ASB-A-388828203

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-388828203.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-388828203
Aliases
Published
2025-06-01T00:00:00Z
Modified
2026-03-10T17:06:09.438720Z
Summary
[none]
Details

In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-next:0
Fixed
16-next:2025-06-01

Affected versions

Other
16-next

Ecosystem specific 

{
    "severity": "High",
    "spl": "2025-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/225602a7d0fecefb42c2456067d91f895c72f190"
    ],
    "vanir_signatures": [
        {
            "id": "ASB-A-388828203-103ca9da",
            "signature_type": "Function",
            "digest": {
                "function_hash": "97604033295306176689519601934035337094",
                "length": 300.0
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java",
                "function": "deliverOnProviderEnabledChanged"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/225602a7d0fecefb42c2456067d91f895c72f190",
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "id": "ASB-A-388828203-e6381b8b",
            "signature_type": "Line",
            "digest": {
                "line_hashes": [
                    "226333950258713943898902739111038947999",
                    "14931390740353749764197852673638337343",
                    "93375681817805300150664746634283902909",
                    "94018983333741030537591893244016041222",
                    "179647063392287317254105949618729427976",
                    "187204358426564850211416620950748524882",
                    "19320936136198328174170718737097938740",
                    "84120755700257044779529719329761715517"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/225602a7d0fecefb42c2456067d91f895c72f190",
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "id": "ASB-A-388828203-e98e6618",
            "signature_type": "Function",
            "digest": {
                "function_hash": "89442080645103971912730621748585174984",
                "length": 772.0
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java",
                "function": "deliverOnLocationChanged"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/225602a7d0fecefb42c2456067d91f895c72f190",
            "signature_version": "v1",
            "deprecated": false
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-388828203.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-06-01

Affected versions

Other
15

Ecosystem specific 

{
    "severity": "High",
    "spl": "2025-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/53cf3399f5691aab020d44efff5dd01eaf16257b"
    ],
    "vanir_signatures": [
        {
            "id": "ASB-A-388828203-867fb1ec",
            "signature_type": "Function",
            "digest": {
                "function_hash": "89442080645103971912730621748585174984",
                "length": 772.0
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java",
                "function": "deliverOnLocationChanged"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/53cf3399f5691aab020d44efff5dd01eaf16257b",
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "id": "ASB-A-388828203-8cf89c98",
            "signature_type": "Function",
            "digest": {
                "function_hash": "97604033295306176689519601934035337094",
                "length": 300.0
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java",
                "function": "deliverOnProviderEnabledChanged"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/53cf3399f5691aab020d44efff5dd01eaf16257b",
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "id": "ASB-A-388828203-c4c9a0cb",
            "signature_type": "Line",
            "digest": {
                "line_hashes": [
                    "226333950258713943898902739111038947999",
                    "14931390740353749764197852673638337343",
                    "93375681817805300150664746634283902909",
                    "94018983333741030537591893244016041222",
                    "179647063392287317254105949618729427976",
                    "187204358426564850211416620950748524882",
                    "19320936136198328174170718737097938740",
                    "84120755700257044779529719329761715517"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/53cf3399f5691aab020d44efff5dd01eaf16257b",
            "signature_version": "v1",
            "deprecated": false
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-388828203.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-06-01

Affected versions

Other
13

Ecosystem specific 

{
    "severity": "High",
    "spl": "2025-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/c5345cbf9c80e05d0511167353a162b2920fd07f"
    ],
    "vanir_signatures": [
        {
            "id": "ASB-A-388828203-56e63bd7",
            "signature_type": "Function",
            "digest": {
                "function_hash": "97604033295306176689519601934035337094",
                "length": 300.0
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java",
                "function": "deliverOnProviderEnabledChanged"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c5345cbf9c80e05d0511167353a162b2920fd07f",
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "id": "ASB-A-388828203-b068970b",
            "signature_type": "Line",
            "digest": {
                "line_hashes": [
                    "226333950258713943898902739111038947999",
                    "14931390740353749764197852673638337343",
                    "93375681817805300150664746634283902909",
                    "94018983333741030537591893244016041222",
                    "179647063392287317254105949618729427976",
                    "187204358426564850211416620950748524882",
                    "19320936136198328174170718737097938740",
                    "84120755700257044779529719329761715517"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c5345cbf9c80e05d0511167353a162b2920fd07f",
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "id": "ASB-A-388828203-f30d9762",
            "signature_type": "Function",
            "digest": {
                "function_hash": "89442080645103971912730621748585174984",
                "length": 772.0
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java",
                "function": "deliverOnLocationChanged"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c5345cbf9c80e05d0511167353a162b2920fd07f",
            "signature_version": "v1",
            "deprecated": false
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-388828203.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-06-01

Affected versions

Other
14

Ecosystem specific 

{
    "severity": "High",
    "spl": "2025-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/df4cbfbaecafd0bc0e3bf41708501e197ae57628"
    ],
    "vanir_signatures": [
        {
            "id": "ASB-A-388828203-2ec260f0",
            "signature_type": "Function",
            "digest": {
                "function_hash": "89442080645103971912730621748585174984",
                "length": 772.0
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java",
                "function": "deliverOnLocationChanged"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/df4cbfbaecafd0bc0e3bf41708501e197ae57628",
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "id": "ASB-A-388828203-9ba2fa3a",
            "signature_type": "Line",
            "digest": {
                "line_hashes": [
                    "226333950258713943898902739111038947999",
                    "14931390740353749764197852673638337343",
                    "93375681817805300150664746634283902909",
                    "94018983333741030537591893244016041222",
                    "179647063392287317254105949618729427976",
                    "187204358426564850211416620950748524882",
                    "19320936136198328174170718737097938740",
                    "84120755700257044779529719329761715517"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/df4cbfbaecafd0bc0e3bf41708501e197ae57628",
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "id": "ASB-A-388828203-f2a91e71",
            "signature_type": "Function",
            "digest": {
                "function_hash": "97604033295306176689519601934035337094",
                "length": 300.0
            },
            "target": {
                "file": "services/core/java/com/android/server/location/provider/LocationProviderManager.java",
                "function": "deliverOnProviderEnabledChanged"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/df4cbfbaecafd0bc0e3bf41708501e197ae57628",
            "signature_version": "v1",
            "deprecated": false
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-388828203.json"