In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app when its result will be used in another due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2025-04-01",
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"target": {
"file": "core/java/android/hardware/biometrics/BiometricPrompt.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"147524687863591423861922620005194013747",
"129717098065904380555197117562367574281",
"70004750835757778301920980091817553255",
"152846493034047750365629007933945317181",
"255938540774519373564298548378804189397",
"338253862639500299196452552651344100348",
"176012018323537988302039330811879880558",
"1242596820432673028967143689283327608",
"201343619321101841766687522221679730466"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-0ca23f81",
"signature_type": "Line"
},
{
"target": {
"function": "showDialog",
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"length": 1139.0,
"function_hash": "245954559699050951182250890957648136317"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-5245d848",
"signature_type": "Function"
},
{
"target": {
"function": "setComponentNameForConfirmDeviceCredentialActivity",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 93.0,
"function_hash": "195411247792697651424532565076924804056"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-8a082987",
"signature_type": "Function"
},
{
"target": {
"function": "requiresTestOrInternalPermission",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 553.0,
"function_hash": "13904012027498894187306748820950093878"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-919641ca",
"signature_type": "Function"
},
{
"target": {
"function": "writeToParcel",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 1184.0,
"function_hash": "288084473829641679178032811301672155523"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-b23f0eec",
"signature_type": "Function"
},
{
"target": {
"function": "PromptInfo",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 1354.0,
"function_hash": "19078332798046447110024432940186933275"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-b25c2e6f",
"signature_type": "Function"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthDialog.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"290535239967467526603137661615007752113",
"109450674435909472747484583062378561976",
"241616152355243219581591729139710726333"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-b93b4588",
"signature_type": "Line"
},
{
"target": {
"function": "isOwnerInForeground",
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"length": 432.0,
"function_hash": "86044742168334812259802620092759685839"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-c2a062b2",
"signature_type": "Function"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"316311015427826778719982258594003142330",
"133864529660473628889742949013090395892",
"37699664208387374915680514025861861855",
"151655086691316995508620417133598215816",
"156694698987190921518319855981704290494",
"245914788490924213560283229459746195602",
"104498270064595982798320666225101665827",
"220887503484546862631496172120613316524",
"290192701949436906578758583449481851247",
"212319758465115133031471361209683593170",
"214675721499318226784492026720204328414",
"125128485432806176609092071262063184050",
"58137926508154035730692163050047828546",
"332961553840748061123660452161036351163",
"77494783855601800331377093751813872644",
"217424702709995653088635649838471939599",
"133217066758006622360518135838689564972",
"334382811407362780498116825916871408711",
"194377974981534961941992076506883065261",
"86503847032900825209425584387209433826",
"111488451954294407563748023901873414531",
"335391923332883398951730313256478179123",
"201813785989310512801353197422550506197",
"63023319149774050960125992398873200987",
"11805384366078932325418201622514784026",
"115842048727584634593751743252466340513",
"251053517511890515296468331944283045870",
"287023520256470428597995457945978503246",
"101590940874997532139658864975872838953",
"13830212213712721019581501139321924457"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-c49f6f39",
"signature_type": "Line"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthContainerView.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"16662786884986172260223512343573528503",
"274772761522730508170974348833543986299",
"299250539738131039706114761420279183020",
"338790881762184786049398786361906386377"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"signature_type": "Line",
"match_only_versions": [
"15-next"
],
"deprecated": false,
"id": "ASB-A-339532378-c6e0a045"
},
{
"target": {
"function": "getComponentNameForConfirmDeviceCredentialActivity",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 80.0,
"function_hash": "6427437045314555225829918202276146073"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-ccf9fbf9",
"signature_type": "Function"
},
{
"target": {
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"222924909509013212835050932226557986100",
"208916627078376937546345104880424168025",
"299577835027255713402126757933543294251",
"157312373158062774163059650961836007359",
"329593554991212412795905335115393731773",
"332725066694203328530166883229714958562",
"258435618432651398915549922202168835096",
