ASB-A-391895151

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-391895151.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-391895151
Aliases
Published
2025-12-01T00:00:00Z
Modified
2026-03-30T15:20:36.199724Z
Summary
[none]
Details

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2-next:0
Fixed
16-qpr2-next:2025-12-01

Affected versions

Other
16-qpr2-next

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/a987e9d91a93b5945ac7d6477e6d34cd2715f2ec",
        "https://android.googlesource.com/platform/frameworks/base/+/8ccb7103a2d58ec2cee0a1cf5f8c7fefa5e8e8ee"
    ],
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java",
                "function": "disassociate"
            },
            "id": "ASB-A-391895151-01f4a8b4",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/a987e9d91a93b5945ac7d6477e6d34cd2715f2ec",
            "digest": {
                "function_hash": "129772020976561085994699083632266106004",
                "length": 1536.0
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java",
                "function": "disassociate"
            },
            "id": "ASB-A-391895151-1ec9bc1f",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8ccb7103a2d58ec2cee0a1cf5f8c7fefa5e8e8ee",
            "digest": {
                "function_hash": "327911110594509508193248785489282187005",
                "length": 2057.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            },
            "id": "ASB-A-391895151-206d20a7",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/a987e9d91a93b5945ac7d6477e6d34cd2715f2ec",
            "digest": {
                "line_hashes": [
                    "233450484694403689312905069476317773670",
                    "138464145943999492238989928886733291777",
                    "284961305800187896668817688049134642322",
                    "150175408405886143688249393240418029690",
                    "83704593953707509883421006997769147505",
                    "254104190437679276928894579154156993618",
                    "30685602022434209311629179246751576243",
                    "92363621112148120404404932725039195285"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java"
            },
            "id": "ASB-A-391895151-9e77c3cf",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/a987e9d91a93b5945ac7d6477e6d34cd2715f2ec",
            "digest": {
                "line_hashes": [
                    "111196623312269078544605534748940278352",
                    "110616766088686729141488890429897443604",
                    "160881396359160971940494073742754141084",
                    "242852168627118547095630167348533587375",
                    "333158382004397226329177941036085169796",
                    "110693862293711561994493765854341321999",
                    "35527390653189312790148240165913348329",
                    "65390765202743514593722661444993442390",
                    "260615246397730610615221522384519515628",
                    "257236602800045795613224395271099683030",
                    "241566093871299448453362607487562564254",
                    "282420350620586888362415846865081529786",
                    "36668858271810843708514905438556587764",
                    "22912693543173609837291971538841278703",
                    "38990807379158312806838961111480277831",
                    "10872868273359013040991485356049429448",
                    "215680779770145337015270169130232036675",
                    "200409215949431583964729816389060924750",
                    "263704220994384047272629482241240029649",
                    "189223645562335092854015427713124847713",
                    "173807312309976425354510982866422257705",
                    "259211609069869359927618729133846706765",
                    "297453802949158459445721350727562036010",
                    "244335141723197415211244633316997433990",
                    "170849742271529749083465805094643416376",
                    "302241669565149768402960608396931291883",
                    "36112839976616695843671765269044348922",
                    "256314904127862190810145673243978102936",
                    "255406843946423947995190466422920562248"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java",
                "function": "DisassociationProcessor"
            },
            "id": "ASB-A-391895151-9f8030de",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/a987e9d91a93b5945ac7d6477e6d34cd2715f2ec",
            "digest": {
                "function_hash": "208128269504405117532978744576234801031",
                "length": 507.0
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function": "CompanionDeviceManagerService"
            },
            "id": "ASB-A-391895151-ad4b8ca5",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/a987e9d91a93b5945ac7d6477e6d34cd2715f2ec",
            "digest": {
                "function_hash": "177874620361916885754515658975249605089",
                "length": 1717.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java"
            },
            "id": "ASB-A-391895151-ccf54274",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8ccb7103a2d58ec2cee0a1cf5f8c7fefa5e8e8ee",
            "digest": {
                "line_hashes": [
                    "255327478129139300129718502577731965361",
                    "239972992042585999189843317083123076439",
                    "319719145941931740202553766395383772502",
                    "274061797965643900433509729372066899509",
                    "300890866778381602212615534380817286601",
                    "215288221154071454429772096934145083751",
                    "316750231380517300323929419028860390617",
                    "285789366942898967985544276953543916664",
                    "197248524694356321290422159378229200183",
                    "116164169796375089716059987539356891141",
                    "191404283547045081668308787916736279123",
                    "172682626788305707442105268041734973124",
                    "294887661509480919119411513688770116402",
                    "124844478986581506974226781462365629758",
                    "310526979497500897162248771008504189279",
                    "285341660945159177563129552567544032328"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/utils/RolesUtils.java"
            },
            "id": "ASB-A-391895151-e8025c90",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8ccb7103a2d58ec2cee0a1cf5f8c7fefa5e8e8ee",
            "digest": {
                "line_hashes": [
                    "276763893817790046645860510362154472450",
                    "18103306157331287507216727705235894255",
                    "191748869054474123342487268718033339802"
                ],
                "threshold": 0.9
            }
        }
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-391895151.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-12-01

