891840438850912",
"319314867881549470635797636500735414577"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-1808480d",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "38359472700061354235414716544997536502",
"length": 7279.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-1e44ee4d",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "SaveUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "58588869078857813296908308804826833385",
"length": 1468.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-26511c2d",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "DialogFillUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"214829691709375686425688750163675762444",
"31173660224107888955468676996662291970",
"75717993223470930286438961849158473008",
"303972587534416303383394155165688117343",
"259449713830477777317285782905283199576",
"117229051275493355373779713481641589010",
"127284537694877960079216639377672371216",
"299252079355722630865613843433637167635",
"264330761225222907849056040899046276371",
"265301051241449904846147560721618625883",
"15165947783158235074656931996515737571"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-3cb86a1d",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "82837857977102568369555572329393044920",
"length": 1699.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-4353f25f",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "createDatasetItems"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "57289658741123446022184100211094355310",
"length": 290.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-462be10c",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Session.java",
"function": "getServiceIcon"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "57289658741123446022184100211094355310",
"length": 290.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-66d61923",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Session.java",
"function": "getServiceLabel"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "337276213812603930001841971103435567683",
"length": 6914.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-82ecfc79",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "232925101570296434580965003579058750578",
"length": 520.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-886ee113",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "setHeader"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "275360925765748613756556327536913270530",
"length": 2553.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-894a7e5b",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "dump"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"147970609522738711682570941621357862514",
"99688209858480151987959042898705195723",
"159528535452217599658308375414822941606",
"226494725607023412914596331337564914285",
"129231880453292375756121266455606840347",
"259545855947006792562166870978494910102",
"211966466024317453947413305491351570506",
"299955936703988313777666839291065749734",
"138670454602168716927049345311235552388",
"259039622594416815211422634790083140238",
"291601608691826183706509385019023236983",
"239196817897099031902353265860786865338",
"39730096403312739749054541694199342419",
"176563944769267069899858614194414818962",
"125827276761289425613209756329496419863",
"239196817897099031902353265860786865338",
"39730096403312739749054541694199342419",
"176563944769267069899858614194414818962",
"252639957790865787812438357176888523414",
"227529702526648491498747353364192306840",
"315705055866936701374609147536543227212",
"224849018509674106895395965745940104149",
"134008103952047155517677989125449306039"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-8c2dd10d",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"195550187764114165661677033491385867525",
"298497138299562978700772105186371160186",
"156681404185485594211687436684168302104",
"60637664312035269760776169815005113432",
"220855508336303408398916928186082455251",
"329619481055895590037036631590622970823",
"240481412043703972796096684412755948793",
"216793313798955561512914603505750478780",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"118836924277658266060750236114637557467",
"204286604721725778250531106701901155250",
"200979458900658699994251331348558277928",
"324514966097401313249705843429493881194",
"5974945123024092751966245155268981445",
"207635776789743471905519417928232511528"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-d2179c75",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"268352417521028367845542076301610446755",
"239924179753459631721185019549570366933",
"98889634726560196287370948075464876438",
"178289728046244122145941446463267876599",
"274157703640419043228222739474027404333",
"66660066677846037961325816338297534785",
"54076257002702924454182198608258883419",
"335958806433036555948979627022064975558",
"41045878133738289792592106977067306250",
"115113670473088224954500224237874146587",
"82321371675401198119989668316979288526",
"214382261250007213528048088883786706276",
"13312323333809348206037951157692816031",
"186635348450611877814792078694135061174",
"274694428001707897135556115432386156432",
"87982586563280194210829105479109417817"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7",
"id": "ASB-A-326926596-ee6cea3c",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Session.java"
},
"signature_type": "Line",
"signature_version": "v1"
}
],
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7"
],
"severity": "High"
}
{
"spl": "2025-12-01",
"vanir_signatures": [
{
"digest": {
"function_hash": "57289658741123446022184100211094355310",
"length": 290.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-04dbc899",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Session.java",
"function": "getServiceIcon"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "337276213812603930001841971103435567683",
"length": 6914.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-0bbdbd29",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"233001280945690766024866032804020106263",
"299280155137900456369389346906834625687",
"253670570635601349012097703140517091330",
"6763710524091997994082961324208427908",
"287455098598448921071329745868061349234",
"227805279402260074562908927996850584221",
