ASB-A-383328827

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-383328827.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-383328827
Aliases
  • A-383328827
  • CVE-2025-26422
Published
2025-05-01T00:00:00Z
Modified
2026-09-10T15:43:18Z
Summary
[none]
Details

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-05-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/c617d697cdbef000cb416aefc08fc4a3cda4afa1"
    ],
    "severity": "High",
    "spl": "2025-05-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "307962230069551633409797844037804565870",
                    "195435758164607766111867084465255626687",
                    "100459581530201667367539293380375120994",
                    "65869109269366220216044413136000641265",
                    "150808033846765711730010162772074374039",
                    "49229083276072875436173481827860330314",
                    "263569157269227770725311902885171890912",
                    "8045441567988998432299067648344290672",
                    "260420910750437969770877208474464448596"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383328827-19a066d0",
            "match_only_versions": [
                "15"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c617d697cdbef000cb416aefc08fc4a3cda4afa1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "65039974368923320334274338561678664778",
                "length": 132
            },
            "exact_target_file_match_only": true,
            "id": "ASB-A-383328827-5aa2292d",
            "match_only_versions": [
                "15"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c617d697cdbef000cb416aefc08fc4a3cda4afa1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java",
                "function": "dump"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "245006804470477077414571673338369743527",
                "length": 5658
            },
            "id": "ASB-A-383328827-762d9c41",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c617d697cdbef000cb416aefc08fc4a3cda4afa1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowManagerService.java",
                "function": "doDump"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-383328827.json"