Affected versions

Other
15

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/d94e799b3bb8d32e34a7205a0ae9b991ccfbce7d",
        "https://android.googlesource.com/platform/frameworks/base/+/56058a86e795905cd1f143edfa7fd5d030a4dde8"
    ],
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java",
                "function": "disassociate"
            },
            "id": "ASB-A-391895151-489df484",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/56058a86e795905cd1f143edfa7fd5d030a4dde8",
            "digest": {
                "function_hash": "272703632037787100679048221465759858817",
                "length": 1957.0
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java",
                "function": "disassociate"
            },
            "id": "ASB-A-391895151-7347485c",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d94e799b3bb8d32e34a7205a0ae9b991ccfbce7d",
            "digest": {
                "function_hash": "89765171444685219164185085041419054357",
                "length": 1511.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/utils/RolesUtils.java"
            },
            "id": "ASB-A-391895151-8a17b278",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/56058a86e795905cd1f143edfa7fd5d030a4dde8",
            "digest": {
                "line_hashes": [
                    "306987676259496994350923677488673890633",
                    "250367180468648249582542409203466783012",
                    "258387110746684401326204796848321589438",
                    "264245825520333050248499992324575194542",
                    "330506515604873636788492076197318353326",
                    "85821341050153616048893670261462658578",
                    "263297805258968390823443957669031743913",
                    "336743406131529224916958948333259606921",
                    "55491826283385506769973608475124969722"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function": "CompanionDeviceManagerService"
            },
            "id": "ASB-A-391895151-a18870b0",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d94e799b3bb8d32e34a7205a0ae9b991ccfbce7d",
            "digest": {
                "function_hash": "146855854981538191255616939917117239734",
                "length": 1723.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            },
            "id": "ASB-A-391895151-a5d609a6",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d94e799b3bb8d32e34a7205a0ae9b991ccfbce7d",
            "digest": {
                "line_hashes": [
                    "156256128823628364413463163467448562323",
                    "138464145943999492238989928886733291777",
                    "284961305800187896668817688049134642322",
                    "150175408405886143688249393240418029690",
                    "279994441690546146155675874587311513385",
                    "97339584776072478278888538923430303134",
                    "245430083527903818408559690458128665285",
                    "103252411004572993218686040690785275837"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java"
            },
            "id": "ASB-A-391895151-bc6bb54a",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d94e799b3bb8d32e34a7205a0ae9b991ccfbce7d",
            "digest": {
                "line_hashes": [
                    "111196623312269078544605534748940278352",
                    "110616766088686729141488890429897443604",
                    "160881396359160971940494073742754141084",
                    "242852168627118547095630167348533587375",
                    "333158382004397226329177941036085169796",
                    "110693862293711561994493765854341321999",
                    "35527390653189312790148240165913348329",
                    "65390765202743514593722661444993442390",
                    "260615246397730610615221522384519515628",
                    "257236602800045795613224395271099683030",
                    "241566093871299448453362607487562564254",
                    "282420350620586888362415846865081529786",
                    "37579490374002109506573389993260889557",
                    "22912693543173609837291971538841278703",
                    "38990807379158312806838961111480277831",
                    "10872868273359013040991485356049429448",
                    "215680779770145337015270169130232036675",
                    "200409215949431583964729816389060924750",
                    "263704220994384047272629482241240029649",
                    "189223645562335092854015427713124847713",
                    "173807312309976425354510982866422257705",
                    "259211609069869359927618729133846706765",
                    "297453802949158459445721350727562036010",
                    "82378363356450331220383062148083220937",
                    "242633707815806940377858966950243405903",
                    "276899591103302965669003875392687987500",
                    "55149035223364207167518211802122588653",
                    "281141790027412712882712786692511439927",
                    "269495098227559209171124291932179976057"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java",
                "function": "DisassociationProcessor"
            },
            "id": "ASB-A-391895151-bf4d7453",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d94e799b3bb8d32e34a7205a0ae9b991ccfbce7d",
            "digest": {
                "function_hash": "208128269504405117532978744576234801031",
                "length": 507.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java"
            },
            "id": "ASB-A-391895151-d827b91d",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/56058a86e795905cd1f143edfa7fd5d030a4dde8",
            "digest": {
                "line_hashes": [
                    "39854240367872561254452524054252545165",
                    "312055600634312071336277045931329722610",
                    "319719145941931740202553766395383772502",
                    "274061797965643900433509729372066899509",
                    "212987062311535653679764542222835018706",
                    "215288221154071454429772096934145083751",
                    "316750231380517300323929419028860390617",
                    "285789366942898967985544276953543916664",
                    "197248524694356321290422159378229200183",
                    "116164169796375089716059987539356891141",
                    "191404283547045081668308787916736279123",
                    "172682626788305707442105268041734973124",
                    "294887661509480919119411513688770116402",
                    "124844478986581506974226781462365629758",
                    "310526979497500897162248771008504189279",
                    "285341660945159177563129552567544032328"
                ],
                "threshold": 0.9
            }
        }
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-391895151.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2025-12-01