"248918820765574023428562923487448198497",
"305340877544667162244334040258735940391",
"22617651305319426365638487206419784796",
"251076949345097345251058025876362688459",
"102540731048216888119899351810585018630",
"211993579811139969872449087056258217980",
"277089988998836419090633768205873876675",
"149025025776701368583706014326526650950",
"232275030296092908372760384016006184914",
"158623659816499154777817322460609029624",
"69658368272428251356443407712894207842",
"221189465342037177644194872937957266308",
"178650326624068723093558305872807750458",
"122533371312212313367933086901346573498",
"14025642072627712653215384816076613042",
"218394827291614770195376707958786151202",
"76562639222370279930309799955447161393",
"241802247516934137462663028990520826016",
"336211199805398680138517052783006547502",
"218813463849730091179659024979976993858",
"106969368589754888030543267806415690882",
"240338846547172055453850010821441037852",
"194575927154464620674526175965203625390",
"249684969087808776376571297518807822135"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-e651145c",
"signature_type": "Line"
},
{
"target": {
"function": "onTaskStackChanged",
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"length": 130.0,
"function_hash": "21877760011467056614181048846313007366"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a",
"deprecated": false,
"id": "ASB-A-339532378-f79a63f0",
"signature_type": "Function"
}
]
}{
"spl": "2025-04-01",
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"target": {
"function": "newInstance",
"file": "src/com/android/settings/password/BiometricFragment.java"
},
"signature_version": "v1",
"digest": {
"length": 243.0,
"function_hash": "286972445545211193216944745402914106210"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b",
"deprecated": false,
"id": "ASB-A-339532378-02865189",
"signature_type": "Function"
},
{
"target": {
"function": "showBiometricPrompt",
"file": "src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"
},
"signature_version": "v1",
"digest": {
"length": 501.0,
"function_hash": "34280703308763505191806470357934144046"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b",
"deprecated": false,
"id": "ASB-A-339532378-0e4521d3",
"signature_type": "Function"
},
{
"target": {
"file": "src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"47896703651626902280454828186725763590",
"76951462188717936231112119743495001960",
"146980190423460343504454688995850973586",
"217120689376946272442527366733014902094",
"108300493962106550220579955627621656876",
"264389530625051813191338583849141879594",
"285552957212872370043373959155655975041",
"223871996873881961004049797476705851749",
"236705234711453985753506979548508008547"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b",
"deprecated": false,
"id": "ASB-A-339532378-700d699f",
"signature_type": "Line"
},
{
"target": {
"file": "src/com/android/settings/password/BiometricFragment.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"56988542565923540515914897084734512774",
"164846179071923827401094453685094762917",
"179955053679579069299974725795334734634",
"322260419061621698436959810053598226416",
"163553327305414945030288886807184878100",
"184883397740477747956350854255074783553",
"124077981393171571566514473705272383164",
"210415068751340283068454131226223629073",
"204749693022796054471025409707093368752",
"81541343748215523742704135083720244609",
"139514941006614628967395269506426915023",
"187200411898395697500297824831097028510",
"317323666951130949930280543479820766357",
"134525654446312110976835024735458442145",
"176478373937549012871006515070275527118",
"210433110614817564307635795460850770534",
"112055256766023614693534153747943585845",
"100957411046816443800063922629167705562",
"264576205214898118841964229134055671388",
"332413159547934220780295584287591007174",
"28925555746665208944602864136059594445",
"94437728117359607748560507575907497998",
"93632341938445720643359694560875080849",
"250600632479834967574243475818626213839",
"145061204329957628425044469503897754178"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b",
"deprecated": false,
"id": "ASB-A-339532378-cb3cb52a",
"signature_type": "Line"
},
{
"target": {
"function": "onCreate",
"file": "src/com/android/settings/password/BiometricFragment.java"
},
"signature_version": "v1",
"digest": {
"length": 1360.0,
"function_hash": "233030647194746958109691740783133398235"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b",
"deprecated": false,
"id": "ASB-A-339532378-dc6b84dc",
"signature_type": "Function"
},
{
"target": {
"function": "onCreate",
"file": "src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"
},
"signature_version": "v1",
"digest": {
"length": 5593.0,
"function_hash": "93189397042202878851090165398963299855"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b",
"deprecated": false,
"id": "ASB-A-339532378-de627db6",
"signature_type": "Function"
}
]
}{
"spl": "2025-04-01",
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"target": {
"function": "onTaskStackChanged",
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"length": 130.0,
"function_hash": "21877760011467056614181048846313007366"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-2993081e",
"signature_type": "Function"
},
{
"target": {
