ASB-A-377888957

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-377888957.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-377888957
Aliases
Published
2026-03-01T00:00:00Z
Modified
2026-03-19T16:29:45.216287Z
Summary
[none]
Details

In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2-next:0
Fixed
16-qpr2-next:2026-03-01

Affected versions

Other
16-qpr2-next

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-377888957-05d41381",
            "digest": {
                "function_hash": "226996707547433235965785472795624441252",
                "length": 213.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "isUidAllowedAccessToDataOrObbPathForFuse"
            }
        },
        {
            "id": "ASB-A-377888957-0ba775ac",
            "digest": {
                "function_hash": "328776005334908736275543593973879020239",
                "length": 516.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "extractRelativePathWithDisplayName"
            }
        },
        {
            "id": "ASB-A-377888957-1a68c403",
            "digest": {
                "function_hash": "92307367214643950899603413162914992496",
                "length": 204.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "isDataOrObbPath"
            }
        },
        {
            "id": "ASB-A-377888957-2cc167e6",
            "digest": {
                "function_hash": "249665731093422669319818969142505135567",
                "length": 563.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "onFileLookupForFuse"
            }
        },
        {
            "id": "ASB-A-377888957-3bbe54e1",
            "digest": {
                "line_hashes": [
                    "134631226112286153484670460781430282611",
                    "89815533011824103329115306093033562383",
                    "257818496789157237561223134067021313370",
                    "197925221066518878033764733674534026675",
                    "6138842530206976936300084642398284716",
                    "209337476459286661755185109859942583083",
                    "311981221252840178152454485780936656934",
                    "234599106246153954331461502915158441863",
                    "192464560504849610202804272826433035627",
                    "234105433387135062527867796944769985851",
                    "257219336668657842162850345608383879987",
                    "326660047069205675266907240875515725546",
                    "70040175552653072796495333610581565940",
                    "245352575624778057833178135623449323480",
                    "246386086987323437044502751628058075607",
                    "165375476042793538010425895285774727336",
                    "764814457686874386476215849419489293",
                    "26564863035096130412203098652145699338",
                    "7984601092988551274489120689617782795",
                    "227680483399587877396693384856384439838",
                    "106409285204876307118629787082210609480",
                    "162201346877770839031371629678396081773",
                    "320639867904938325402006363032619936006",
                    "303087223366269123206953225211176670620"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            }
        },
        {
            "id": "ASB-A-377888957-426314f9",
            "digest": {
                "function_hash": "134060006942020820079166328762911276985",
                "length": 226.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "isPrivatePackagePathNotAccessibleByCaller"
            }
        },
        {
            "id": "ASB-A-377888957-4861a5e3",
            "digest": {
                "line_hashes": [
                    "173206721113253927365700131701305519062",
                    "96677863779759406821934507698891994795",
                    "217365107932644967334653583789338403522",
                    "7151433796071928884824599395815276383",
                    "78791798906279708308750508261262589134",
                    "153470501477847501230096233885626336528",
                    "30237668928426802982795815534994308100",
                    "82018194030535987554556698946449194007",
                    "159412126813309424330500482424878503099",
                    "41402961171287579849934641659139363311",
                    "289687709461305282474901472734985936504",
                    "171788775347058813939977131637371805635",
                    "258229670595994740577130944013208492492",
                    "276915466610561367434355349498259303014",
                    "17868852999213018675502220584756778566",
                    "294046186754859283633317689621016143482",
                    "78353760001383825331055911620291906486",
                    "44215024272372494443035931445115371798",
                    "21984294643547783324754679393295592990",
                    "132957219469021444897569438745347485763",
                    "79244339253714502349611243392769900454",
                    "66720982552654615389360111553529818430",
                    "339652390986422250184571403096310669801",
                    "92120459762919446994684560255772253704",
                    "151208300888016572072216369998602590409",
                    "32643535801093529626958464395234163616",
                    "101008661967773831733170902370887784484",
                    "185709782856752458176489203882960839389",
                    "316987461974666684201809714523501254168",
                    "16106118188716020810353708808829455361",
                    "90493409769181207269054694978358321729",
                    "51987754084611526887109802415952595867",
                    "35576384925651203357581874715347865057",
                    "236455967876322173453664027728001258555",
                    "70958477338536973107162777667911260326",
                    "292089509111028762067088320639799216075",
