In multiple locations, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "length": 484.0, "function_hash": "149926094342848453959065739735632943529" }, "id": "ASB-A-344865740-3ed62a54", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/32e388ad3199de3c062bb2e2db5d3239f934d0eb", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "handleDialogClick" }, "signature_type": "Function" }, { "digest": { "length": 397.0, "function_hash": "107213982580019222941238681814487852622" }, "id": "ASB-A-344865740-440d686a", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/32e388ad3199de3c062bb2e2db5d3239f934d0eb", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "uninstallPkg" }, "signature_type": "Function" }, { "digest": { "length": 258.0, "function_hash": "46096716347583852344427655173580506484" }, "id": "ASB-A-344865740-63c4a5c4", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/32e388ad3199de3c062bb2e2db5d3239f934d0eb", "deprecated": false, "signature_version": "v1", "target": { "file": "tests/robotests/testutils/com/android/settings/testutils/shadow/ShadowUtils.java", "function": "reset" }, "signature_type": "Function" }, { "digest": { "length": 1757.0, "function_hash": "106884653494907361537354837393063229054" }, "id": "ASB-A-344865740-c506e3c5", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/32e388ad3199de3c062bb2e2db5d3239f934d0eb", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "onClick" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "101551687106860497203741883822049583550", "65121382242615074620743088670583687233", "104066286513474685936463236339063817773", "218351565780125128040651522656486777753", "278302029476599916292333888737225154340" ] }, "id": "ASB-A-344865740-d5e222af", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/32e388ad3199de3c062bb2e2db5d3239f934d0eb", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/Utils.java" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "332383223630576226932745750267080154886", "308821731690096532519299136288498807541", "19402778086652577111953171017776612727", "165319204510350485696502837125629962098", "238757968881331287998791656249155242293", "186385814159040440307520132171425285352", "5497443480652062622173639241313044227", "184056938710629595223393186247436318211", "40496271728537941598051348472858709542", "216259906626880067869984991663406573447" ] }, "id": "ASB-A-344865740-edcb18a6", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/32e388ad3199de3c062bb2e2db5d3239f934d0eb", "deprecated": false, "signature_version": "v1", "target": { "file": "tests/robotests/testutils/com/android/settings/testutils/shadow/ShadowUtils.java" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "112705362368931843157703567284457663230", "68258790962837260473284204238324467744", "44630758366433177633598371976102027417", "224366868194666250560032747369892760719", "135267219635872687394336006360781931879", "179548531086012612500405584222480840622", "7771567929700176848702299030062268289", "227212070755007117160686412137130041752", "117573019651116632615581598219130345924", "146915442172431217393471251196046264694", "205464233427790341334211757023424854175", "218807161830731649082943071940412687989", "83553372889981830968456725192144577609", "165594505290376154330979187442657262009", "175761473731588973103786992573711695835", "338759981993703737172997794065766165449", "84907333041721354473333028607460083943", "140282990582580621804929367332552350751", "182356994438299968480360761552956221512", "186623445461225072593750410631888278324", "184136171604633619357980926077716930685", "7582528667651489994732142343463201678", "18321124933704272058353057904848223366", "327692520388349911294205144766651865537", "305073938807019059978980696684374076721", "177616454423932610404178716040708953690", "110951987745803951963997662905946786673", "60893376149216157319007051250507293033", "87346161800904085266763036374508424644", "145327411172926805371904617679425980143", "313376098391986625941282631139619078165", "245691271313292798288951359221865354769", "326948017229402127795096783648893102040", "52817640546117720459533053132382372487", "317340367281856016958728843436254341829", "170309926354209526502134572865149327321", "32140455331141385101740573733702638975", "298575940780774141713304758205276877222" ] }, "id": "ASB-A-344865740-f42e16a9", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/32e388ad3199de3c062bb2e2db5d3239f934d0eb", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/platform/packages/apps/Settings/+/32e388ad3199de3c062bb2e2db5d3239f934d0eb" ], "spl": "2025-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "332383223630576226932745750267080154886", "308821731690096532519299136288498807541", "19402778086652577111953171017776612727", "165319204510350485696502837125629962098", "238757968881331287998791656249155242293", "186385814159040440307520132171425285352", "5497443480652062622173639241313044227", "184056938710629595223393186247436318211", "40496271728537941598051348472858709542", "216259906626880067869984991663406573447" ] }, "id": "ASB-A-344865740-2332b96b", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/d31280f0aa61c4e19d667ad4d4ffb175291c7b1d", "deprecated": false, "signature_version": "v1", "target": { "file": "tests/robotests/testutils/com/android/settings/testutils/shadow/ShadowUtils.java" }, "signature_type": "Line" }, { "digest": { "length": 