"30116608954614319447183709923452508562",
"147157243943221651853800518330012291856",
"116013423297009835675761786228615335497",
"282334189601084331727543333066433232872",
"245334054565899627947978281131108584265",
"309855511319383992738640197427288476813",
"257575552362915492264443229615036330102",
"137364990574650661356629752006353102068",
"7346143077645295169490143337655292533",
"271203066595628114305843115488139558909",
"246313342684578862837160232182440545029",
"286744740604751949071305350356414253060",
"79209834993743233989565171484452365304",
"256992858442147664412152207376856907832",
"128684448498299491058223853214834730128",
"91477332951031294087869336262530769873",
"262407970360489148064772787139793786883",
"227529702526648491498747353364192306840",
"315705055866936701374609147536543227212",
"224849018509674106895395965745940104149",
"134008103952047155517677989125449306039",
"208363551722438043749201696435822980457",
"238878178207896271984965833527827184793",
"246153676559498975996525891840438850912",
"319314867881549470635797636500735414577"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-27bf9ac6",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"147970609522738711682570941621357862514",
"99688209858480151987959042898705195723",
"159528535452217599658308375414822941606",
"226494725607023412914596331337564914285",
"129231880453292375756121266455606840347",
"259545855947006792562166870978494910102",
"211966466024317453947413305491351570506",
"299955936703988313777666839291065749734",
"138670454602168716927049345311235552388",
"259039622594416815211422634790083140238",
"291601608691826183706509385019023236983",
"239196817897099031902353265860786865338",
"39730096403312739749054541694199342419",
"176563944769267069899858614194414818962",
"125827276761289425613209756329496419863",
"239196817897099031902353265860786865338",
"39730096403312739749054541694199342419",
"176563944769267069899858614194414818962",
"252639957790865787812438357176888523414",
"227529702526648491498747353364192306840",
"315705055866936701374609147536543227212",
"224849018509674106895395965745940104149",
"134008103952047155517677989125449306039"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-34ce40b8",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "232925101570296434580965003579058750578",
"length": 520.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-40874f1e",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "setHeader"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "82837857977102568369555572329393044920",
"length": 1699.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-7429780b",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "createDatasetItems"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "275360925765748613756556327536913270530",
"length": 2553.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-7b0cc5c9",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "dump"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "57289658741123446022184100211094355310",
"length": 290.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-afdffc0f",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Session.java",
"function": "getServiceLabel"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"214829691709375686425688750163675762444",
"31173660224107888955468676996662291970",
"75717993223470930286438961849158473008",
"303972587534416303383394155165688117343",
"259449713830477777317285782905283199576",
"117229051275493355373779713481641589010",
"127284537694877960079216639377672371216",
"299252079355722630865613843433637167635",
"264330761225222907849056040899046276371",
"265301051241449904846147560721618625883",
"15165947783158235074656931996515737571"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-cb76f1ba",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "58588869078857813296908308804826833385",
"length": 1468.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-d7a4c447",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "DialogFillUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"195550187764114165661677033491385867525",
"298497138299562978700772105186371160186",
"156681404185485594211687436684168302104",
"60637664312035269760776169815005113432",
"220855508336303408398916928186082455251",
"329619481055895590037036631590622970823",
"240481412043703972796096684412755948793",
"231346208401394666704078315980602216517",
"324514966097401313249705843429493881194",
"5974945123024092751966245155268981445",
"207635776789743471905519417928232511528"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-f220d03c",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"268352417521028367845542076301610446755",
"239924179753459631721185019549570366933",
"98889634726560196287370948075464876438",
"178289728046244122145941446463267876599",
"274157703640419043228222739474027404333",
"66660066677846037961325816338297534785",
"54076257002702924454182198608258883419",
"335958806433036555948979627022064975558",
"41045878133738289792592106977067306250",
"115113670473088224954500224237874146587",
"82321371675401198119989668316979288526",
"214382261250007213528048088883786706276",
"13312323333809348206037951157692816031",
"186635348450611877814792078694135061174",
"274694428001707897135556115432386156432",
"87982586563280194210829105479109417817"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-f2733c97",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Session.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "38359472700061354235414716544997536502",
"length": 7279.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-f82038ff",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "SaveUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "56176386317686736946649217063705566830",
"length": 798.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa",
"id": "ASB-A-326926596-fb5e28ce",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "initialAuthenticationLayout"
},
"signature_type": "Function",
"signature_version": "v1"
}
],
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa"
],
"severity": "High"
}
{
"spl": "2025-12-01",
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"214829691709375686425688750163675762444",