                    "182022595529471066684785689789299366193",
                    "69730615146276407651092307724542876263",
                    "273454783085467765635999772771029466243",
                    "234622683251338214237295149042364572241",
                    "67139361722389860045240930350434366260",
                    "59250491801463729868811104966137903627"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ac3a6dc8db818a74357af1dfa2acfa911648827c",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            }
        },
        {
            "id": "ASB-A-377888957-51fa1c12",
            "digest": {
                "function_hash": "14279649764430237712843283548798417177",
                "length": 243.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "extractPathOwnerPackageName"
            }
        },
        {
            "id": "ASB-A-377888957-570e368f",
            "digest": {
                "line_hashes": [
                    "277719061120923855720894824315412904825",
                    "294276262836747963732032934653878299683",
                    "70840243827195656271213267058830171869",
                    "191441497703151659409703273328032493911",
                    "221394803707328647321340509365467153832",
                    "107741032214056123359766846177322763474",
                    "215319409632613374333202781714283057603",
                    "289906919696628400957618572375286939927",
                    "231864520467113675219606534456744277642",
                    "101174174742150765788737015576610438397",
                    "59035682705055059088983133217213735787",
                    "260707350419401750785342769482167009082",
                    "109316850836714322622303977450526042452",
                    "89490861335495855522613995177667255133",
                    "211894088415977047340953790660474240028",
                    "241091897821720987786033692835420824053",
                    "199875295475276069390867084182765738097",
                    "16060352485762379418340150163930337854",
                    "226849912900492804842013541784238374485",
                    "275076745764628580337259328215861024252",
                    "218623763184100564539095451435411405573",
                    "289906919696628400957618572375286939927",
                    "18025745311732292158425269737691486927",
                    "147775838700226381159279440288097661542",
                    "95246909943290472216763529824930062008",
                    "124795674189587345859616503830620390856",
                    "202077237700240578398699047628914619707",
                    "211157565416306637755979175177324928374",
                    "336261838120453986963419909204707790449",
                    "11931841036104149514767539626498570583",
                    "76467033808767936713409658378110127948",
                    "63926994233254031294870498992783478161",
                    "76640258726419043624872947953414850779",
                    "300804222294664550244550930434726947292"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java"
            }
        },
        {
            "id": "ASB-A-377888957-5978c7bb",
            "digest": {
                "line_hashes": [
                    "42908565557489203050520370581398917282",
                    "128316141155159100649622775336133295007",
                    "282731222483609719443282120070882277390",
                    "165898591103343431279425710275646447157",
                    "219680487362096660389734968694038981339",
                    "249073739354650957884364904141154759301",
                    "54539833989572580748702364764862275612",
                    "70265105652671737215227839028825929535",
                    "194409139928996373204224940512526594165",
                    "2499999390633867229282834822945098525",
                    "253009853879679073298953409291244003385",
                    "299090597716764448916915079831493139341",
                    "152609154947308658414638123540052009138",
                    "132572916478863627196232438168471086231",
                    "211019141526758352248157757202895836392",
                    "313215474695951991572961019964625810390"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java"
            }
        },
        {
            "id": "ASB-A-377888957-5a027739",
            "digest": {
                "function_hash": "198515721572817328364593744351461647072",
                "length": 1557.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "isDirAccessAllowedForFuse"
            }
        },
        {
            "id": "ASB-A-377888957-5ac6ab8d",
            "digest": {
                "function_hash": "202824315161223517404522119094524291030",
                "length": 271.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "normalizeAndFilterDefaultIgnorableCodepoints"
            }
        },
        {
            "id": "ASB-A-377888957-62687cfe",
            "digest": {
                "function_hash": "278045937307668214596709921924408550446",
                "length": 2200.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "onFileOpenForFuse"
            }
        },
        {
            "id": "ASB-A-377888957-71fffc13",
            "digest": {
                "function_hash": "44762415218847977234239716215750912759",
                "length": 214.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "isObbOrChildRelativePath"
            }
        },
        {
            "id": "ASB-A-377888957-7ce64f21",
            "digest": {
                "function_hash": "231280261256325031510246668243932954432",
                "length": 1656.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "insertFileIfNecessaryForFuse"
            }
        },
        {
            "id": "ASB-A-377888957-80f4117e",
            "digest": {
