ASB-A-382064697
See a problem?- Import Source
- https://storage.googleapis.com/android-osv/ASB-A-382064697.json
- JSON Data
- https://api.osv.dev/v1/vulns/ASB-A-382064697
- Aliases
-
- A-382064697
- CVE-2025-22442
- Published
- 2026-11-01T00:00:00Z
- Modified
- 2026-11-04T16:48:29Z
- Summary
- [none]
- Details
-
In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work profile due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- References
Affected packages
Android
platform/frameworks/base
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/73b54cdf4b70831c4f952d7556274609cb46214e",
"https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"14772053645181522000987962851126211530",
"227761515714333368153267562943197058338",
"30553271854399821911430151162523546701",
"12044598849916242489712041402734552565",
"140338184364959144181555492380112028213",
"146515428954072345816215875577048560455",
"201250058353431098371160763507158865544",
"248135402116814917649790765438612390818",
"124674362512301654985334587641625283883",
"216470262348431480951837737281342289538",
"293530623331423290027877985434224017857",
"117887190187203881026168994981712662870",
"294907390601697900084343080972027899395",
"74091873132258298264621217918800998173",
"313526312937672544306451668432186758995",
"161137157391750092220652849064452203893",
"191785541895896614982792789077871547186",
"104389416607429061816407048207724230764",
"85899813483396326703996046452353127467",
"99222728646417523943383492481593997149",
"111611775825338590526465658875669106814",
"300481933341723122553837771456434987814",
"212162899689087846268785324255707191628",
"172967198813184847268655510130006184926",
"321978193243444964435832713484748106603",
"240373764971395997482810365967412397979",
"236819011566797007276578667714886936047",
"124275175712902712947959079776945059162",
"233862666514936383531026545431291297955",
"127505183434171093562501252442183896164",
"51383959777506934752734865903404984574",
"49223158343559934932902914506402761402",
"106199054525076950669382555991193386903"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-0f185534",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "201172061625538965818632368220504595811",
"length": 2823
},
"id": "ASB-A-382064697-2751763a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "createAndProvisionManagedProfile"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "317325711700405363142805252702999144174",
"length": 292
},
"id": "ASB-A-382064697-3469ea09",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserEvenWhenDisallowed"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "188616972527949366673140090472391534932",
"length": 644
},
"id": "ASB-A-382064697-3dd09c0d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "createProfileForUser"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "63232995700918957214348334260679696818",
"length": 550
},
"id": "ASB-A-382064697-3f6b82fa",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "preCreateUserWithThrow"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"174228757297823701920680957584731676623",
"166053393031591928948773641824388247265",
"9990876026229777043179608973513179347",
"106701537664105913920276549471934026419"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-4a117887",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/73b54cdf4b70831c4f952d7556274609cb46214e",
"target": {
"file": "services/core/java/com/android/server/pm/UserRestrictionsUtils.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "43705205980507122883841721036154879849",
"length": 585
},
"id": "ASB-A-382064697-57662703",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/73b54cdf4b70831c4f952d7556274609cb46214e",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "maybeSetDefaultRestrictionsForAdminLocked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "210596356602003175977595249293941244893",
"length": 1026
},
"id": "ASB-A-382064697-5793bd68",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternal"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "18272672610803644878063699002194019428",
"length": 619
},
"id": "ASB-A-382064697-5d9ae585",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/HsumBootUserInitializer.java",
"function": "createInitialUser"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"211601366272437661702297477758595127233",
"301647004348719132627837136196104149432",
"171651002856259250430475358606164368881",
"75860860137678555008779187628510043152",
"209012513319277403194127929833174849709",
"259585910838315443098635112997050882773",
"116250089348093595036040322505212825642",
"309109170120678965827502837765623948383",
"258442153241993590594655303302790217479",
"153269852780798303387034453402776492980",
"313330816297560210036813979477794096851",
"135697686923970732804020943249493012377",
"226367982520377085424516939470711875624",
"49774658792218453547861132852751678997",
"221489397448192158586721076801650424095",
"94776618913450816050629701049683028700",
"81629392541359886776958493542756584125",
"78695932896753832658305982620015855507",
"291583578611445269561935557909942464728",
"296503738037062459419108238187145530940",
"158514294911809061231287391213728583404",
"98287820103712727010314192052204609374",
"292147122359403623709237959488040430438",
"178534460224201609432423572120631853230",
"23275847615953170536064997547282817108",
"247759875458591983770200823479184769243"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-5e07e35b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/73b54cdf4b70831c4f952d7556274609cb46214e",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"48823121485882337507163198033332153753",