"file": "core/java/android/hardware/biometrics/BiometricPrompt.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"147524687863591423861922620005194013747",
"129717098065904380555197117562367574281",
"70004750835757778301920980091817553255",
"152846493034047750365629007933945317181",
"255938540774519373564298548378804189397",
"338253862639500299196452552651344100348",
"176012018323537988302039330811879880558",
"1242596820432673028967143689283327608",
"201343619321101841766687522221679730466"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-3656e34b",
"signature_type": "Line"
},
{
"target": {
"function": "showDialog",
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"length": 1139.0,
"function_hash": "245954559699050951182250890957648136317"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-3bde0140",
"signature_type": "Function"
},
{
"target": {
"function": "PromptInfo",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 1354.0,
"function_hash": "19078332798046447110024432940186933275"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-3d580185",
"signature_type": "Function"
},
{
"target": {
"function": "getComponentNameForConfirmDeviceCredentialActivity",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 80.0,
"function_hash": "6427437045314555225829918202276146073"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-523894a0",
"signature_type": "Function"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthContainerView.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"16662786884986172260223512343573528503",
"274772761522730508170974348833543986299",
"299250539738131039706114761420279183020",
"338790881762184786049398786361906386377"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"signature_type": "Line",
"match_only_versions": [
"15"
],
"deprecated": false,
"id": "ASB-A-339532378-7794e41b"
},
{
"target": {
"function": "isOwnerInForeground",
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"length": 432.0,
"function_hash": "86044742168334812259802620092759685839"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-9d2bb82d",
"signature_type": "Function"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthDialog.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"290535239967467526603137661615007752113",
"109450674435909472747484583062378561976",
"241616152355243219581591729139710726333"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-abc85e8f",
"signature_type": "Line"
},
{
"target": {
"function": "writeToParcel",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 1184.0,
"function_hash": "288084473829641679178032811301672155523"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-adc4d686",
"signature_type": "Function"
},
{
"target": {
"function": "requiresTestOrInternalPermission",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 553.0,
"function_hash": "13904012027498894187306748820950093878"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-c8fcecbf",
"signature_type": "Function"
},
{
"target": {
"function": "setComponentNameForConfirmDeviceCredentialActivity",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 93.0,
"function_hash": "195411247792697651424532565076924804056"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-c9a56dd1",
"signature_type": "Function"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"316311015427826778719982258594003142330",
"133864529660473628889742949013090395892",
"37699664208387374915680514025861861855",
"151655086691316995508620417133598215816",
"156694698987190921518319855981704290494",
"245914788490924213560283229459746195602",
"104498270064595982798320666225101665827",
"220887503484546862631496172120613316524",
"290192701949436906578758583449481851247",
"212319758465115133031471361209683593170",
"214675721499318226784492026720204328414",
"125128485432806176609092071262063184050",
"58137926508154035730692163050047828546",
"332961553840748061123660452161036351163",
"77494783855601800331377093751813872644",
"217424702709995653088635649838471939599",
"133217066758006622360518135838689564972",
"334382811407362780498116825916871408711",
"194377974981534961941992076506883065261",
"86503847032900825209425584387209433826",
"111488451954294407563748023901873414531",
"335391923332883398951730313256478179123",
"201813785989310512801353197422550506197",
"63023319149774050960125992398873200987",
"11805384366078932325418201622514784026",
"115842048727584634593751743252466340513",
"251053517511890515296468331944283045870",
"287023520256470428597995457945978503246",
"101590940874997532139658864975872838953",
"13830212213712721019581501139321924457"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-ca7a3327",
"signature_type": "Line"
},
{
"target": {
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"222924909509013212835050932226557986100",
"208916627078376937546345104880424168025",
"299577835027255713402126757933543294251",
"157312373158062774163059650961836007359",
"329593554991212412795905335115393731773",
"332725066694203328530166883229714958562",
"258435618432651398915549922202168835096",
"248918820765574023428562923487448198497",
"305340877544667162244334040258735940391",
"22617651305319426365638487206419784796",
"251076949345097345251058025876362688459",
"102540731048216888119899351810585018630",
"211993579811139969872449087056258217980",
