ASB-A-356604577

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-356604577.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-356604577
Aliases
  • A-356604577
  • CVE-2026-28621
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:16Z
Summary
[none]
Details

In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/services/Telecomm

Package

Name
platform/packages/services/Telecomm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/services/Telecomm/+/294327c63301a330c87efb79e741e4f505f78312"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "113976216836445985383589168636576178479",
                    "41283135156377240570101548926100466880",
                    "159778806540973070440312228125618727696",
                    "38568909214429048247959839473950790826"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-356604577-8749f240",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/294327c63301a330c87efb79e741e4f505f78312",
            "target":  {
                "file":  "src/com/android/server/telecom/Call.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "61124084889651645756075522482970978806",
                    "131324571745533276400711737850610033290",
                    "184340636346078831982912569665948850228",
                    "251038086907942866930897090791675501008",
                    "164464618322118610936381152227601559020",
                    "148761371253026793947396279386510803113",
                    "150727748171029986373742904342704738540",
                    "1322793698115860113759040962462644032",
                    "66302996087778977184724244774888395407",
                    "81153556895043228420075202822034836507",
                    "74677701199552462174083364462205469758"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-356604577-b9d146f2",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/294327c63301a330c87efb79e741e4f505f78312",
            "target":  {
                "file":  "src/com/android/server/telecom/RingtoneFactory.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "16566564100253720178355067189688353778",
                "length":  1436
            },
            "id":  "ASB-A-356604577-c5c1d7e4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/294327c63301a330c87efb79e741e4f505f78312",
            "target":  {
                "file":  "src/com/android/server/telecom/RingtoneFactory.java",
                "function":  "getRingtone"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-356604577.json"
platform/packages/services/Telecomm

Package

Name
platform/packages/services/Telecomm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/services/Telecomm/+/f2ef458fc4669e71069616d54fc5d39f50f5daf9"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "16566564100253720178355067189688353778",
                "length":  1436
            },
            "id":  "ASB-A-356604577-3b1e1ee4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/f2ef458fc4669e71069616d54fc5d39f50f5daf9",
            "target":  {
                "file":  "src/com/android/server/telecom/RingtoneFactory.java",
                "function":  "getRingtone"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "61124084889651645756075522482970978806",
                    "131324571745533276400711737850610033290",
                    "184340636346078831982912569665948850228",
                    "251038086907942866930897090791675501008",
                    "164464618322118610936381152227601559020",
                    "148761371253026793947396279386510803113",
                    "150727748171029986373742904342704738540",
                    "1322793698115860113759040962462644032",
                    "66302996087778977184724244774888395407",
                    "81153556895043228420075202822034836507",
                    "74677701199552462174083364462205469758"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-356604577-bb221c15",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/f2ef458fc4669e71069616d54fc5d39f50f5daf9",
            "target":  {
                "file":  "src/com/android/server/telecom/RingtoneFactory.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "113976216836445985383589168636576178479",
                    "41283135156377240570101548926100466880",
                    "159778806540973070440312228125618727696",
                    "38568909214429048247959839473950790826"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-356604577-d0351586",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/f2ef458fc4669e71069616d54fc5d39f50f5daf9",
            "target":  {
                "file":  "src/com/android/server/telecom/Call.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-356604577.json"
platform/packages/services/Telecomm

Package

Name
platform/packages/services/Telecomm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/services/Telecomm/+/81f00f98757e0de71d686e3651c6fa8540b254fd"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "113976216836445985383589168636576178479",
                    "41283135156377240570101548926100466880",
                    "159778806540973070440312228125618727696",
                    "38568909214429048247959839473950790826"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-356604577-0dd4babc",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/81f00f98757e0de71d686e3651c6fa8540b254fd",
            "target":  {
                "file":  "src/com/android/server/telecom/Call.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "61124084889651645756075522482970978806",
                    "131324571745533276400711737850610033290",
                    "184340636346078831982912569665948850228",
                    "251038086907942866930897090791675501008",
                    "164464618322118610936381152227601559020",
                    "148761371253026793947396279386510803113",
                    "150727748171029986373742904342704738540",
                    "1322793698115860113759040962462644032",
                    "66302996087778977184724244774888395407",
                    "81153556895043228420075202822034836507",
                    "74677701199552462174083364462205469758"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-356604577-508ea479",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/81f00f98757e0de71d686e3651c6fa8540b254fd",
            "target":  {
                "file":  "src/com/android/server/telecom/RingtoneFactory.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "16566564100253720178355067189688353778",
                "length":  1436
            },
            "id":  "ASB-A-356604577-6d3e5630",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/81f00f98757e0de71d686e3651c6fa8540b254fd",
            "target":  {
                "file":  "src/com/android/server/telecom/RingtoneFactory.java",
                "function":  "getRingtone"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-356604577.json"
platform/packages/services/Telecomm

Package

Name
platform/packages/services/Telecomm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/services/Telecomm/+/166b1f970e0039f67ae7fb9a9d0ff0f09de60f30"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "72223936779122721738332034670374120105",
                "length":  1282
            },
            "id":  "ASB-A-356604577-68e50248",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/166b1f970e0039f67ae7fb9a9d0ff0f09de60f30",
            "target":  {
                "file":  "src/com/android/server/telecom/RingtoneFactory.java",
                "function":  "getRingtone"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "113976216836445985383589168636576178479",
                    "41283135156377240570101548926100466880",
                    "159778806540973070440312228125618727696",
                    "38568909214429048247959839473950790826"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-356604577-72f98126",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/166b1f970e0039f67ae7fb9a9d0ff0f09de60f30",
            "target":  {
                "file":  "src/com/android/server/telecom/Call.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "61124084889651645756075522482970978806",
                    "131324571745533276400711737850610033290",
                    "184340636346078831982912569665948850228",
                    "251038086907942866930897090791675501008",
                    "164464618322118610936381152227601559020",
                    "148761371253026793947396279386510803113",
                    "150727748171029986373742904342704738540",
                    "1322793698115860113759040962462644032",
                    "38262275924217211793648488323911772105",
                    "139070617725050376901304850616928749865",
                    "74677701199552462174083364462205469758"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-356604577-e3955e9c",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/services/Telecomm/+/166b1f970e0039f67ae7fb9a9d0ff0f09de60f30",
            "target":  {
                "file":  "src/com/android/server/telecom/RingtoneFactory.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-356604577.json"