"31173660224107888955468676996662291970",
"75717993223470930286438961849158473008",
"303972587534416303383394155165688117343",
"259449713830477777317285782905283199576",
"117229051275493355373779713481641589010",
"127284537694877960079216639377672371216",
"299252079355722630865613843433637167635",
"264330761225222907849056040899046276371",
"265301051241449904846147560721618625883",
"15165947783158235074656931996515737571"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-268dbb0b",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "82837857977102568369555572329393044920",
"length": 1699.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-3312f04f",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "createDatasetItems"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "232925101570296434580965003579058750578",
"length": 520.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-36d595f4",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "setHeader"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "56176386317686736946649217063705566830",
"length": 798.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-37e111e1",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "initialAuthenticationLayout"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "146899155616903025975604170962739959823",
"length": 2456.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-3d800b7f",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "dump"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "208798393521612387387459446144260401344",
"length": 6728.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-8f0805d0",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "SaveUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"202803058704813849885025393395228740199",
"156681404185485594211687436684168302104",
"60637664312035269760776169815005113432",
"83419763691286668002434097066507888400",
"14795436758084438848802528301711224",
"267572380463742154569171891627222688177",
"231225187996353771389632669293544754112",
"110666001288784253692508788231137284584",
"110793581962218508177753359608160527948",
"126084369161226454611782888021927007008",
"221783274660102062601435397657555486203",
"120430312024355289347056782212703760495",
"324514966097401313249705843429493881194",
"5974945123024092751966245155268981445",
"207635776789743471905519417928232511528"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-c81c3128",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"233001280945690766024866032804020106263",
"299280155137900456369389346906834625687",
"253670570635601349012097703140517091330",
"6763710524091997994082961324208427908",
"287455098598448921071329745868061349234",
"227805279402260074562908927996850584221",
"30116608954614319447183709923452508562",
"36371748056050285340289618795231278841",
"107302515774269940261729695955013239669",
"260652724757114145761900937580365783588",
"295348855014700694472100199874250373832",
"309855511319383992738640197427288476813",
"257575552362915492264443229615036330102",
"137364990574650661356629752006353102068",
"7346143077645295169490143337655292533",
"271203066595628114305843115488139558909",
"246313342684578862837160232182440545029",
"286744740604751949071305350356414253060",
"79209834993743233989565171484452365304",
"256992858442147664412152207376856907832",
"128684448498299491058223853214834730128",
"91477332951031294087869336262530769873",
"262407970360489148064772787139793786883",
"227529702526648491498747353364192306840",
"315705055866936701374609147536543227212",
"224849018509674106895395965745940104149",
"134008103952047155517677989125449306039",
"69312753798116405490642905263392662986",
"152499101737448620750513050421023204315",
"4274847791164019094876233726764237380",
"7675197094534217813054740109641222647"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-d8da1d19",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "134537761509883752126979205773406954332",
"length": 1377.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-d8fa937a",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "DialogFillUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "200343085571453493443924269324549155542",
"length": 6643.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-f3d64edd",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"147970609522738711682570941621357862514",
"99688209858480151987959042898705195723",
"159528535452217599658308375414822941606",
"226494725607023412914596331337564914285",
"129231880453292375756121266455606840347",
"259545855947006792562166870978494910102",
"211966466024317453947413305491351570506",
"299955936703988313777666839291065749734",
"138670454602168716927049345311235552388",
"259039622594416815211422634790083140238",
"135076460282510417074273764112187183250",
"239196817897099031902353265860786865338",
"39730096403312739749054541694199342419",
"176563944769267069899858614194414818962",
"125827276761289425613209756329496419863",
"239196817897099031902353265860786865338",
"39730096403312739749054541694199342419",
"176563944769267069899858614194414818962",
"252639957790865787812438357176888523414",
"227529702526648491498747353364192306840",
"315705055866936701374609147536543227212",
"224849018509674106895395965745940104149",
"134008103952047155517677989125449306039"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48",
"id": "ASB-A-326926596-f903cb6e",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
}
],
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48"
],
"severity": "High"
}
{
"spl": "2025-12-01",
"vanir_signatures": [
{
"digest": {
"function_hash": "275360925765748613756556327536913270530",
"length": 2553.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-25d1337e",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "dump"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "56176386317686736946649217063705566830",
"length": 798.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-292354be",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "initialAuthenticationLayout"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "57289658741123446022184100211094355310",
"length": 290.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-2ffb46cf",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Session.java",