"277089988998836419090633768205873876675",
"149025025776701368583706014326526650950",
"232275030296092908372760384016006184914",
"158623659816499154777817322460609029624",
"69658368272428251356443407712894207842",
"221189465342037177644194872937957266308",
"178650326624068723093558305872807750458",
"122533371312212313367933086901346573498",
"14025642072627712653215384816076613042",
"218394827291614770195376707958786151202",
"76562639222370279930309799955447161393",
"241802247516934137462663028990520826016",
"336211199805398680138517052783006547502",
"218813463849730091179659024979976993858",
"106969368589754888030543267806415690882",
"240338846547172055453850010821441037852",
"194575927154464620674526175965203625390",
"249684969087808776376571297518807822135"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d",
"deprecated": false,
"id": "ASB-A-339532378-cfcc40a1",
"signature_type": "Line"
}
]
}{
"spl": "2025-04-01",
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"target": {
"function": "newInstance",
"file": "src/com/android/settings/password/BiometricFragment.java"
},
"signature_version": "v1",
"digest": {
"length": 243.0,
"function_hash": "286972445545211193216944745402914106210"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6",
"deprecated": false,
"id": "ASB-A-339532378-64df166a",
"signature_type": "Function"
},
{
"target": {
"function": "showBiometricPrompt",
"file": "src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"
},
"signature_version": "v1",
"digest": {
"length": 501.0,
"function_hash": "34280703308763505191806470357934144046"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6",
"deprecated": false,
"id": "ASB-A-339532378-82243efe",
"signature_type": "Function"
},
{
"target": {
"function": "onCreate",
"file": "src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"
},
"signature_version": "v1",
"digest": {
"length": 5005.0,
"function_hash": "100832819719226973578256693487517424724"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6",
"deprecated": false,
"id": "ASB-A-339532378-af40529a",
"signature_type": "Function"
},
{
"target": {
"function": "onCreate",
"file": "src/com/android/settings/password/BiometricFragment.java"
},
"signature_version": "v1",
"digest": {
"length": 1081.0,
"function_hash": "89224342493305428609415072870634162783"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6",
"deprecated": false,
"id": "ASB-A-339532378-d661660e",
"signature_type": "Function"
},
{
"target": {
"file": "src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"198369131591339542045373684347121390788",
"307572215994453746162440241287011883704",
"69182617143756243845685334135162987521",
"55876357189725406582876460185454081901",
"108300493962106550220579955627621656876",
"264389530625051813191338583849141879594",
"285552957212872370043373959155655975041",
"223871996873881961004049797476705851749",
"236705234711453985753506979548508008547"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6",
"deprecated": false,
"id": "ASB-A-339532378-d75d19ec",
"signature_type": "Line"
},
{
"target": {
"file": "src/com/android/settings/password/BiometricFragment.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"318747212200144329004783896385561316959",
"245841845836205544216805477549570646626",
"339667131492855703348062891804222649644",
"163553327305414945030288886807184878100",
"184883397740477747956350854255074783553",
"124077981393171571566514473705272383164",
"210415068751340283068454131226223629073",
"204749693022796054471025409707093368752",
"81541343748215523742704135083720244609",
"139514941006614628967395269506426915023",
"187200411898395697500297824831097028510",
"317323666951130949930280543479820766357",
"134525654446312110976835024735458442145",
"176478373937549012871006515070275527118",
"210433110614817564307635795460850770534",
"112055256766023614693534153747943585845",
"100957411046816443800063922629167705562",
"264576205214898118841964229134055671388",
"332413159547934220780295584287591007174",
"28925555746665208944602864136059594445",
"94437728117359607748560507575907497998",
"93632341938445720643359694560875080849",
"250600632479834967574243475818626213839",
"145061204329957628425044469503897754178"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6",
"deprecated": false,
"id": "ASB-A-339532378-e9c0021f",
"signature_type": "Line"
}
]
}{
"spl": "2025-04-01",
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"151655086691316995508620417133598215816",
"214554262846968823091188291967199510467",
"99753109436074398241992036822562477508",
"186190212679313701681360984908886291114",
"101170234680119821372575195085923365826",
"331219661011553895241033622962588257496",
"3383791976666833696659681581511082272",
"266628596824009534373758835882198914077",
"318739438652346065297108729860240180033",
"77494783855601800331377093751813872644",
"217424702709995653088635649838471939599",
"133217066758006622360518135838689564972",
"43137734371876995664430352286284736290",
"225100895119041388448998527209270397070",
"76106207254534043230906710267073662223",
"235141809665264812933110224013090870869",
"84303894234717418342334306945881313179",
"123925302090746379191782544807942091133",
"91213881280923453870718650965284150595",
"301134061245308633049097412457116977372",
"197118572857864153512696185094087675140",