                "line_hashes": [
                    "222584072729735323109898840923751069068",
                    "41704313145309279069425671886692452637",
                    "65939650243463462522209391849643224540",
                    "117341219938160641483890167620966869020",
                    "128048320933042183831893733314396719068",
                    "172394471036302015516554510539378005816",
                    "87698304668436251034597930970843903176",
                    "292700920929803809937765813774551376287",
                    "10455094215873628548419497250396943403",
                    "192987069831422856292770553791605861373",
                    "51608580587611159626355048685623940193",
                    "10147980606942817149665655618576589991",
                    "16298271443780216982714039481591504387",
                    "247606750090053927141368920297746189498",
                    "217312471996894623925297856645972273914",
                    "74050927217361711611696943487525512847",
                    "9930089544817791024302595660407261805",
                    "263495380045659201226454466404201242841",
                    "109894684142278450001096080842419067842",
                    "82595427226006979354328584921143568437",
                    "170697138640752652382562359505888137919",
                    "81100697101505954786086398800711028153",
                    "296013419558806594279803459872362083905",
                    "264757887831491835516301956099583446670",
                    "232501581310166306068160390218971890395",
                    "132524863725903511421410689212441816332",
                    "260807375613150695339136617662987785275",
                    "117549453931908998512414891604487343050",
                    "137703718226107616670925311521652813478",
                    "136176808116978878461216904410119324149",
                    "286860166619217333271835436767588740114",
                    "71701847979128889883479979495604727147",
                    "248435173521457313137034391255992268452",
                    "286626487771195837064527485378392867914",
                    "317408471826694362668345323557812397810"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            }
        },
        {
            "id": "ASB-A-377888957-8a52ce9e",
            "digest": {
                "function_hash": "154699165599370262517894916201972503227",
                "length": 1220.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "getFilesInDirectoryForFuse"
            }
        },
        {
            "id": "ASB-A-377888957-913ae90d",
            "digest": {
                "function_hash": "249577001351822525288196595855405472197",
                "length": 252.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "extractOwnerPackageNameFromRelativePath"
            }
        },
        {
            "id": "ASB-A-377888957-916feef6",
            "digest": {
                "function_hash": "180930561264265183760470799271315958925",
                "length": 213.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "isDataOrObbRelativePath"
            }
        },
        {
            "match_only_versions": [
                "16-qpr2-next"
            ],
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "onFileOpenForFuse"
            },
            "deprecated": false,
            "id": "ASB-A-377888957-9a48deaf",
            "digest": {
                "function_hash": "48383641148396323823115119688982097993",
                "length": 2134.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5dc5ccb4d111b58f4c872ce388c1a05c22aedf12",
            "signature_version": "v1"
        },
        {
            "id": "ASB-A-377888957-abf470d1",
            "digest": {
                "function_hash": "42956777334726447747866057222591246297",
                "length": 576.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ac3a6dc8db818a74357af1dfa2acfa911648827c",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "extractRelativePath"
            }
        },
        {
            "id": "ASB-A-377888957-ace66b35",
            "digest": {
                "function_hash": "283246369171298742973751962117089810377",
                "length": 595.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "extractRelativePath"
            }
        },
        {
            "id": "ASB-A-377888957-b1044fdf",
            "digest": {
                "function_hash": "130838961223192324853349544381631729222",
                "length": 866.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "shouldBypassFuseRestrictions"
            }
        },
        {
            "id": "ASB-A-377888957-c5ac3c04",
            "digest": {
                "function_hash": "47488645699180043015982744076818791335",
                "length": 355.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "assertNoDefaultIgnorableCharactersInPath"
            }
        },
        {
            "id": "ASB-A-377888957-df6a8d1b",
            "digest": {
                "function_hash": "145397304366275538245543153972856109510",
                "length": 2813.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "renameForFuse"
            }
        },
        {
            "id": "ASB-A-377888957-e70e87b4",
            "digest": {
                "function_hash": "117989335259030369357833102330557057919",
                "length": 1012.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "deleteFileForFuse"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5dc5ccb4d111b58f4c872ce388c1a05c22aedf12",
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8",
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ac3a6dc8db818a74357af1dfa2acfa911648827c",
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-377888957.json"
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-03-01

