ASB-A-366403307

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-366403307.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-366403307
Aliases
Published
2025-09-01T00:00:00Z
Modified
2026-04-17T15:55:28.020024Z
Summary
[none]
Details

In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-next:0
Fixed
16-next:2025-09-01

Affected versions

Other
16-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 807.0,
                "function_hash": "339010641319676284596917724000588051500"
            },
            "id": "ASB-A-366403307-2b7f6a59",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b",
            "target": {
                "function": "onWalletCardsRetrieved",
                "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "48271866020983402741317697191927262300",
                    "324720192200432593218778911273366139928",
                    "184274619356808351882945330993179679587",
                    "127201025683753278655545441715991278217",
                    "300253045995943859909040907196640039614",
                    "280832611599851557092847522639492618499",
                    "196290242042722160805466346397507596848",
                    "59779386922115477265695659846766275892",
                    "30596101698174053649423894352670996017",
                    "247701998955975149565204374510801855559",
                    "236258009288467572065414099264846251508"
                ]
            },
            "id": "ASB-A-366403307-441527f8",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "272154888241610003550890006148090413574",
                    "50331742103249212278432064195301275261",
                    "289129983721657027228421220049785405861",
                    "278508063703508476458772447971251926863",
                    "280695784732386592284871366412088916160",
                    "200929768696889264497157033762169044294",
                    "327143209346939640461697995229268842021",
                    "204951814737961851763192749677397359606",
                    "200405687505325832570341213920229487292",
                    "95126765697886247521411308199037378046"
                ]
            },
            "id": "ASB-A-366403307-4fb2c7cb",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"
            }
        },
        {
            "digest": {
                "length": 358.0,
                "function_hash": "153100650039487584088342375961007218414"
            },
            "id": "ASB-A-366403307-784de01b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0",
            "target": {
                "function": "QAWalletCardViewInfo",
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "140596199919787614286830620172402916923",
                    "35323485728177646444664352266437140545",
                    "83699810367459881137262713309360686329"
                ]
            },
            "id": "ASB-A-366403307-d0d6b7d3",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0",
        "https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 358.0,
                "function_hash": "153100650039487584088342375961007218414"
            },
            "id": "ASB-A-366403307-246069a5",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094",
            "target": {
                "function": "QAWalletCardViewInfo",
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "272154888241610003550890006148090413574",
                    "50331742103249212278432064195301275261",
                    "289129983721657027228421220049785405861",
                    "278508063703508476458772447971251926863",
                    "280695784732386592284871366412088916160",
                    "200929768696889264497157033762169044294",
                    "327143209346939640461697995229268842021",
                    "204951814737961851763192749677397359606",
                    "200405687505325832570341213920229487292",
                    "95126765697886247521411308199037378046"
                ]
            },
            "id": "ASB-A-366403307-26238203",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "243125708234673827407269344508843347613",
                    "87324363108848266469144704522745173467",
                    "167811477205477820653194076682414448279",
                    "175257578454813697542332648837395173089",
                    "102505483718210097181282553982684333128",
                    "256324903959662513127810403439769396165",
                    "242218992384684158717428879574442610957",
                    "194747599152889748736500518830054257496",
                    "174280928911208833448572281684795544279",
                    "336450232233143877711590438963096457488",
                    "315500201450994050792319752153633098851",
                    "62820081207557501096082406881310321388",
                    "188362098062400418708726085127252472985"
                ]
            },
            "id": "ASB-A-366403307-32c98e58",
            "deprecated": false,
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"
            },
            "signature_type": "Line",
            "match_only_versions": [
                "15"
            ],
            "source": "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094",
            "signature_version": "v1"
        },
        {
            "digest": {
                "length": 1061.0,
                "function_hash": "56916847383708864714240830285584848399"
            },
            "id": "ASB-A-366403307-9c51dd01",
            "deprecated": false,
            "target": {
                "function": "onWalletCardsRetrieved",
                "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"
            },
            "signature_type": "Function",
            "match_only_versions": [
                "15"
            ],
            "source": "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094",
            "signature_version": "v1"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "140596199919787614286830620172402916923",
                    "35323485728177646444664352266437140545",
                    "83699810367459881137262713309360686329"
                ]
            },
            "id": "ASB-A-366403307-fae48385",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-09-01

