ASB-A-365738306

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-365738306.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-365738306
Aliases
Published
2025-01-01T00:00:00Z
Modified
2026-04-21T15:25:42.831358Z
Summary
[none]
Details

In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2025-01-01

Affected versions

Other
15-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "245706110952212737133143465215893512596",
                    "8441015199286482723336096750019537574",
                    "2203913801863013953610752326245761403",
                    "168375376327039914811458805262559478873",
                    "312734769563607363589114740525208817475",
                    "3544166106377321621015066667677101117",
                    "122966738851768452280672697718876528501",
                    "120617789216700098775887114430797222613",
                    "221077498712494506088861152745117288869",
                    "334665111517373998642314040845320111876",
                    "201576591833870305689470499159667889194",
                    "298517652061270037363155204858969091800",
                    "61803440693266216200337439482150002281",
                    "87053992900134142751070947667173104721",
                    "190583663821423385762165115122030327892",
                    "125850764841171638689555196333133084999",
                    "155670773850368399915527063221630377781",
                    "250238567097922551481524748322810142350",
                    "31221265380436497012317990031515028462",
                    "196667568110689903248999351757630874598"
                ]
            },
            "id": "ASB-A-365738306-2767a15f",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/234c5e843ca427b1dd47e91e3969f3309dd787bf",
            "target": {
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        },
        {
            "digest": {
                "length": 889.0,
                "function_hash": "264098323083350367885933473336084744836"
            },
            "id": "ASB-A-365738306-cedaf568",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/234c5e843ca427b1dd47e91e3969f3309dd787bf",
            "target": {
                "function": "reload",
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/234c5e843ca427b1dd47e91e3969f3309dd787bf"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-01-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-365738306.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2025-01-01

Affected versions

Other
12

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 889.0,
                "function_hash": "264098323083350367885933473336084744836"
            },
            "id": "ASB-A-365738306-745a2e79",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815",
            "target": {
                "function": "reload",
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "245706110952212737133143465215893512596",
                    "8441015199286482723336096750019537574",
                    "2203913801863013953610752326245761403",
                    "168375376327039914811458805262559478873",
                    "312734769563607363589114740525208817475",
                    "3544166106377321621015066667677101117",
                    "122966738851768452280672697718876528501",
                    "120617789216700098775887114430797222613",
                    "221077498712494506088861152745117288869",
                    "334665111517373998642314040845320111876",
                    "201576591833870305689470499159667889194",
                    "298517652061270037363155204858969091800",
                    "61803440693266216200337439482150002281",
                    "87053992900134142751070947667173104721",
                    "190583663821423385762165115122030327892",
                    "125850764841171638689555196333133084999",
                    "155670773850368399915527063221630377781",
                    "250238567097922551481524748322810142350",
                    "31221265380436497012317990031515028462",
                    "196667568110689903248999351757630874598"
                ]
            },
            "id": "ASB-A-365738306-7c884d9a",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815",
            "target": {
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-01-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-365738306.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2025-01-01

Affected versions

Other
12L

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 889.0,
                "function_hash": "264098323083350367885933473336084744836"
            },
            "id": "ASB-A-365738306-15bd7590",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815",
            "target": {
                "function": "reload",
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "245706110952212737133143465215893512596",
                    "8441015199286482723336096750019537574",
                    "2203913801863013953610752326245761403",
                    "168375376327039914811458805262559478873",
                    "312734769563607363589114740525208817475",
                    "3544166106377321621015066667677101117",
                    "122966738851768452280672697718876528501",
                    "120617789216700098775887114430797222613",
                    "221077498712494506088861152745117288869",
                    "334665111517373998642314040845320111876",
                    "201576591833870305689470499159667889194",
                    "298517652061270037363155204858969091800",
                    "61803440693266216200337439482150002281",
                    "87053992900134142751070947667173104721",
                    "190583663821423385762165115122030327892",
                    "125850764841171638689555196333133084999",
                    "155670773850368399915527063221630377781",
                    "250238567097922551481524748322810142350",
                    "31221265380436497012317990031515028462",
                    "196667568110689903248999351757630874598"
                ]
            },
            "id": "ASB-A-365738306-7e35a1f6",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815",
            "target": {
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-01-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-365738306.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-01-01