"335626042333370389415744578182381781813",
"338882751503882601984815235756026123525",
"194115050831467786788159664471235411773",
"160298002427688306154063412079010706450",
"52538635504512433591189127964390514154",
"126977496652054893345739791138541493832",
"128797082458499271042020098054893634524",
"136780456979842963386861962177147895762",
"264752505981536528125529507969505299293",
"319966246098604444678556003215846270865"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993",
"deprecated": false,
"id": "ASB-A-339532378-1197b7c3",
"signature_type": "Line"
},
{
"target": {
"function": "writeToParcel",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 806.0,
"function_hash": "188396603861998329266429728440816824131"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993",
"deprecated": false,
"id": "ASB-A-339532378-3799b0e0",
"signature_type": "Function"
},
{
"target": {
"function": "cancelIfOwnerIsNotInForeground",
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"length": 889.0,
"function_hash": "42683110230021379418225731688281990055"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993",
"deprecated": false,
"id": "ASB-A-339532378-3d56a9f1",
"signature_type": "Function"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthContainerView.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"99952568197426683895513375891900519909",
"327234016139211573395444186728615979976",
"270247477998253403659025402417571585337",
"174063682829384946834135850089760831646"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993",
"deprecated": false,
"id": "ASB-A-339532378-51db1e35",
"signature_type": "Line"
},
{
"target": {
"function": "containsTestConfigurations",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 297.0,
"function_hash": "131578668132683230273746664848470654555"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993",
"deprecated": false,
"id": "ASB-A-339532378-cec5319c",
"signature_type": "Function"
},
{
"target": {
"function": "PromptInfo",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 865.0,
"function_hash": "114225774273086015072046385152476897817"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993",
"deprecated": false,
"id": "ASB-A-339532378-d2e5f806",
"signature_type": "Function"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthDialog.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"338656732825934877055475492724120360336",
"192410361246774981455434104661848987491",
"42359730159251206005622082559908228064"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993",
"deprecated": false,
"id": "ASB-A-339532378-d787b7c7",
"signature_type": "Line"
},
{
"target": {
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"105680887194346282139859111058495707036",
"250277604085277924011006325358446045306",
"27792544708540002708726217948030487324",
"161091977118680808893535967302273068839",
"70160788166047168563267359521483303445",
"6546532027749504274936064849223516473",
"206571713650256929238863346510451547486",
"174749931805183932442961591909491213863",
"277786617964644221620821911974842864912",
"254364686248422333544914277479723179324",
"77108622976583689751097107161407079668",
"197153245619284721500561688051899796889",
"327095106668220280744725072383304971162",
"317397726980051898591119561428435673276",
"84410722318159773695612981727837265965",
"119258988697698457769296765622298402469",
"128514843377418579975774493366193377166",
"4281137349180116964713745818331651284",
"4279922823913944971200936009911777961",
"155494328573959842728559453571940542973",
"97860610033155345596026926749486984090"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993",
"deprecated": false,
"id": "ASB-A-339532378-ea0c0f76",
"signature_type": "Line"
}
]
}{
"spl": "2025-04-01",
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/2b7c1f1105aaf72059f99d557b383532ff4596cd"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"target": {
"function": "onCreate",
"file": "src/com/android/settings/password/BiometricFragment.java"
},
"signature_version": "v1",
"digest": {
"length": 555.0,
"function_hash": "106223732028557127186590958248574394284"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/2b7c1f1105aaf72059f99d557b383532ff4596cd",
"deprecated": false,
"id": "ASB-A-339532378-9245628d",
"signature_type": "Function"
},
{
"target": {
"file": "src/com/android/settings/password/BiometricFragment.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"68854127986283626443970362776639542279",
"262970330495673307332161988500030610488",
"168025285441996511492692748716502038914",
"107320227676802385996018539044776897322"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/2b7c1f1105aaf72059f99d557b383532ff4596cd",
"deprecated": false,
"id": "ASB-A-339532378-c6f3d448",
"signature_type": "Line"
}
]
}{
"spl": "2025-04-01",
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"target": {
"function": "PromptInfo",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 910.0,
"function_hash": "292893181079758970551702204541270770956"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49",
"deprecated": false,
"id": "ASB-A-339532378-524639ee",
"signature_type": "Function"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthDialog.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"338656732825934877055475492724120360336",