"275897575881193917579578692740484270033",
"219215098006380603010452053428819740150",
"292858049708248689904821214517747780970",
"272954899650197294980631001754259384409",
"213367217938184356959272053901205918159",
"51111224316831074887218713710086659508",
"290856007717603845203313472485040181982",
"28089615392901685792746017882763576125",
"118744360503583013402434084783148532469",
"62209890670379483524858894411285588998",
"35020831367229615967587512719811923722",
"10013825530143243873436404789591552592",
"199022457039654690580861528308934094797",
"101993235741327343302201713001011923599",
"91522304252262197922171532931005862544",
"88308704753556983020741736119009893663",
"323506059996108311263497410145827372883"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-721b3f33",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "178482371636458589658293005529206275790",
"length": 758
},
"id": "ASB-A-382064697-7b910492",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUnchecked"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"207337957451303591687978103913927136933",
"47168159145185666126187543447414774925",
"261454407771322424317487794452380959600",
"308469589454959482090043189291912415189",
"207337957451303591687978103913927136933",
"68754362139165714965547539538784330768",
"1884156336455292042888705573315773595",
"128121872022908993969075737555086927254"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-8450fed8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/HsumBootUserInitializer.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "193661644486428553974174657300114049996",
"length": 1689
},
"id": "ASB-A-382064697-aeab8a6f",
"match_only_versions": [
"17-qpr2-next"
],
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/73b54cdf4b70831c4f952d7556274609cb46214e",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "setProfileOwner"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"110028099031019592370658018593064083230",
"145388631805707220995030462016260189170",
"221505264435735546361073243576261494647"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-c385d766",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerInternal.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "275840766849285987953517721836136092412",
"length": 766
},
"id": "ASB-A-382064697-cd02a063",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/HsumBootUserInitializer.java",
"function": "legacyCreateMainUserIfNeeded"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "302435959459819134068081302152057359294",
"length": 6359
},
"id": "ASB-A-382064697-ce84fa8d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUncheckedNoTracing"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"74504988804317184275376196227669502935",
"64604051068534735919438471593459324517",
"264032285439559502121735018273629710098",
"289489386903578983032764139155888648136"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-d82cd09f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "120448520633686900724677494436118456155",
"length": 2320
},
"id": "ASB-A-382064697-eabcec52",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java",
"function": "doRunInstall"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "64780018768570113469301475435210579615",
"length": 370
},
"id": "ASB-A-382064697-f81feced",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/994366d40c9519f00a9a67c554f7b459ebf587ee",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createProfileForUserEvenWhenDisallowedWithThrow"
}
}
]
}platform/frameworks/base
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/a44611648b44ceee8e2337dfba92398475c72602",
"https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "64780018768570113469301475435210579615",
"length": 370
},
"id": "ASB-A-382064697-09e1cf72",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createProfileForUserEvenWhenDisallowedWithThrow"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"14772053645181522000987962851126211530",
"227761515714333368153267562943197058338",
"30553271854399821911430151162523546701",
"12044598849916242489712041402734552565",
"140338184364959144181555492380112028213",
"146515428954072345816215875577048560455",
"201250058353431098371160763507158865544",
"248135402116814917649790765438612390818",
"225857640894948988125570667013732950828",
"22298829405765706354979111637225275075",
"57550227891245463901593089792444730372",
"291537540722635373363822032206293663313",
"132170913934337389072339114333742057110",
"92373887658774802105699687273134218582",
"35329585851768344034902477313977478154",
"320489561478218510911055860912388471073",
"163640077810886176606453616072457449449",
"104389416607429061816407048207724230764",
"85899813483396326703996046452353127467",
"99222728646417523943383492481593997149",
"111611775825338590526465658875669106814",
"271012378258734872590532497664300094816",
"121032097389044223826540740451847504943",
"269572462316657728537262710980800363544",
"278252279826989305834322426814711370044",
"240373764971395997482810365967412397979",
"236819011566797007276578667714886936047",
"124275175712902712947959079776945059162",
"47434570003666960993569814375933681807",
"127505183434171093562501252442183896164",
"51383959777506934752734865903404984574",
"49223158343559934932902914506402761402",
"106199054525076950669382555991193386903"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-1be7dbc7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "43705205980507122883841721036154879849",
"length": 585
},