Affected versions

Other
15

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-377888957-42d1cca0",
            "digest": {
                "line_hashes": [
                    "37980484410121775429104723648726030744",
                    "259230997437856627284876070410981522839",
                    "156347491582228073526965554601258343305",
                    "108817463509489971315003239018655772380",
                    "78791798906279708308750508261262589134",
                    "153470501477847501230096233885626336528",
                    "30237668928426802982795815534994308100",
                    "82018194030535987554556698946449194007",
                    "17542287665553718751784631785626160418",
                    "155332377000978335094080491740611356267",
                    "289687709461305282474901472734985936504",
                    "171788775347058813939977131637371805635",
                    "258229670595994740577130944013208492492",
                    "276915466610561367434355349498259303014",
                    "17868852999213018675502220584756778566"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/daa78b685ea8c79bb8f255e5e5b3cfed219fbe67",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            }
        },
        {
            "id": "ASB-A-377888957-eaccb9d3",
            "digest": {
                "function_hash": "134060006942020820079166328762911276985",
                "length": 226.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/daa78b685ea8c79bb8f255e5e5b3cfed219fbe67",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "isPrivatePackagePathNotAccessibleByCaller"
            }
        },
        {
            "id": "ASB-A-377888957-ef2ebd5e",
            "digest": {
                "function_hash": "42956777334726447747866057222591246297",
                "length": 576.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/daa78b685ea8c79bb8f255e5e5b3cfed219fbe67",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "extractRelativePath"
            }
        },
        {
            "id": "ASB-A-377888957-f806ddc9",
            "digest": {
                "line_hashes": [
                    "162323806311705088903963780433977929902",
                    "170078801786692565586203197492392509185",
                    "151796894551534310984489466019835500286",
                    "21227431916113020029303057532108103788",
                    "219680487362096660389734968694038981339",
                    "249073739354650957884364904141154759301",
                    "54539833989572580748702364764862275612",
                    "70265105652671737215227839028825929535",
                    "194409139928996373204224940512526594165",
                    "2499999390633867229282834822945098525",
                    "253009853879679073298953409291244003385",
                    "299090597716764448916915079831493139341",
                    "152609154947308658414638123540052009138",
                    "132572916478863627196232438168471086231",
                    "211019141526758352248157757202895836392",
                    "313215474695951991572961019964625810390"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/daa78b685ea8c79bb8f255e5e5b3cfed219fbe67",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/daa78b685ea8c79bb8f255e5e5b3cfed219fbe67"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-377888957.json"
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-03-01