Affected versions

Other
13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 794.0,
                "function_hash": "214865920675456868833784104343276876229"
            },
            "id": "ASB-A-366403307-20734e2b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8",
            "target": {
                "function": "onWalletCardsRetrieved",
                "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "272154888241610003550890006148090413574",
                    "50331742103249212278432064195301275261",
                    "289129983721657027228421220049785405861",
                    "278508063703508476458772447971251926863",
                    "280695784732386592284871366412088916160",
                    "200929768696889264497157033762169044294",
                    "327143209346939640461697995229268842021",
                    "204951814737961851763192749677397359606",
                    "200405687505325832570341213920229487292",
                    "95126765697886247521411308199037378046"
                ]
            },
            "id": "ASB-A-366403307-208c1fe5",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "140596199919787614286830620172402916923",
                    "35323485728177646444664352266437140545",
                    "83699810367459881137262713309360686329"
                ]
            },
            "id": "ASB-A-366403307-8cd24e0c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "48271866020983402741317697191927262300",
                    "258154477222024538161942687079640623010",
                    "293474134540468567119316859037077150681",
                    "127201025683753278655545441715991278217",
                    "300253045995943859909040907196640039614",
                    "280832611599851557092847522639492618499",
                    "196290242042722160805466346397507596848",
                    "59779386922115477265695659846766275892",
                    "30596101698174053649423894352670996017",
                    "247701998955975149565204374510801855559",
                    "236258009288467572065414099264846251508"
                ]
            },
            "id": "ASB-A-366403307-c97fc6bf",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"
            }
        },
        {
            "digest": {
                "length": 358.0,
                "function_hash": "153100650039487584088342375961007218414"
            },
            "id": "ASB-A-366403307-e97b5aff",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68",
            "target": {
                "function": "QAWalletCardViewInfo",
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68",
        "https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-09-01

Affected versions

Other
14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 794.0,
                "function_hash": "214865920675456868833784104343276876229"
            },
            "id": "ASB-A-366403307-55b721f2",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211",
            "target": {
                "function": "onWalletCardsRetrieved",
                "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "272154888241610003550890006148090413574",
                    "50331742103249212278432064195301275261",
                    "289129983721657027228421220049785405861",
                    "278508063703508476458772447971251926863",
                    "280695784732386592284871366412088916160",
                    "200929768696889264497157033762169044294",
                    "327143209346939640461697995229268842021",
                    "204951814737961851763192749677397359606",
                    "200405687505325832570341213920229487292",
                    "95126765697886247521411308199037378046"
                ]
            },
            "id": "ASB-A-366403307-8d8979e8",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "140596199919787614286830620172402916923",
                    "35323485728177646444664352266437140545",
                    "83699810367459881137262713309360686329"
                ]
            },
            "id": "ASB-A-366403307-9a81a609",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"
            }
        },
        {
            "digest": {
                "length": 358.0,
                "function_hash": "153100650039487584088342375961007218414"
            },
            "id": "ASB-A-366403307-b5f2f687",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394",
            "target": {
                "function": "QAWalletCardViewInfo",
                "file": "packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "48271866020983402741317697191927262300",
                    "258154477222024538161942687079640623010",
                    "293474134540468567119316859037077150681",
                    "127201025683753278655545441715991278217",
                    "300253045995943859909040907196640039614",
                    "280832611599851557092847522639492618499",
                    "196290242042722160805466346397507596848",
                    "59779386922115477265695659846766275892",
                    "30596101698174053649423894352670996017",
                    "247701998955975149565204374510801855559",
                    "236258009288467572065414099264846251508"
                ]
            },
            "id": "ASB-A-366403307-e25de802",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394",
        "https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-09-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"