ASB-A-366405211

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-366405211.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-366405211
Aliases
Published
2026-03-01T00:00:00Z
Modified
2026-03-20T16:18:45.904869Z
Summary
[none]
Details

In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps without knowing the LSKF due to a missing permission check. This could lead to local information disclosure where the extent of interaction and impact is app-dependent with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2-next:0
Fixed
16-qpr2-next:2026-03-01

Affected versions

Other
16-qpr2-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityTaskManagerService.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/575845147cb48d71893f12665bae2e8892aa7e06",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "312613614161868944866091854443080408141",
                    "122437842048045772090835283628580660228",
                    "314646606167297330119270266462598785381"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-213504bc",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/policy/keyguard/KeyguardServiceDelegate.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/575845147cb48d71893f12665bae2e8892aa7e06",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "257558208854102221961475193619356994313",
                    "266982570076036454971945458857341223012",
                    "110744525169120606714442510787246584052",
                    "39049326366674602475728549990412471899",
                    "104052523671044076921826450147227892836"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-273816f8",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "onBootCompleted"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/575845147cb48d71893f12665bae2e8892aa7e06",
            "deprecated": false,
            "digest": {
                "function_hash": "155114677624689918567865373055519737249",
                "length": 304.0
            },
            "id": "ASB-A-366405211-30113806",
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/policy/keyguard/KeyguardServiceDelegate.java",
                "function": "onServiceDisconnected"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/575845147cb48d71893f12665bae2e8892aa7e06",
            "deprecated": false,
            "digest": {
                "function_hash": "165224352031574091486954619054521859011",
                "length": 309.0
            },
            "id": "ASB-A-366405211-8a65fcad",
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/575845147cb48d71893f12665bae2e8892aa7e06",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "188740867167127335915569500118973790322",
                    "84330890575215797028099298130137947054",
                    "293188552758682695276487170529963563504",
                    "31486765646964059850758010433622056728",
                    "329174108340331449967704107737379573499",
                    "314471725614292304082539536551500932481",
                    "267173757964726372141966533857611426209",
                    "78302100577507850275493820812633577143",
                    "311941396213254451863721356851040172550"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-99cc0c73",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/LockTaskController.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/575845147cb48d71893f12665bae2e8892aa7e06",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "59919574519062909568518435099235531208",
                    "20050232685143592671371007866148642619",
                    "71345633509069511639142624113838715266"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-dc248f78",
            "signature_type": "Line"
        }
    ],
    "types": [
        "ID"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/575845147cb48d71893f12665bae2e8892aa7e06"
    ],
    "spl": "2026-03-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-366405211.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-03-01

Affected versions

Other
15

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/policy/keyguard/KeyguardServiceDelegate.java",
                "function": "onServiceDisconnected"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8a0f8df37587f1677cc6ab80a567d8f82ff78121",
            "deprecated": false,
            "digest": {
                "function_hash": "165224352031574091486954619054521859011",
                "length": 309.0
            },
            "id": "ASB-A-366405211-12539f36",
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8a0f8df37587f1677cc6ab80a567d8f82ff78121",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "188740867167127335915569500118973790322",
                    "84330890575215797028099298130137947054",
                    "293188552758682695276487170529963563504",
                    "31486765646964059850758010433622056728",
                    "329174108340331449967704107737379573499",
                    "314471725614292304082539536551500932481",
                    "267173757964726372141966533857611426209",
                    "78302100577507850275493820812633577143",
                    "311941396213254451863721356851040172550"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-73ba153a",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/LockTaskController.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8a0f8df37587f1677cc6ab80a567d8f82ff78121",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "59919574519062909568518435099235531208",
                    "20050232685143592671371007866148642619",
                    "71345633509069511639142624113838715266"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-a0b4852b",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityTaskManagerService.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8a0f8df37587f1677cc6ab80a567d8f82ff78121",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "312613614161868944866091854443080408141",
                    "122437842048045772090835283628580660228",
                    "314646606167297330119270266462598785381"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-b2d1adb4",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/policy/keyguard/KeyguardServiceDelegate.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8a0f8df37587f1677cc6ab80a567d8f82ff78121",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "257558208854102221961475193619356994313",
                    "266982570076036454971945458857341223012",
                    "110744525169120606714442510787246584052",
                    "39049326366674602475728549990412471899",
                    "104052523671044076921826450147227892836"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-b6a20638",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "onBootCompleted"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8a0f8df37587f1677cc6ab80a567d8f82ff78121",
            "deprecated": false,
            "digest": {
                "function_hash": "155114677624689918567865373055519737249",
                "length": 304.0
            },
            "id": "ASB-A-366405211-dbea9b6f",
            "signature_type": "Function"
        }
    ],
    "types": [
        "ID"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/8a0f8df37587f1677cc6ab80a567d8f82ff78121"
    ],
    "spl": "2026-03-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-366405211.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-03-01