1757.0, "function_hash": "106884653494907361537354837393063229054" }, "id": "ASB-A-344865740-38b031a1", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/d31280f0aa61c4e19d667ad4d4ffb175291c7b1d", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "onClick" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "287642676071269573600308295533525820474", "65121382242615074620743088670583687233", "104066286513474685936463236339063817773", "218351565780125128040651522656486777753", "278302029476599916292333888737225154340" ] }, "id": "ASB-A-344865740-6cfabcab", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/d31280f0aa61c4e19d667ad4d4ffb175291c7b1d", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/Utils.java" }, "signature_type": "Line" }, { "digest": { "length": 397.0, "function_hash": "107213982580019222941238681814487852622" }, "id": "ASB-A-344865740-73bebf1f", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/d31280f0aa61c4e19d667ad4d4ffb175291c7b1d", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "uninstallPkg" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "112705362368931843157703567284457663230", "68258790962837260473284204238324467744", "44630758366433177633598371976102027417", "224366868194666250560032747369892760719", "135267219635872687394336006360781931879", "179548531086012612500405584222480840622", "7771567929700176848702299030062268289", "227212070755007117160686412137130041752", "117573019651116632615581598219130345924", "146915442172431217393471251196046264694", "205464233427790341334211757023424854175", "218807161830731649082943071940412687989", "83553372889981830968456725192144577609", "165594505290376154330979187442657262009", "175761473731588973103786992573711695835", "338759981993703737172997794065766165449", "84907333041721354473333028607460083943", "140282990582580621804929367332552350751", "182356994438299968480360761552956221512", "186623445461225072593750410631888278324", "184136171604633619357980926077716930685", "7582528667651489994732142343463201678", "18321124933704272058353057904848223366", "327692520388349911294205144766651865537", "305073938807019059978980696684374076721", "177616454423932610404178716040708953690", "110951987745803951963997662905946786673", "60893376149216157319007051250507293033", "87346161800904085266763036374508424644", "145327411172926805371904617679425980143", "313376098391986625941282631139619078165", "245691271313292798288951359221865354769", "326948017229402127795096783648893102040", "52817640546117720459533053132382372487", "317340367281856016958728843436254341829", "170309926354209526502134572865149327321", "32140455331141385101740573733702638975", "298575940780774141713304758205276877222" ] }, "id": "ASB-A-344865740-80d4f334", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/d31280f0aa61c4e19d667ad4d4ffb175291c7b1d", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java" }, "signature_type": "Line" }, { "digest": { "length": 484.0, "function_hash": "149926094342848453959065739735632943529" }, "id": "ASB-A-344865740-a1775add", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/d31280f0aa61c4e19d667ad4d4ffb175291c7b1d", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "handleDialogClick" }, "signature_type": "Function" }, { "digest": { "length": 258.0, "function_hash": "46096716347583852344427655173580506484" }, "id": "ASB-A-344865740-c6aa89c7", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/d31280f0aa61c4e19d667ad4d4ffb175291c7b1d", "deprecated": false, "signature_version": "v1", "target": { "file": "tests/robotests/testutils/com/android/settings/testutils/shadow/ShadowUtils.java", "function": "reset" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/packages/apps/Settings/+/d31280f0aa61c4e19d667ad4d4ffb175291c7b1d" ], "spl": "2025-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "235598576587138305314717223498906039681", "254773694436424555204992016127725015433", "4449732047205886580808375121317364221", "291887416735398274785005950453536579315" ] }, "id": "ASB-A-344865740-2232e6e8", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/6179d4fdf3c70f1af6267339c5cff1807a706041", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppInfoDashboardFragment.java" }, "signature_type": "Line" }, { "match_only_versions": [ "13" ], "digest": { "threshold": 