ASB-A-372671447

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-372671447.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-372671447
Aliases
Published
2025-04-01T00:00:00Z
Modified
2026-04-17T15:55:28.020024Z
Summary
[none]
Details

In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user from the primary user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2025-04-01

Affected versions

Other
15-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 589.0,
                "function_hash": "141402935840275832766109052548010296325"
            },
            "id": "ASB-A-372671447-37754fbc",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/e719575e92c1e6bd0b9088663e6c909bccf2b007",
            "target": {
                "function": "hasInteractAcrossUsersFullPermission",
                "file": "src/com/android/settings/applications/AppInfoBase.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "171121408338032941634247043412481580864",
                    "148022555326362211588923513964819100075",
                    "42002351314743047139351629358721420425",
                    "70407893938082198783244595396619524615",
                    "331307535763805289003355655982655001161",
                    "43442762450248782866851494676023422739",
                    "251260240784935273365111309321917463466",
                    "274857719183138919187227466914031626252",
                    "1491861563095864626419501710335762412",
                    "254822980856664617044708012585451335050",
                    "125109871518393969673915034220506927467",
                    "123820872093436411091505817552567141969",
                    "128129760382388722343904723934348977465",
                    "194693192804952070947293174102687088007",
                    "243619145025075647397462454710546180774",
                    "31664237515638568963709747145360779311",
                    "314422190561766948256240878166327586938",
                    "270471212009536911983616706385704537974",
                    "55178289631961912410907269940270900814",
                    "159679927302831788146062976310195559320",
                    "333751567642933609218921129979807033804",
                    "105135349804760838859480469610730392589",
                    "142844325514812842054961022211133550188",
                    "209634198631699200840616607459609149003"
                ]
            },
            "id": "ASB-A-372671447-b4d854c6",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/e719575e92c1e6bd0b9088663e6c909bccf2b007",
            "target": {
                "file": "src/com/android/settings/applications/AppInfoBase.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/e719575e92c1e6bd0b9088663e6c909bccf2b007"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2025-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-372671447.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-04-01

Affected versions

Other
15

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "171121408338032941634247043412481580864",
                    "148022555326362211588923513964819100075",
                    "42002351314743047139351629358721420425",
                    "70407893938082198783244595396619524615",
                    "331307535763805289003355655982655001161",
                    "43442762450248782866851494676023422739",
                    "251260240784935273365111309321917463466",
                    "274857719183138919187227466914031626252",
                    "1491861563095864626419501710335762412",
                    "254822980856664617044708012585451335050",
                    "125109871518393969673915034220506927467",
                    "123820872093436411091505817552567141969",
                    "128129760382388722343904723934348977465",
                    "194693192804952070947293174102687088007",
                    "243619145025075647397462454710546180774",
                    "31664237515638568963709747145360779311",
                    "314422190561766948256240878166327586938",
                    "270471212009536911983616706385704537974",
                    "55178289631961912410907269940270900814",
                    "159679927302831788146062976310195559320",
                    "333751567642933609218921129979807033804",
                    "105135349804760838859480469610730392589",
                    "142844325514812842054961022211133550188",
                    "209634198631699200840616607459609149003"
                ]
            },
            "id": "ASB-A-372671447-82ec604b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/5bd45baa9365ea8db42249bf83d780c7a0473656",
            "target": {
                "file": "src/com/android/settings/applications/AppInfoBase.java"
            }
        },
        {
            "digest": {
                "length": 589.0,
                "function_hash": "141402935840275832766109052548010296325"
            },
            "id": "ASB-A-372671447-f8cc6441",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/5bd45baa9365ea8db42249bf83d780c7a0473656",
            "target": {
                "function": "hasInteractAcrossUsersPermission",
                "file": "src/com/android/settings/applications/AppInfoBase.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/5bd45baa9365ea8db42249bf83d780c7a0473656"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2025-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-372671447.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-04-01

Affected versions

Other
13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "171121408338032941634247043412481580864",
                    "148022555326362211588923513964819100075",
                    "42002351314743047139351629358721420425",
                    "70407893938082198783244595396619524615",
                    "331307535763805289003355655982655001161",
                    "43442762450248782866851494676023422739",
                    "251260240784935273365111309321917463466",
                    "274857719183138919187227466914031626252",
                    "1491861563095864626419501710335762412",
                    "254822980856664617044708012585451335050",
                    "125109871518393969673915034220506927467",
                    "123820872093436411091505817552567141969",
                    "128129760382388722343904723934348977465",
                    "194693192804952070947293174102687088007",
                    "243619145025075647397462454710546180774",
                    "31664237515638568963709747145360779311",
                    "314422190561766948256240878166327586938",
                    "270471212009536911983616706385704537974",
                    "55178289631961912410907269940270900814",
                    "159679927302831788146062976310195559320",
                    "333751567642933609218921129979807033804",
                    "105135349804760838859480469610730392589",
                    "142844325514812842054961022211133550188",
                    "209634198631699200840616607459609149003"
                ]
            },
            "id": "ASB-A-372671447-05dc72a7",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/87645011fc78104372d08b303b361b83e4ce1a70",
            "target": {
                "file": "src/com/android/settings/applications/AppInfoBase.java"
            }
        },
        {
            "digest": {
                "length": 589.0,
                "function_hash": "141402935840275832766109052548010296325"
            },
            "id": "ASB-A-372671447-35a7f6b0",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/87645011fc78104372d08b303b361b83e4ce1a70",
            "target": {
                "function": "hasInteractAcrossUsersPermission",
                "file": "src/com/android/settings/applications/AppInfoBase.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/87645011fc78104372d08b303b361b83e4ce1a70"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2025-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-372671447.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-04-01

Affected versions

Other
14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "171121408338032941634247043412481580864",
                    "148022555326362211588923513964819100075",
                    "42002351314743047139351629358721420425",
                    "70407893938082198783244595396619524615",
                    "331307535763805289003355655982655001161",
                    "43442762450248782866851494676023422739",
                    "251260240784935273365111309321917463466",
                    "274857719183138919187227466914031626252",
                    "1491861563095864626419501710335762412",
                    "254822980856664617044708012585451335050",
                    "125109871518393969673915034220506927467",
                    "123820872093436411091505817552567141969",
                    "128129760382388722343904723934348977465",
                    "194693192804952070947293174102687088007",
                    "243619145025075647397462454710546180774",
                    "31664237515638568963709747145360779311",
                    "314422190561766948256240878166327586938",
                    "270471212009536911983616706385704537974",
                    "55178289631961912410907269940270900814",
                    "159679927302831788146062976310195559320",
                    "333751567642933609218921129979807033804",
                    "105135349804760838859480469610730392589",
                    "142844325514812842054961022211133550188",
                    "209634198631699200840616607459609149003"
                ]
            },
            "id": "ASB-A-372671447-60a24b35",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/63656485eaeb51defab1b507f2351cba904c933e",
            "target": {
                "file": "src/com/android/settings/applications/AppInfoBase.java"
            }
        },
        {
            "digest": {
                "length": 589.0,
                "function_hash": "141402935840275832766109052548010296325"
            },
            "id": "ASB-A-372671447-eda6e0c4",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/63656485eaeb51defab1b507f2351cba904c933e",
            "target": {
                "function": "hasInteractAcrossUsersPermission",
                "file": "src/com/android/settings/applications/AppInfoBase.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/63656485eaeb51defab1b507f2351cba904c933e"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2025-04-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-372671447.json"