"id": "ASB-A-382064697-44017203",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a44611648b44ceee8e2337dfba92398475c72602",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "maybeSetDefaultRestrictionsForAdminLocked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "317325711700405363142805252702999144174",
"length": 292
},
"id": "ASB-A-382064697-4523eb63",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserEvenWhenDisallowed"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"74504988804317184275376196227669502935",
"64604051068534735919438471593459324517",
"264032285439559502121735018273629710098",
"289489386903578983032764139155888648136"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-47d260ec",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"110028099031019592370658018593064083230",
"145388631805707220995030462016260189170",
"221505264435735546361073243576261494647"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-4f368cc4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerInternal.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"48823121485882337507163198033332153753",
"275897575881193917579578692740484270033",
"219215098006380603010452053428819740150",
"292858049708248689904821214517747780970",
"272954899650197294980631001754259384409",
"213367217938184356959272053901205918159",
"51111224316831074887218713710086659508",
"290856007717603845203313472485040181982",
"28089615392901685792746017882763576125"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-5653d456",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "45217584021727973162211011239092026576",
"length": 681
},
"id": "ASB-A-382064697-5eceb5d9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternal"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"211601366272437661702297477758595127233",
"301647004348719132627837136196104149432",
"171651002856259250430475358606164368881",
"75860860137678555008779187628510043152",
"209012513319277403194127929833174849709",
"259585910838315443098635112997050882773",
"116250089348093595036040322505212825642",
"309109170120678965827502837765623948383",
"258442153241993590594655303302790217479",
"153269852780798303387034453402776492980",
"226367982520377085424516939470711875624",
"49774658792218453547861132852751678997",
"221489397448192158586721076801650424095",
"94776618913450816050629701049683028700",
"81629392541359886776958493542756584125",
"78695932896753832658305982620015855507",
"291583578611445269561935557909942464728",
"296503738037062459419108238187145530940",
"158514294911809061231287391213728583404",
"98287820103712727010314192052204609374",
"158005560851213027205094130665553963515",
"292147122359403623709237959488040430438",
"178534460224201609432423572120631853230",
"23275847615953170536064997547282817108",
"317329749179854947103627529056427991213",
"30843884384107971596093652099174749351",
"83186519832807817036239290864287224999",
"88111248641408989997727808645549706619",
"105135349804760838859480469610730392589",
"214581546429340174269340982897025786731",
"12187984363723189465463342294546725804",
"270333302221302137678939208514218429899",
"180839746610351261037055012321275883736"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-82af94a6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a44611648b44ceee8e2337dfba92398475c72602",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "97545475341012543750121374067679732293",
"length": 2180
},
"id": "ASB-A-382064697-97ce0306",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java",
"function": "doRunInstall"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "267685587212998132757710847441011568132",
"length": 746
},
"id": "ASB-A-382064697-a59aa72b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUnchecked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "165725940644422204890471328321021134965",
"length": 2556
},
"id": "ASB-A-382064697-d533f592",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "createAndProvisionManagedProfile"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "193661644486428553974174657300114049996",
"length": 1689
},
"id": "ASB-A-382064697-d695f481",
"match_only_versions": [
"15"
],
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a44611648b44ceee8e2337dfba92398475c72602",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "setProfileOwner"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"174228757297823701920680957584731676623",
"166053393031591928948773641824388247265",
"9990876026229777043179608973513179347",
"106701537664105913920276549471934026419"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-dd1f232c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a44611648b44ceee8e2337dfba92398475c72602",
"target": {
"file": "services/core/java/com/android/server/pm/UserRestrictionsUtils.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "116146608074088517932409432688335855303",
"length": 6521
},
"id": "ASB-A-382064697-e0d70232",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUncheckedNoTracing"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "76104886934084201348106886082056035250",
"length": 545
},
"id": "ASB-A-382064697-f8a61b82",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/63c6b64431826ecf2741e2f0640dafe372a06cf8",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "preCreateUserWithThrow"
}
}
]
}platform/frameworks/base
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "65366818214702380977038691053863001906",
"length": 2821
},
"id": "ASB-A-382064697-261e5581",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "createAndProvisionManagedProfile"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"48823121485882337507163198033332153753",