0.9, "line_hashes": [ "112705362368931843157703567284457663230", "68258790962837260473284204238324467744", "44630758366433177633598371976102027417", "224366868194666250560032747369892760719", "280277607457440511058310285321165101755", "159836426510391728161292279471985314779", "150601296124316320713883977897494177570", "178092060730419468366244066078776035196", "117573019651116632615581598219130345924", "146915442172431217393471251196046264694", "205464233427790341334211757023424854175", "218807161830731649082943071940412687989", "83553372889981830968456725192144577609", "165594505290376154330979187442657262009", "175761473731588973103786992573711695835", "338759981993703737172997794065766165449", "84907333041721354473333028607460083943", "140282990582580621804929367332552350751", "182356994438299968480360761552956221512", "114164350754752682659189495954594186508", "29978942031740770954389379370103446543", "195287288879705274730272641346635744347", "204918753096729676654195470495685526690", "30346129392508397834234721968876532941", "203545958423209234124995765524365290299", "243013044294526502893765637447949104521", "110951987745803951963997662905946786673", "60893376149216157319007051250507293033", "87346161800904085266763036374508424644", "276891331496076362685973457687021859227", "137878602596619492497823454859697325612", "189698584214785832422919381777391399003", "326948017229402127795096783648893102040", "82370479943043140042557735522306379281", "294383517763306984658381149763067730817", "257004871803101810864125903776740343763", "296514038693772353474474419185848637559", "298947474322699111570530154060514464023", "68174660431433577593923785089445631377", "181532607822497705110561384885291834525" ] }, "id": "ASB-A-344865740-24e5a022", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/6179d4fdf3c70f1af6267339c5cff1807a706041", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java" }, "signature_type": "Line" }, { "match_only_versions": [ "13" ], "digest": { "length": 1897.0, "function_hash": "155995534228432682761528503613415247625" }, "id": "ASB-A-344865740-5941c329", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/6179d4fdf3c70f1af6267339c5cff1807a706041", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "onClick" }, "signature_type": "Function" }, { "match_only_versions": [ "13" ], "digest": { "threshold": 0.9, "line_hashes": [ "9399481003374535125345121275085940354", "294782846825316912438415161308547385611", "115726499486318108160499459095953517578", "259720480798476385206580144736555172301", "302507758442475953657123256648302992715", "37063023646447728770280656465581775168", "234164334608443023945574540574006099362", "93419691068928435346575704271376202018", "209553544117873778328282412116710036567", "150582865014150048528214304135991341736" ] }, "id": "ASB-A-344865740-5a4f426b", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/6179d4fdf3c70f1af6267339c5cff1807a706041", "deprecated": false, "signature_version": "v1", "target": { "file": "tests/robotests/src/com/android/settings/testutils/shadow/ShadowUtils.java" }, "signature_type": "Line" }, { "match_only_versions": [ "13" ], "digest": { "length": 230.0, "function_hash": "208301908616652457563376987386281167628" }, "id": "ASB-A-344865740-5db02ce1", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/6179d4fdf3c70f1af6267339c5cff1807a706041", "deprecated": false, "signature_version": "v1", "target": { "file": "tests/robotests/src/com/android/settings/testutils/shadow/ShadowUtils.java", "function": "reset" }, "signature_type": "Function" }, { "match_only_versions": [ "13" ], "digest": { "length": 444.0, "function_hash": "119727149199242579179769882814842545363" }, "id": "ASB-A-344865740-924f1e8c", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/6179d4fdf3c70f1af6267339c5cff1807a706041", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "uninstallPkg" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "287642676071269573600308295533525820474", "65121382242615074620743088670583687233", "104066286513474685936463236339063817773", "335159970490224465195721646526770722585", "278757499976231517536824552528789963622" ] }, "id": "ASB-A-344865740-d31b8b0a", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/6179d4fdf3c70f1af6267339c5cff1807a706041", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/Utils.java" }, "signature_type": "Line" }, { "match_only_versions": [ "13" ], "digest": { "length": 700.0, "function_hash": "331426944273326589189343981861710775528" }, "id": "ASB-A-344865740-f8368dd5", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/6179d4fdf3c70f1af6267339c5cff1807a706041", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "handleDialogClick" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/packages/apps/Settings/+/6179d4fdf3c70f1af6267339c5cff1807a706041" ], "spl": "2025-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "match_only_versions": [ "14" ], "digest": { "threshold": 0.9, "line_hashes": [ "9399481003374535125345121275085940354", "294782846825316912438415161308547385611", "115726499486318108160499459095953517578", "259720480798476385206580144736555172301", "302507758442475953657123256648302992715", "37063023646447728770280656465581775168", "234164334608443023945574540574006099362", "93419691068928435346575704271376202018", "209553544117873778328282412116710036567", "150582865014150048528214304135991341736" ] }, "id": "ASB-A-344865740-674b6f61", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/27315b3b921152b09a6a5d9128664cf30d98a087", "deprecated": false, "signature_version": "v1", "target": { "file": "tests/robotests/src/com/android/settings/testutils/shadow/ShadowUtils.java" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "112705362368931843157703567284457663230", "68258790962837260473284204238324467744", "44630758366433177633598371976102027417", "224366868194666250560032747369892760719", "135267219635872687394336006360781931879", "179548531086012612500405584222480840622", "7771567929700176848702299030062268289", "227212070755007117160686412137130041752", "117573019651116632615581598219130345924", "146915442172431217393471251196046264694", "205464233427790341334211757023424854175", "218807161830731649082943071940412687989", "83553372889981830968456725192144577609", "165594505290376154330979187442657262009", "175761473731588973103786992573711695835", "338759981993703737172997794065766165449", "84907333041721354473333028607460083943", "140282990582580621804929367332552350751", "182356994438299968480360761552956221512", "114164350754752682659189495954594186508", "29978942031740770954389379370103446543", "195287288879705274730272641346635744347", "204918753096729676654195470495685526690", "305073938807019059978980696684374076721", "177616454423932610404178716040708953690", "110951987745803951963997662905946786673", "60893376149216157319007051250507293033", "87346161800904085266763036374508424644", "145327411172926805371904617679425980143", "313376098391986625941282631139619078165", "245691271313292798288951359221865354769", "326948017229402127795096783648893102040", "52817640546117720459533053132382372487", "317340367281856016958728843436254341829", "170309926354209526502134572865149327321", "32140455331141385101740573733702638975", "298575940780774141713304758205276877222" ] }, "id": "ASB-A-344865740-69f9047e", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/27315b3b921152b09a6a5d9128664cf30d98a087", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java" }, "signature_type": "Line" }, { "digest": { "length": 1757.0, "function_hash": "106884653494907361537354837393063229054" }, "id": "ASB-A-344865740-996d9389", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/27315b3b921152b09a6a5d9128664cf30d98a087", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "onClick" }, "signature_type": "Function" }, { "digest": { "length": 397.0, "function_hash": "107213982580019222941238681814487852622" }, "id": "ASB-A-344865740-a32e8e2e", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/27315b3b921152b09a6a5d9128664cf30d98a087", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "uninstallPkg" }, "signature_type": "Function" }, { "digest": { "length": 469.0, "function_hash": "51356195499931145727175712199623383480" }, "id": "ASB-A-344865740-b6739d05", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/27315b3b921152b09a6a5d9128664cf30d98a087", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/applications/appinfo/AppButtonsPreferenceController.java", "function": "handleDialogClick" }, "signature_type": "Function" }, { "match_only_versions": [ "14" ], "digest": { "length": 230.0, "function_hash": "208301908616652457563376987386281167628" }, "id": "ASB-A-344865740-c1e1fb33", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/27315b3b921152b09a6a5d9128664cf30d98a087", "deprecated": false, "signature_version": "v1", "target": { "file": "tests/robotests/src/com/android/settings/testutils/shadow/ShadowUtils.java", "function": "reset" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "287642676071269573600308295533525820474", "65121382242615074620743088670583687233", "104066286513474685936463236339063817773", "119860228180654378260216550087469548662", "149935012270030347163904394744107094237" ] }, "id": "ASB-A-344865740-cc2e160d", "source": "https://googleplex-android.googlesource.com/platform/packages/apps/Settings/+/27315b3b921152b09a6a5d9128664cf30d98a087", "deprecated": false, "signature_version": "v1", "target": { "file": "src/com/android/settings/Utils.java" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/platform/packages/apps/Settings/+/27315b3b921152b09a6a5d9128664cf30d98a087" ], "spl": "2025-05-01", "severity": "High", "types": [ "EoP" ] }