Affected versions

Other
15

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 889.0,
                "function_hash": "264098323083350367885933473336084744836"
            },
            "id": "ASB-A-365738306-d31a4043",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/3c44dd35fd99b87e8754a2c67f29b221ef3f69a5",
            "target": {
                "function": "reload",
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "245706110952212737133143465215893512596",
                    "8441015199286482723336096750019537574",
                    "2203913801863013953610752326245761403",
                    "168375376327039914811458805262559478873",
                    "312734769563607363589114740525208817475",
                    "3544166106377321621015066667677101117",
                    "122966738851768452280672697718876528501",
                    "120617789216700098775887114430797222613",
                    "221077498712494506088861152745117288869",
                    "334665111517373998642314040845320111876",
                    "201576591833870305689470499159667889194",
                    "298517652061270037363155204858969091800",
                    "61803440693266216200337439482150002281",
                    "87053992900134142751070947667173104721",
                    "190583663821423385762165115122030327892",
                    "125850764841171638689555196333133084999",
                    "155670773850368399915527063221630377781",
                    "250238567097922551481524748322810142350",
                    "31221265380436497012317990031515028462",
                    "196667568110689903248999351757630874598"
                ]
            },
            "id": "ASB-A-365738306-de76d7a8",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/3c44dd35fd99b87e8754a2c67f29b221ef3f69a5",
            "target": {
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/3c44dd35fd99b87e8754a2c67f29b221ef3f69a5"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-01-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-365738306.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-01-01

Affected versions

Other
13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "245706110952212737133143465215893512596",
                    "8441015199286482723336096750019537574",
                    "2203913801863013953610752326245761403",
                    "168375376327039914811458805262559478873",
                    "312734769563607363589114740525208817475",
                    "3544166106377321621015066667677101117",
                    "122966738851768452280672697718876528501",
                    "120617789216700098775887114430797222613",
                    "221077498712494506088861152745117288869",
                    "334665111517373998642314040845320111876",
                    "201576591833870305689470499159667889194",
                    "298517652061270037363155204858969091800",
                    "61803440693266216200337439482150002281",
                    "87053992900134142751070947667173104721",
                    "190583663821423385762165115122030327892",
                    "125850764841171638689555196333133084999",
                    "155670773850368399915527063221630377781",
                    "250238567097922551481524748322810142350",
                    "31221265380436497012317990031515028462",
                    "196667568110689903248999351757630874598"
                ]
            },
            "id": "ASB-A-365738306-b2133486",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815",
            "target": {
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        },
        {
            "digest": {
                "length": 889.0,
                "function_hash": "264098323083350367885933473336084744836"
            },
            "id": "ASB-A-365738306-fb2c09cc",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815",
            "target": {
                "function": "reload",
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-01-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-365738306.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-01-01

Affected versions

Other
14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 889.0,
                "function_hash": "264098323083350367885933473336084744836"
            },
            "id": "ASB-A-365738306-23f02976",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815",
            "target": {
                "function": "reload",
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "245706110952212737133143465215893512596",
                    "8441015199286482723336096750019537574",
                    "2203913801863013953610752326245761403",
                    "168375376327039914811458805262559478873",
                    "312734769563607363589114740525208817475",
                    "3544166106377321621015066667677101117",
                    "122966738851768452280672697718876528501",
                    "120617789216700098775887114430797222613",
                    "221077498712494506088861152745117288869",
                    "334665111517373998642314040845320111876",
                    "201576591833870305689470499159667889194",
                    "298517652061270037363155204858969091800",
                    "61803440693266216200337439482150002281",
                    "87053992900134142751070947667173104721",
                    "190583663821423385762165115122030327892",
                    "125850764841171638689555196333133084999",
                    "155670773850368399915527063221630377781",
                    "250238567097922551481524748322810142350",
                    "31221265380436497012317990031515028462",
                    "196667568110689903248999351757630874598"
                ]
            },
            "id": "ASB-A-365738306-504ab2be",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815",
            "target": {
                "file": "packages/SettingsLib/src/com/android/settingslib/applications/ServiceListing.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/e81fa0c19c07a5b6509c3f844b69847a96c7a815"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-01-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-365738306.json"