"275897575881193917579578692740484270033",
"219215098006380603010452053428819740150",
"292858049708248689904821214517747780970",
"272954899650197294980631001754259384409",
"213367217938184356959272053901205918159",
"51111224316831074887218713710086659508",
"290856007717603845203313472485040181982",
"28089615392901685792746017882763576125",
"118744360503583013402434084783148532469",
"62209890670379483524858894411285588998",
"35020831367229615967587512719811923722",
"10013825530143243873436404789591552592",
"199022457039654690580861528308934094797",
"101993235741327343302201713001011923599",
"91522304252262197922171532931005862544",
"88308704753556983020741736119009893663",
"323506059996108311263497410145827372883"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-46f2dd62",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "317325711700405363142805252702999144174",
"length": 292
},
"id": "ASB-A-382064697-4cb13b9c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserEvenWhenDisallowed"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"74504988804317184275376196227669502935",
"64604051068534735919438471593459324517",
"264032285439559502121735018273629710098",
"289489386903578983032764139155888648136"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-4ef22d16",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "106831295511673246957872739202836282327",
"length": 6561
},
"id": "ASB-A-382064697-646c21f7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUncheckedNoTracing"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "188616972527949366673140090472391534932",
"length": 644
},
"id": "ASB-A-382064697-773a4c09",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "createProfileForUser"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "76104886934084201348106886082056035250",
"length": 545
},
"id": "ASB-A-382064697-7df3fffe",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "preCreateUserWithThrow"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "178482371636458589658293005529206275790",
"length": 758
},
"id": "ASB-A-382064697-7ec57523",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUnchecked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "238936130933314296674631662931475627581",
"length": 879
},
"id": "ASB-A-382064697-a28dfa65",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternal"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "120448520633686900724677494436118456155",
"length": 2320
},
"id": "ASB-A-382064697-a2f8ac71",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java",
"function": "doRunInstall"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "64780018768570113469301475435210579615",
"length": 370
},
"id": "ASB-A-382064697-b0965dd4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createProfileForUserEvenWhenDisallowedWithThrow"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"14772053645181522000987962851126211530",
"227761515714333368153267562943197058338",
"30553271854399821911430151162523546701",
"12044598849916242489712041402734552565",
"140338184364959144181555492380112028213",
"146515428954072345816215875577048560455",
"201250058353431098371160763507158865544",
"248135402116814917649790765438612390818",
"58107733082040819824577111055700815026",
"216470262348431480951837737281342289538",
"57550227891245463901593089792444730372",
"291537540722635373363822032206293663313",
"19924826946174715561589120211181962321",
"88182519477336101360416708685802976978",
"313526312937672544306451668432186758995",
"161137157391750092220652849064452203893",
"191785541895896614982792789077871547186",
"104389416607429061816407048207724230764",
"85899813483396326703996046452353127467",
"99222728646417523943383492481593997149",
"111611775825338590526465658875669106814",
"271012378258734872590532497664300094816",
"121032097389044223826540740451847504943",
"269572462316657728537262710980800363544",
"278252279826989305834322426814711370044",
"240373764971395997482810365967412397979",
"236819011566797007276578667714886936047",
"124275175712902712947959079776945059162",
"275510049772466395909853316546341215214",
"127505183434171093562501252442183896164",
"51383959777506934752734865903404984574",
"49223158343559934932902914506402761402",
"106199054525076950669382555991193386903"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-b9018bdb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"110028099031019592370658018593064083230",
"145388631805707220995030462016260189170",
"221505264435735546361073243576261494647"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-dbab1fe1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/a9b8766ad8b4a88e729e10cbdfd1e187eb636641",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerInternal.java"
}
}
]
}platform/frameworks/base
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "63232995700918957214348334260679696818",
"length": 550
},
"id": "ASB-A-382064697-021df83e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "preCreateUserWithThrow"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "188616972527949366673140090472391534932",
"length": 644
},
"id": "ASB-A-382064697-2beb59b7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "createProfileForUser"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "91785348251596589510033904769184578706",
"length": 2827
},
"id": "ASB-A-382064697-445125ca",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "createAndProvisionManagedProfile"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "120448520633686900724677494436118456155",
"length": 2320
},
"id": "ASB-A-382064697-49d10429",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java",