"192410361246774981455434104661848987491",
"42359730159251206005622082559908228064"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49",
"deprecated": false,
"id": "ASB-A-339532378-7263d7fc",
"signature_type": "Line"
},
{
"target": {
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"105680887194346282139859111058495707036",
"250277604085277924011006325358446045306",
"27792544708540002708726217948030487324",
"161091977118680808893535967302273068839",
"70160788166047168563267359521483303445",
"6546532027749504274936064849223516473",
"206571713650256929238863346510451547486",
"174749931805183932442961591909491213863",
"277786617964644221620821911974842864912",
"254364686248422333544914277479723179324",
"77108622976583689751097107161407079668",
"197153245619284721500561688051899796889",
"327095106668220280744725072383304971162",
"317397726980051898591119561428435673276",
"84410722318159773695612981727837265965",
"119258988697698457769296765622298402469",
"128514843377418579975774493366193377166",
"4281137349180116964713745818331651284",
"4279922823913944971200936009911777961",
"155494328573959842728559453571940542973",
"97860610033155345596026926749486984090"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49",
"deprecated": false,
"id": "ASB-A-339532378-9a800fb3",
"signature_type": "Line"
},
{
"target": {
"function": "cancelIfOwnerIsNotInForeground",
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"length": 851.0,
"function_hash": "138875293812050197306092834877387654493"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49",
"deprecated": false,
"id": "ASB-A-339532378-a5f7be5f",
"signature_type": "Function"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"151655086691316995508620417133598215816",
"214554262846968823091188291967199510467",
"99753109436074398241992036822562477508",
"186190212679313701681360984908886291114",
"101170234680119821372575195085923365826",
"331219661011553895241033622962588257496",
"3383791976666833696659681581511082272",
"266628596824009534373758835882198914077",
"318739438652346065297108729860240180033",
"77494783855601800331377093751813872644",
"217424702709995653088635649838471939599",
"133217066758006622360518135838689564972",
"43137734371876995664430352286284736290",
"225100895119041388448998527209270397070",
"76106207254534043230906710267073662223",
"187366144862844467939360963966300558581",
"100006906141960008986133305599696486437",
"277194629422743246563619636886562855213",
"301134061245308633049097412457116977372",
"197118572857864153512696185094087675140",
"335626042333370389415744578182381781813",
"338882751503882601984815235756026123525",
"194115050831467786788159664471235411773",
"160298002427688306154063412079010706450",
"52538635504512433591189127964390514154",
"126977496652054893345739791138541493832",
"128797082458499271042020098054893634524",
"136780456979842963386861962177147895762",
"264752505981536528125529507969505299293",
"319966246098604444678556003215846270865"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49",
"deprecated": false,
"id": "ASB-A-339532378-b11026d9",
"signature_type": "Line"
},
{
"target": {
"file": "packages/SystemUI/src/com/android/systemui/biometrics/AuthContainerView.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"99952568197426683895513375891900519909",
"327234016139211573395444186728615979976",
"22723860002200732846646679053766311331",
"340273357918616030196744118102784183854"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49",
"deprecated": false,
"id": "ASB-A-339532378-d1d326c5",
"signature_type": "Line"
},
{
"target": {
"function": "containsTestConfigurations",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 297.0,
"function_hash": "131578668132683230273746664848470654555"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49",
"deprecated": false,
"id": "ASB-A-339532378-d26ab3e3",
"signature_type": "Function"
},
{
"target": {
"function": "writeToParcel",
"file": "core/java/android/hardware/biometrics/PromptInfo.java"
},
"signature_version": "v1",
"digest": {
"length": 849.0,
"function_hash": "243147314190487979913948875168508033502"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49",
"deprecated": false,
"id": "ASB-A-339532378-db3fa934",
"signature_type": "Function"
}
]
}{
"spl": "2025-04-01",
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/63eda7f3a99520942643d49dcba765e70822db32"
],
"types": [
"EoP"
],
"vanir_signatures": [
{
"target": {
"function": "onCreate",
"file": "src/com/android/settings/password/BiometricFragment.java"
},
"signature_version": "v1",
"digest": {
"length": 590.0,
"function_hash": "227584263058238575979254328616186261797"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/63eda7f3a99520942643d49dcba765e70822db32",
"deprecated": false,
"id": "ASB-A-339532378-018a290e",
"signature_type": "Function"
},
{
"target": {
"file": "src/com/android/settings/password/BiometricFragment.java"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"318546260623609815622346615481868170989",
"315032446197486206925587542903672937237",
"155247878120208066938704025778175636357",
"267923841323472490486957773897003953134"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/63eda7f3a99520942643d49dcba765e70822db32",
"deprecated": false,
"id": "ASB-A-339532378-336cb361",
"signature_type": "Line"
}
]
}