ASB-A-355411348

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-355411348.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-355411348
Aliases
  • A-355411348
  • CVE-2024-49720
Published
2025-04-01T00:00:00Z
Modified
2026-09-30T15:38:47Z
Summary
[none]
Details

In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/modules/Permission

Package

Name
platform/packages/modules/Permission

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2025-04-01

Affected versions

Other
15-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/modules/Permission/+/7e1f7097f4a6895358bf1472e6d26c5198d00c11"
    ],
    "severity":  "High",
    "spl":  "2025-04-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "141619514520788998866018257770516533168",
                "length":  1623
            },
            "id":  "ASB-A-355411348-029260a1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/7e1f7097f4a6895358bf1472e6d26c5198d00c11",
            "target":  {
                "file":  "PermissionController/role-controller/java/com/android/role/controller/model/Permissions.java",
                "function":  "grantSingleAsUser"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "76255136349812465480493960808170142056",
                "length":  479
            },
            "id":  "ASB-A-355411348-0400a4c9",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/7e1f7097f4a6895358bf1472e6d26c5198d00c11",
            "target":  {
                "file":  "PermissionController/role-controller/java/com/android/role/controller/model/Permissions.java",
                "function":  "isPermissionFixedAsUser"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "276735937301336299084427692564300228595",
                    "322989708559293431295789412320417604874",
                    "213152137624597320215320511324637273908",
                    "25564878861477671112121177766071587689",
                    "262738313968617711989477123477272251866",
                    "230377411451346628928423402557176974417",
                    "29739341363408189168750249940983237131",
                    "61610753031451740195870485119474286831"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-355411348-4adc72b4",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/7e1f7097f4a6895358bf1472e6d26c5198d00c11",
            "target":  {
                "file":  "PermissionController/role-controller/java/com/android/role/controller/model/Permissions.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-355411348.json"
platform/packages/modules/Permission

Package

Name
platform/packages/modules/Permission

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-04-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/modules/Permission/+/15b296865950d19076a065d8b293d28eae4a3af2"
    ],
    "severity":  "High",
    "spl":  "2025-04-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "76255136349812465480493960808170142056",
                "length":  479
            },
            "id":  "ASB-A-355411348-48684712",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/15b296865950d19076a065d8b293d28eae4a3af2",
            "target":  {
                "file":  "PermissionController/role-controller/java/com/android/role/controller/model/Permissions.java",
                "function":  "isPermissionFixedAsUser"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "141619514520788998866018257770516533168",
                "length":  1623
            },
            "id":  "ASB-A-355411348-c1f1bf73",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/15b296865950d19076a065d8b293d28eae4a3af2",
            "target":  {
                "file":  "PermissionController/role-controller/java/com/android/role/controller/model/Permissions.java",
                "function":  "grantSingleAsUser"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "276735937301336299084427692564300228595",
                    "322989708559293431295789412320417604874",
                    "213152137624597320215320511324637273908",
                    "25564878861477671112121177766071587689",
                    "262738313968617711989477123477272251866",
                    "230377411451346628928423402557176974417",
                    "29739341363408189168750249940983237131",
                    "61610753031451740195870485119474286831"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-355411348-c7359ae3",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/15b296865950d19076a065d8b293d28eae4a3af2",
            "target":  {
                "file":  "PermissionController/role-controller/java/com/android/role/controller/model/Permissions.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-355411348.json"
platform/packages/modules/Permission

Package

Name
platform/packages/modules/Permission

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-04-01

Affected versions

Other
13

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/modules/Permission/+/71e09e5ad12d02b3129c7a5ce16f6de734fdd0da"
    ],
    "severity":  "High",
    "spl":  "2025-04-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "157246517829887779856954165638462687008",
                "length":  447
            },
            "id":  "ASB-A-355411348-0dd3617f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/71e09e5ad12d02b3129c7a5ce16f6de734fdd0da",
            "target":  {
                "file":  "PermissionController/src/com/android/permissioncontroller/role/model/Permissions.java",
                "function":  "isPermissionFixed"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "326735615273034153298670880778922269486",
                "length":  1551
            },
            "id":  "ASB-A-355411348-4218609b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/71e09e5ad12d02b3129c7a5ce16f6de734fdd0da",
            "target":  {
                "file":  "PermissionController/src/com/android/permissioncontroller/role/model/Permissions.java",
                "function":  "grantSingle"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "276735937301336299084427692564300228595",
                    "322989708559293431295789412320417604874",
                    "213152137624597320215320511324637273908",
                    "71428023426661599606021655487902426771",
                    "262738313968617711989477123477272251866",
                    "230377411451346628928423402557176974417",
                    "29739341363408189168750249940983237131",
                    "61610753031451740195870485119474286831"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-355411348-581cb514",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/71e09e5ad12d02b3129c7a5ce16f6de734fdd0da",
            "target":  {
                "file":  "PermissionController/src/com/android/permissioncontroller/role/model/Permissions.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-355411348.json"
platform/packages/modules/Permission

Package

Name
platform/packages/modules/Permission

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-04-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/modules/Permission/+/04e3f30193b80d0fdb7f68cbe0161dc985aa7557"
    ],
    "severity":  "High",
    "spl":  "2025-04-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "276735937301336299084427692564300228595",
                    "322989708559293431295789412320417604874",
                    "213152137624597320215320511324637273908",
                    "71428023426661599606021655487902426771",
                    "262738313968617711989477123477272251866",
                    "230377411451346628928423402557176974417",
                    "29739341363408189168750249940983237131",
                    "61610753031451740195870485119474286831"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-355411348-1c006cfe",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/04e3f30193b80d0fdb7f68cbe0161dc985aa7557",
            "target":  {
                "file":  "PermissionController/role-controller/java/com/android/role/controller/model/Permissions.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "326735615273034153298670880778922269486",
                "length":  1551
            },
            "id":  "ASB-A-355411348-82db1744",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/04e3f30193b80d0fdb7f68cbe0161dc985aa7557",
            "target":  {
                "file":  "PermissionController/role-controller/java/com/android/role/controller/model/Permissions.java",
                "function":  "grantSingle"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "157246517829887779856954165638462687008",
                "length":  447
            },
            "id":  "ASB-A-355411348-9278377f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Permission/+/04e3f30193b80d0fdb7f68cbe0161dc985aa7557",
            "target":  {
                "file":  "PermissionController/role-controller/java/com/android/role/controller/model/Permissions.java",
                "function":  "isPermissionFixed"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-355411348.json"