"function": "doRunInstall"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "317325711700405363142805252702999144174",
"length": 292
},
"id": "ASB-A-382064697-67aedecf",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserEvenWhenDisallowed"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "219440457220191972011871929609469447583",
"length": 6371
},
"id": "ASB-A-382064697-747524b0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUncheckedNoTracing"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"48823121485882337507163198033332153753",
"275897575881193917579578692740484270033",
"219215098006380603010452053428819740150",
"292858049708248689904821214517747780970",
"272954899650197294980631001754259384409",
"213367217938184356959272053901205918159",
"51111224316831074887218713710086659508",
"290856007717603845203313472485040181982",
"28089615392901685792746017882763576125",
"118744360503583013402434084783148532469",
"62209890670379483524858894411285588998",
"35020831367229615967587512719811923722",
"10013825530143243873436404789591552592",
"199022457039654690580861528308934094797",
"101993235741327343302201713001011923599",
"91522304252262197922171532931005862544",
"88308704753556983020741736119009893663",
"323506059996108311263497410145827372883"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-7805612a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"74504988804317184275376196227669502935",
"64604051068534735919438471593459324517",
"264032285439559502121735018273629710098",
"289489386903578983032764139155888648136"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-796cc682",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"207337957451303591687978103913927136933",
"47168159145185666126187543447414774925",
"261454407771322424317487794452380959600",
"308469589454959482090043189291912415189",
"207337957451303591687978103913927136933",
"68754362139165714965547539538784330768",
"1884156336455292042888705573315773595",
"128121872022908993969075737555086927254"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-7be503f8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/HsumBootUserInitializer.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "178482371636458589658293005529206275790",
"length": 758
},
"id": "ASB-A-382064697-83864d9a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUnchecked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "64780018768570113469301475435210579615",
"length": 370
},
"id": "ASB-A-382064697-92d756e8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createProfileForUserEvenWhenDisallowedWithThrow"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "275840766849285987953517721836136092412",
"length": 766
},
"id": "ASB-A-382064697-985598cf",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/HsumBootUserInitializer.java",
"function": "preCreateInitialUserCreateMainUserIfNeeded"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "18272672610803644878063699002194019428",
"length": 619
},
"id": "ASB-A-382064697-ab6c61b4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/HsumBootUserInitializer.java",
"function": "createInitialUser"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"110028099031019592370658018593064083230",
"145388631805707220995030462016260189170",
"221505264435735546361073243576261494647"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-c8352c8f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerInternal.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"14772053645181522000987962851126211530",
"227761515714333368153267562943197058338",
"30553271854399821911430151162523546701",
"12044598849916242489712041402734552565",
"140338184364959144181555492380112028213",
"146515428954072345816215875577048560455",
"201250058353431098371160763507158865544",
"248135402116814917649790765438612390818",
"58107733082040819824577111055700815026",
"216470262348431480951837737281342289538",
"293530623331423290027877985434224017857",
"117887190187203881026168994981712662870",
"294907390601697900084343080972027899395",
"74091873132258298264621217918800998173",
"313526312937672544306451668432186758995",
"161137157391750092220652849064452203893",
"191785541895896614982792789077871547186",
"104389416607429061816407048207724230764",
"85899813483396326703996046452353127467",
"99222728646417523943383492481593997149",
"111611775825338590526465658875669106814",
"300481933341723122553837771456434987814",
"212162899689087846268785324255707191628",
"172967198813184847268655510130006184926",
"321978193243444964435832713484748106603",
"240373764971395997482810365967412397979",
"236819011566797007276578667714886936047",
"124275175712902712947959079776945059162",
"233862666514936383531026545431291297955",
"127505183434171093562501252442183896164",
"51383959777506934752734865903404984574",
"49223158343559934932902914506402761402",
"106199054525076950669382555991193386903"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-ed22c061",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "238936130933314296674631662931475627581",
"length": 879
},
"id": "ASB-A-382064697-fd6bb784",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e446420ba1fe7b89f1509c09358f19f4e065d2b4",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternal"
}
}
]
}platform/frameworks/base
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "302435959459819134068081302152057359294",
"length": 6359
},
"id": "ASB-A-382064697-0f593b84",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUncheckedNoTracing"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"207337957451303591687978103913927136933",