Affected versions

Other
16

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityTaskManagerService.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/06e5f6cb4e893155d46b5e329a00495fccdc71eb",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "312613614161868944866091854443080408141",
                    "122437842048045772090835283628580660228",
                    "314646606167297330119270266462598785381"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-1137a820",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/policy/keyguard/KeyguardServiceDelegate.java",
                "function": "onServiceDisconnected"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/06e5f6cb4e893155d46b5e329a00495fccdc71eb",
            "deprecated": false,
            "digest": {
                "function_hash": "165224352031574091486954619054521859011",
                "length": 309.0
            },
            "id": "ASB-A-366405211-6abe5a53",
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/policy/keyguard/KeyguardServiceDelegate.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/06e5f6cb4e893155d46b5e329a00495fccdc71eb",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "257558208854102221961475193619356994313",
                    "266982570076036454971945458857341223012",
                    "110744525169120606714442510787246584052",
                    "39049326366674602475728549990412471899",
                    "104052523671044076921826450147227892836"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-c13a983b",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "onBootCompleted"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/06e5f6cb4e893155d46b5e329a00495fccdc71eb",
            "deprecated": false,
            "digest": {
                "function_hash": "155114677624689918567865373055519737249",
                "length": 304.0
            },
            "id": "ASB-A-366405211-c7005ba5",
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/06e5f6cb4e893155d46b5e329a00495fccdc71eb",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "188740867167127335915569500118973790322",
                    "84330890575215797028099298130137947054",
                    "293188552758682695276487170529963563504",
                    "31486765646964059850758010433622056728",
                    "329174108340331449967704107737379573499",
                    "314471725614292304082539536551500932481",
                    "267173757964726372141966533857611426209",
                    "78302100577507850275493820812633577143",
                    "311941396213254451863721356851040172550"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-ee8a02a6",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/LockTaskController.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/06e5f6cb4e893155d46b5e329a00495fccdc71eb",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "59919574519062909568518435099235531208",
                    "20050232685143592671371007866148642619",
                    "71345633509069511639142624113838715266"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-f39e7e17",
            "signature_type": "Line"
        }
    ],
    "types": [
        "ID"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/06e5f6cb4e893155d46b5e329a00495fccdc71eb"
    ],
    "spl": "2026-03-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-366405211.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-03-01

Affected versions

Other
14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityTaskManagerService.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/35fb7e8e90148c1c4fda7f171eda79955d9b37a7",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "312613614161868944866091854443080408141",
                    "122437842048045772090835283628580660228",
                    "314646606167297330119270266462598785381"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-0f6a992a",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/policy/keyguard/KeyguardServiceDelegate.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/35fb7e8e90148c1c4fda7f171eda79955d9b37a7",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "257558208854102221961475193619356994313",
                    "266982570076036454971945458857341223012",
                    "110744525169120606714442510787246584052",
                    "39049326366674602475728549990412471899",
                    "104052523671044076921826450147227892836"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-12ae8f7e",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java",
                "function": "onBootCompleted"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/35fb7e8e90148c1c4fda7f171eda79955d9b37a7",
            "deprecated": false,
            "digest": {
                "function_hash": "155114677624689918567865373055519737249",
                "length": 304.0
            },
            "id": "ASB-A-366405211-273c3e59",
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/LockTaskController.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/35fb7e8e90148c1c4fda7f171eda79955d9b37a7",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "59919574519062909568518435099235531208",
                    "20050232685143592671371007866148642619",
                    "71345633509069511639142624113838715266"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-67aa8c11",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/keyguard/KeyguardViewMediator.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/35fb7e8e90148c1c4fda7f171eda79955d9b37a7",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "164090408475328666551302398136644410778",
                    "314471725614292304082539536551500932481",
                    "267173757964726372141966533857611426209",
                    "78302100577507850275493820812633577143",
                    "311941396213254451863721356851040172550"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-366405211-7e7be757",
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/policy/keyguard/KeyguardServiceDelegate.java",
                "function": "onServiceDisconnected"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/35fb7e8e90148c1c4fda7f171eda79955d9b37a7",
            "deprecated": false,
            "digest": {
                "function_hash": "165224352031574091486954619054521859011",
                "length": 309.0
            },
            "id": "ASB-A-366405211-d78e369f",
            "signature_type": "Function"
        }
    ],
    "types": [
        "ID"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/35fb7e8e90148c1c4fda7f171eda79955d9b37a7"
    ],
    "spl": "2026-03-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-366405211.json"