Affected versions

Other
16

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-377888957-192300b5",
            "digest": {
                "function_hash": "134060006942020820079166328762911276985",
                "length": 226.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "isPrivatePackagePathNotAccessibleByCaller"
            }
        },
        {
            "id": "ASB-A-377888957-22296a2c",
            "digest": {
                "function_hash": "42956777334726447747866057222591246297",
                "length": 576.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "extractRelativePath"
            }
        },
        {
            "id": "ASB-A-377888957-6282d3c4",
            "digest": {
                "line_hashes": [
                    "42908565557489203050520370581398917282",
                    "128316141155159100649622775336133295007",
                    "282731222483609719443282120070882277390",
                    "165898591103343431279425710275646447157",
                    "219680487362096660389734968694038981339",
                    "249073739354650957884364904141154759301",
                    "54539833989572580748702364764862275612",
                    "70265105652671737215227839028825929535",
                    "194409139928996373204224940512526594165",
                    "2499999390633867229282834822945098525",
                    "253009853879679073298953409291244003385",
                    "299090597716764448916915079831493139341",
                    "152609154947308658414638123540052009138",
                    "132572916478863627196232438168471086231",
                    "211019141526758352248157757202895836392",
                    "313215474695951991572961019964625810390"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java"
            }
        },
        {
            "id": "ASB-A-377888957-b6d5c81c",
            "digest": {
                "line_hashes": [
                    "37980484410121775429104723648726030744",
                    "259230997437856627284876070410981522839",
                    "156347491582228073526965554601258343305",
                    "108817463509489971315003239018655772380",
                    "173206721113253927365700131701305519062",
                    "96677863779759406821934507698891994795",
                    "217365107932644967334653583789338403522",
                    "7151433796071928884824599395815276383",
                    "78791798906279708308750508261262589134",
                    "153470501477847501230096233885626336528",
                    "30237668928426802982795815534994308100",
                    "82018194030535987554556698946449194007",
                    "159412126813309424330500482424878503099",
                    "41402961171287579849934641659139363311",
                    "289687709461305282474901472734985936504",
                    "171788775347058813939977131637371805635",
                    "258229670595994740577130944013208492492",
                    "276915466610561367434355349498259303014",
                    "17868852999213018675502220584756778566"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            }
        },
        {
            "id": "ASB-A-377888957-de9776a1",
            "digest": {
                "function_hash": "130838961223192324853349544381631729222",
                "length": 866.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "shouldBypassFuseRestrictions"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-377888957.json"
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-03-01

Affected versions

Other
14

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-377888957-08ca44cf",
            "digest": {
                "line_hashes": [
                    "37980484410121775429104723648726030744",
                    "259230997437856627284876070410981522839",
                    "156347491582228073526965554601258343305",
                    "108817463509489971315003239018655772380",
                    "78791798906279708308750508261262589134",
                    "153470501477847501230096233885626336528",
                    "30237668928426802982795815534994308100",
                    "82018194030535987554556698946449194007",
                    "17542287665553718751784631785626160418",
                    "155332377000978335094080491740611356267",
                    "289687709461305282474901472734985936504",
                    "171788775347058813939977131637371805635",
                    "258229670595994740577130944013208492492",
                    "276915466610561367434355349498259303014",
                    "17868852999213018675502220584756778566"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c7e6933049fc5913a97bbcf8c28d5dd5546ba9dd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java"
            }
        },
        {
            "id": "ASB-A-377888957-2fba4c12",
            "digest": {
                "function_hash": "42956777334726447747866057222591246297",
                "length": 576.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c7e6933049fc5913a97bbcf8c28d5dd5546ba9dd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/util/FileUtils.java",
                "function": "extractRelativePath"
            }
        },
        {
            "id": "ASB-A-377888957-37d685bd",
            "digest": {
                "function_hash": "134060006942020820079166328762911276985",
                "length": 226.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c7e6933049fc5913a97bbcf8c28d5dd5546ba9dd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "isPrivatePackagePathNotAccessibleByCaller"
            }
        },
        {
            "id": "ASB-A-377888957-d4a18422",
            "digest": {
                "line_hashes": [
                    "162323806311705088903963780433977929902",
                    "170078801786692565586203197492392509185",
                    "151796894551534310984489466019835500286",
                    "177592477269303531484808321055982915010",
                    "57187313110114083304434293964721144394",
                    "238044774659507211425721579363074238927",
                    "54539833989572580748702364764862275612",
                    "70265105652671737215227839028825929535",
                    "194409139928996373204224940512526594165",
                    "2499999390633867229282834822945098525",
                    "253009853879679073298953409291244003385",
                    "299090597716764448916915079831493139341",
                    "152609154947308658414638123540052009138",
                    "132572916478863627196232438168471086231",
                    "211019141526758352248157757202895836392",
                    "313215474695951991572961019964625810390"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c7e6933049fc5913a97bbcf8c28d5dd5546ba9dd",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c7e6933049fc5913a97bbcf8c28d5dd5546ba9dd"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-377888957.json"