"47168159145185666126187543447414774925",
"261454407771322424317487794452380959600",
"308469589454959482090043189291912415189",
"207337957451303591687978103913927136933",
"68754362139165714965547539538784330768",
"1884156336455292042888705573315773595",
"128121872022908993969075737555086927254"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-102ac4cb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/HsumBootUserInitializer.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "201172061625538965818632368220504595811",
"length": 2823
},
"id": "ASB-A-382064697-1d001437",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "createAndProvisionManagedProfile"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "120448520633686900724677494436118456155",
"length": 2320
},
"id": "ASB-A-382064697-2fb68754",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java",
"function": "doRunInstall"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"110028099031019592370658018593064083230",
"145388631805707220995030462016260189170",
"221505264435735546361073243576261494647"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-326f1cb4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerInternal.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "18272672610803644878063699002194019428",
"length": 619
},
"id": "ASB-A-382064697-48e92542",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/HsumBootUserInitializer.java",
"function": "createInitialUser"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "63232995700918957214348334260679696818",
"length": 550
},
"id": "ASB-A-382064697-4ce41996",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "preCreateUserWithThrow"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "317325711700405363142805252702999144174",
"length": 292
},
"id": "ASB-A-382064697-4d2ed45b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserEvenWhenDisallowed"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "178482371636458589658293005529206275790",
"length": 758
},
"id": "ASB-A-382064697-91a607ce",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUnchecked"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"74504988804317184275376196227669502935",
"64604051068534735919438471593459324517",
"264032285439559502121735018273629710098",
"289489386903578983032764139155888648136"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-97d1b78d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "275840766849285987953517721836136092412",
"length": 766
},
"id": "ASB-A-382064697-ac9b064f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/HsumBootUserInitializer.java",
"function": "legacyCreateMainUserIfNeeded"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "64780018768570113469301475435210579615",
"length": 370
},
"id": "ASB-A-382064697-bf0b09a5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createProfileForUserEvenWhenDisallowedWithThrow"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"48823121485882337507163198033332153753",
"275897575881193917579578692740484270033",
"219215098006380603010452053428819740150",
"292858049708248689904821214517747780970",
"272954899650197294980631001754259384409",
"213367217938184356959272053901205918159",
"51111224316831074887218713710086659508",
"290856007717603845203313472485040181982",
"28089615392901685792746017882763576125",
"118744360503583013402434084783148532469",
"62209890670379483524858894411285588998",
"35020831367229615967587512719811923722",
"10013825530143243873436404789591552592",
"199022457039654690580861528308934094797",
"101993235741327343302201713001011923599",
"91522304252262197922171532931005862544",
"88308704753556983020741736119009893663",
"323506059996108311263497410145827372883"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-d5920952",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "188616972527949366673140090472391534932",
"length": 644
},
"id": "ASB-A-382064697-f65cead8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "createProfileForUser"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"14772053645181522000987962851126211530",
"227761515714333368153267562943197058338",
"30553271854399821911430151162523546701",
"12044598849916242489712041402734552565",
"140338184364959144181555492380112028213",
"146515428954072345816215875577048560455",
"201250058353431098371160763507158865544",
"248135402116814917649790765438612390818",
"58107733082040819824577111055700815026",
"216470262348431480951837737281342289538",
"293530623331423290027877985434224017857",
"117887190187203881026168994981712662870",
"294907390601697900084343080972027899395",
"74091873132258298264621217918800998173",
"313526312937672544306451668432186758995",
"161137157391750092220652849064452203893",
"191785541895896614982792789077871547186",
"104389416607429061816407048207724230764",
"85899813483396326703996046452353127467",
"99222728646417523943383492481593997149",
"111611775825338590526465658875669106814",
"300481933341723122553837771456434987814",
"212162899689087846268785324255707191628",
"172967198813184847268655510130006184926",
"321978193243444964435832713484748106603",
"240373764971395997482810365967412397979",
"236819011566797007276578667714886936047",
"124275175712902712947959079776945059162",
"233862666514936383531026545431291297955",
"127505183434171093562501252442183896164",
"51383959777506934752734865903404984574",
"49223158343559934932902914506402761402",
"106199054525076950669382555991193386903"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-f8f52a7b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "212817387949437445134855508372127189184",
"length": 1058
},