"function": "getServiceIcon"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "150207493351967929142311001508100449928",
"length": 7100.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-561cfc5c",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "SaveUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "304172605651726255145089741382456807706",
"length": 6687.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-6a696a4a",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "82837857977102568369555572329393044920",
"length": 1699.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-6c1062de",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "createDatasetItems"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "57289658741123446022184100211094355310",
"length": 290.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-8ce24acc",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Session.java",
"function": "getServiceLabel"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "58588869078857813296908308804826833385",
"length": 1468.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-91363fc4",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "DialogFillUi"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"147970609522738711682570941621357862514",
"99688209858480151987959042898705195723",
"159528535452217599658308375414822941606",
"226494725607023412914596331337564914285",
"129231880453292375756121266455606840347",
"259545855947006792562166870978494910102",
"211966466024317453947413305491351570506",
"299955936703988313777666839291065749734",
"138670454602168716927049345311235552388",
"259039622594416815211422634790083140238",
"291601608691826183706509385019023236983",
"239196817897099031902353265860786865338",
"39730096403312739749054541694199342419",
"176563944769267069899858614194414818962",
"125827276761289425613209756329496419863",
"239196817897099031902353265860786865338",
"39730096403312739749054541694199342419",
"176563944769267069899858614194414818962",
"252639957790865787812438357176888523414",
"227529702526648491498747353364192306840",
"315705055866936701374609147536543227212",
"224849018509674106895395965745940104149",
"134008103952047155517677989125449306039"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-c61fc955",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"268352417521028367845542076301610446755",
"239924179753459631721185019549570366933",
"98889634726560196287370948075464876438",
"178289728046244122145941446463267876599",
"274157703640419043228222739474027404333",
"66660066677846037961325816338297534785",
"54076257002702924454182198608258883419",
"335958806433036555948979627022064975558",
"41045878133738289792592106977067306250",
"115113670473088224954500224237874146587",
"82321371675401198119989668316979288526",
"214382261250007213528048088883786706276",
"13312323333809348206037951157692816031",
"186635348450611877814792078694135061174",
"274694428001707897135556115432386156432",
"87982586563280194210829105479109417817"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-c7920e02",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Session.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"195550187764114165661677033491385867525",
"298497138299562978700772105186371160186",
"156681404185485594211687436684168302104",
"60637664312035269760776169815005113432",
"147819285426515199510027339024730015005",
"84740748400026015542612593340404469318",
"240481412043703972796096684412755948793",
"231346208401394666704078315980602216517",
"324514966097401313249705843429493881194",
"5974945123024092751966245155268981445",
"207635776789743471905519417928232511528"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-d4e93955",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"233001280945690766024866032804020106263",
"299280155137900456369389346906834625687",
"253670570635601349012097703140517091330",
"6763710524091997994082961324208427908",
"287455098598448921071329745868061349234",
"227805279402260074562908927996850584221",
"30116608954614319447183709923452508562",
"36371748056050285340289618795231278841",
"107302515774269940261729695955013239669",
"260652724757114145761900937580365783588",
"295348855014700694472100199874250373832",
"309855511319383992738640197427288476813",
"257575552362915492264443229615036330102",
"137364990574650661356629752006353102068",
"7346143077645295169490143337655292533",
"271203066595628114305843115488139558909",
"246313342684578862837160232182440545029",
"286744740604751949071305350356414253060",
"79209834993743233989565171484452365304",
"256992858442147664412152207376856907832",
"128684448498299491058223853214834730128",
"91477332951031294087869336262530769873",
"262407970360489148064772787139793786883",
"227529702526648491498747353364192306840",
"315705055866936701374609147536543227212",
"224849018509674106895395965745940104149",
"134008103952047155517677989125449306039",
"208363551722438043749201696435822980457",
"238878178207896271984965833527827184793",
"246153676559498975996525891840438850912",
"319314867881549470635797636500735414577"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-dbe4ad94",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"digest": {
"function_hash": "232925101570296434580965003579058750578",
"length": 520.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-dc136aa7",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "setHeader"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"214829691709375686425688750163675762444",
"31173660224107888955468676996662291970",
"75717993223470930286438961849158473008",
"303972587534416303383394155165688117343",
"259449713830477777317285782905283199576",
"117229051275493355373779713481641589010",
"127284537694877960079216639377672371216",
"299252079355722630865613843433637167635",
"264330761225222907849056040899046276371",
"265301051241449904846147560721618625883",
"15165947783158235074656931996515737571"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e",
"id": "ASB-A-326926596-dd2f4e01",
"deprecated": false,
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line",
"signature_version": "v1"
}
],
"types": [
"EoP"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e"
],
"severity": "High"
}