In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "signature_type": "Function", "deprecated": false, "digest": { "length": 807.0, "function_hash": "339010641319676284596917724000588051500" }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java", "function": "onWalletCardsRetrieved" }, "id": "ASB-A-366403307-2b7f6a59", "source": "https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "48271866020983402741317697191927262300", "324720192200432593218778911273366139928", "184274619356808351882945330993179679587", "127201025683753278655545441715991278217", "300253045995943859909040907196640039614", "280832611599851557092847522639492618499", "196290242042722160805466346397507596848", "59779386922115477265695659846766275892", "30596101698174053649423894352670996017", "247701998955975149565204374510801855559", "236258009288467572065414099264846251508" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java" }, "id": "ASB-A-366403307-441527f8", "source": "https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "272154888241610003550890006148090413574", "50331742103249212278432064195301275261", "289129983721657027228421220049785405861", "278508063703508476458772447971251926863", "280695784732386592284871366412088916160", "200929768696889264497157033762169044294", "327143209346939640461697995229268842021", "204951814737961851763192749677397359606", "200405687505325832570341213920229487292", "95126765697886247521411308199037378046" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java" }, "id": "ASB-A-366403307-4fb2c7cb", "source": "https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0" }, { "signature_type": "Function", "deprecated": false, "digest": { "length": 358.0, "function_hash": "153100650039487584088342375961007218414" }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java", "function": "QAWalletCardViewInfo" }, "id": "ASB-A-366403307-784de01b", "source": "https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "140596199919787614286830620172402916923", "35323485728177646444664352266437140545", "83699810367459881137262713309360686329" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java" }, "id": "ASB-A-366403307-d0d6b7d3", "source": "https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0" } ], "types": [ "ID" ], "severity": "High", "spl": "2025-09-01", "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0", "https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b" ] }
{ "vanir_signatures": [ { "signature_type": "Function", "deprecated": false, "digest": { "length": 358.0, "function_hash": "153100650039487584088342375961007218414" }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java", "function": "QAWalletCardViewInfo" }, "id": "ASB-A-366403307-246069a5", "source": "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "272154888241610003550890006148090413574", "50331742103249212278432064195301275261", "289129983721657027228421220049785405861", "278508063703508476458772447971251926863", "280695784732386592284871366412088916160", "200929768696889264497157033762169044294", "327143209346939640461697995229268842021", "204951814737961851763192749677397359606", "200405687505325832570341213920229487292", "95126765697886247521411308199037378046" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java" }, "id": "ASB-A-366403307-26238203", "source": "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094" }, { "match_only_versions": [ "15" ], "deprecated": false, "target": { "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java" }, "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094", "digest": { "threshold": 0.9, "line_hashes": [ "243125708234673827407269344508843347613", "87324363108848266469144704522745173467", "167811477205477820653194076682414448279", "175257578454813697542332648837395173089", "102505483718210097181282553982684333128", "256324903959662513127810403439769396165", "242218992384684158717428879574442610957", "194747599152889748736500518830054257496", "174280928911208833448572281684795544279", "336450232233143877711590438963096457488", "315500201450994050792319752153633098851", "62820081207557501096082406881310321388", "188362098062400418708726085127252472985" ] }, "signature_version": "v1", "id": "ASB-A-366403307-32c98e58" }, { "match_only_versions": [ "15" ], "deprecated": false, "target": { "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java", "function": "onWalletCardsRetrieved" }, "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094", "digest": { "length": 1061.0, "function_hash": "56916847383708864714240830285584848399" }, "signature_version": "v1", "id": "ASB-A-366403307-9c51dd01" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "140596199919787614286830620172402916923", "35323485728177646444664352266437140545", "83699810367459881137262713309360686329" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java" }, "id": "ASB-A-366403307-fae48385", "source": "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094" } ], "types": [ "ID" ], "severity": "High", "spl": "2025-09-01", "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094" ] }
{ "vanir_signatures": [ { "signature_type": "Function", "deprecated": false, "digest": { "length": 794.0, "function_hash": "214865920675456868833784104343276876229" }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java", "function": "onWalletCardsRetrieved" }, "id": "ASB-A-366403307-20734e2b", "source": "https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "272154888241610003550890006148090413574", "50331742103249212278432064195301275261", "289129983721657027228421220049785405861", "278508063703508476458772447971251926863", "280695784732386592284871366412088916160", "200929768696889264497157033762169044294", "327143209346939640461697995229268842021", "204951814737961851763192749677397359606", "200405687505325832570341213920229487292", "95126765697886247521411308199037378046" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java" }, "id": "ASB-A-366403307-208c1fe5", "source": "https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "140596199919787614286830620172402916923", "35323485728177646444664352266437140545", "83699810367459881137262713309360686329" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java" }, "id": "ASB-A-366403307-8cd24e0c", "source": "https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "48271866020983402741317697191927262300", "258154477222024538161942687079640623010", "293474134540468567119316859037077150681", "127201025683753278655545441715991278217", "300253045995943859909040907196640039614", "280832611599851557092847522639492618499", "196290242042722160805466346397507596848", "59779386922115477265695659846766275892", "30596101698174053649423894352670996017", "247701998955975149565204374510801855559", "236258009288467572065414099264846251508" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java" }, "id": "ASB-A-366403307-c97fc6bf", "source": "https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8" }, { "signature_type": "Function", "deprecated": false, "digest": { "length": 358.0, "function_hash": "153100650039487584088342375961007218414" }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java", "function": "QAWalletCardViewInfo" }, "id": "ASB-A-366403307-e97b5aff", "source": "https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68" } ], "types": [ "ID" ], "severity": "High", "spl": "2025-09-01", "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68", "https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8" ] }
{ "vanir_signatures": [ { "signature_type": "Function", "deprecated": false, "digest": { "length": 794.0, "function_hash": "214865920675456868833784104343276876229" }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java", "function": "onWalletCardsRetrieved" }, "id": "ASB-A-366403307-55b721f2", "source": "https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "272154888241610003550890006148090413574", "50331742103249212278432064195301275261", "289129983721657027228421220049785405861", "278508063703508476458772447971251926863", "280695784732386592284871366412088916160", "200929768696889264497157033762169044294", "327143209346939640461697995229268842021", "204951814737961851763192749677397359606", "200405687505325832570341213920229487292", "95126765697886247521411308199037378046" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java" }, "id": "ASB-A-366403307-8d8979e8", "source": "https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "140596199919787614286830620172402916923", "35323485728177646444664352266437140545", "83699810367459881137262713309360686329" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java" }, "id": "ASB-A-366403307-9a81a609", "source": "https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394" }, { "signature_type": "Function", "deprecated": false, "digest": { "length": 358.0, "function_hash": "153100650039487584088342375961007218414" }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java", "function": "QAWalletCardViewInfo" }, "id": "ASB-A-366403307-b5f2f687", "source": "https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394" }, { "signature_type": "Line", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "48271866020983402741317697191927262300", "258154477222024538161942687079640623010", "293474134540468567119316859037077150681", "127201025683753278655545441715991278217", "300253045995943859909040907196640039614", "280832611599851557092847522639492618499", "196290242042722160805466346397507596848", "59779386922115477265695659846766275892", "30596101698174053649423894352670996017", "247701998955975149565204374510801855559", "236258009288467572065414099264846251508" ] }, "signature_version": "v1", "target": { "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java" }, "id": "ASB-A-366403307-e25de802", "source": "https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211" } ], "types": [ "ID" ], "severity": "High", "spl": "2025-09-01", "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394", "https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211" ] }