"id": "ASB-A-382064697-fbf77252",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0821e223d2d989c7c3b3820faa063e982aed6dc7",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternal"
}
}
]
}platform/frameworks/base
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/3461e84908b46b6fe82ac391d43a43f23c0b1d3e",
"https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"174740854798690214126788789090856177660",
"166053393031591928948773641824388247265",
"9990876026229777043179608973513179347",
"106701537664105913920276549471934026419"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-33acc0e9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3461e84908b46b6fe82ac391d43a43f23c0b1d3e",
"target": {
"file": "services/core/java/com/android/server/pm/UserRestrictionsUtils.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "84244152451759082234515579699794161297",
"length": 5827
},
"id": "ASB-A-382064697-3dfaf502",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUncheckedNoTracing"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"14772053645181522000987962851126211530",
"227761515714333368153267562943197058338",
"30553271854399821911430151162523546701",
"12044598849916242489712041402734552565",
"140338184364959144181555492380112028213",
"146515428954072345816215875577048560455",
"201250058353431098371160763507158865544",
"248135402116814917649790765438612390818",
"225857640894948988125570667013732950828",
"22298829405765706354979111637225275075",
"57550227891245463901593089792444730372",
"291537540722635373363822032206293663313",
"132170913934337389072339114333742057110",
"92373887658774802105699687273134218582",
"35329585851768344034902477313977478154",
"320489561478218510911055860912388471073",
"163640077810886176606453616072457449449",
"104389416607429061816407048207724230764",
"85899813483396326703996046452353127467",
"99222728646417523943383492481593997149",
"111611775825338590526465658875669106814",
"271012378258734872590532497664300094816",
"121032097389044223826540740451847504943",
"337016947793913838070829948424035429972",
"161339371467573275416046022542480670916",
"69270765199478742176014448007022162502",
"89162066271680128961104180860822693344",
"160801818049114588912505758334710164176",
"181982008337517271488365129973862916587",
"37702267888826597213609347794477249947",
"190777647878164929139843194607313818320",
"291977124996645018261122217586613297924",
"65101162137723403767971325154040916831",
"73877492462589661763605331913000773558",
"236819011566797007276578667714886936047",
"41003304413717434528869486774403935054",
"58283573755681154538813030501697030294",
"172471448967699530137496487056603136103",
"127505183434171093562501252442183896164",
"51383959777506934752734865903404984574",
"49223158343559934932902914506402761402",
"106199054525076950669382555991193386903"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-3feb2ebb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "206971287453419904853728738719519662509",
"length": 2571
},
"id": "ASB-A-382064697-42a97c37",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "createAndProvisionManagedProfile"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "267685587212998132757710847441011568132",
"length": 746
},
"id": "ASB-A-382064697-44692ede",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternalUnchecked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "64780018768570113469301475435210579615",
"length": 370
},
"id": "ASB-A-382064697-4f406548",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createProfileForUserEvenWhenDisallowedWithThrow"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "55803519424153417648053042671774075396",
"length": 581
},
"id": "ASB-A-382064697-55faccd5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserInternal"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"190269226862513634446905725372549120014",
"89638197922423624111177667977960875791",
"169080360803963677980732311552706370890"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-65bf621c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"48823121485882337507163198033332153753",
"275897575881193917579578692740484270033",
"219215098006380603010452053428819740150",
"292858049708248689904821214517747780970",
"272954899650197294980631001754259384409",
"213367217938184356959272053901205918159",
"51111224316831074887218713710086659508",
"290856007717603845203313472485040181982",
"28089615392901685792746017882763576125"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-b54bb261",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"110028099031019592370658018593064083230",
"145388631805707220995030462016260189170",
"221505264435735546361073243576261494647"
],
"threshold": 0.9
},
"id": "ASB-A-382064697-bbecfc55",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerInternal.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "317325711700405363142805252702999144174",
"length": 292
},
"id": "ASB-A-382064697-cd5ec981",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "createUserEvenWhenDisallowed"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "120527104666010370460036098297882483495",
"length": 1663
},
"id": "ASB-A-382064697-dcac669f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerShellCommand.java",
"function": "doRunInstall"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "76104886934084201348106886082056035250",
"length": 545
},
"id": "ASB-A-382064697-ff8be3a9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b3ab76ccc1e432f23b729a8ae7fdc1b43bfb97b6",
"target": {
"file": "services/core/java/com/android/server/pm/UserManagerService.java",
"function": "preCreateUserWithThrow"
}
}
]
}