Affected versions

Other
16

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/f243250a5a1687615f55447de3dca31b397821f1",
        "https://android.googlesource.com/platform/frameworks/base/+/ffa1ea81ac0c11f9d0c5a81b6e85772c23743210"
    ],
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java",
                "function": "DisassociationProcessor"
            },
            "id": "ASB-A-391895151-0bb180bf",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/f243250a5a1687615f55447de3dca31b397821f1",
            "digest": {
                "function_hash": "208128269504405117532978744576234801031",
                "length": 507.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/utils/RolesUtils.java"
            },
            "id": "ASB-A-391895151-592a0f8d",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ffa1ea81ac0c11f9d0c5a81b6e85772c23743210",
            "digest": {
                "line_hashes": [
                    "306987676259496994350923677488673890633",
                    "250367180468648249582542409203466783012",
                    "154942273744793134284108373994550061433",
                    "284612631146438357330821079297475986502",
                    "289242440217541196182059746879150044531"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function": "CompanionDeviceManagerService"
            },
            "id": "ASB-A-391895151-607bda1a",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/f243250a5a1687615f55447de3dca31b397821f1",
            "digest": {
                "function_hash": "177874620361916885754515658975249605089",
                "length": 1717.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java"
            },
            "id": "ASB-A-391895151-73def64a",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ffa1ea81ac0c11f9d0c5a81b6e85772c23743210",
            "digest": {
                "line_hashes": [
                    "255327478129139300129718502577731965361",
                    "239972992042585999189843317083123076439",
                    "319719145941931740202553766395383772502",
                    "274061797965643900433509729372066899509",
                    "300890866778381602212615534380817286601",
                    "215288221154071454429772096934145083751",
                    "316750231380517300323929419028860390617",
                    "285789366942898967985544276953543916664",
                    "197248524694356321290422159378229200183",
                    "116164169796375089716059987539356891141",
                    "191404283547045081668308787916736279123",
                    "172682626788305707442105268041734973124",
                    "294887661509480919119411513688770116402",
                    "124844478986581506974226781462365629758",
                    "310526979497500897162248771008504189279",
                    "285341660945159177563129552567544032328"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java",
                "function": "disassociate"
            },
            "id": "ASB-A-391895151-8d06c35e",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ffa1ea81ac0c11f9d0c5a81b6e85772c23743210",
            "digest": {
                "function_hash": "129542484856546290855977335231139862194",
                "length": 1982.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            },
            "id": "ASB-A-391895151-af13b362",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/f243250a5a1687615f55447de3dca31b397821f1",
            "digest": {
                "line_hashes": [
                    "233450484694403689312905069476317773670",
                    "138464145943999492238989928886733291777",
                    "284961305800187896668817688049134642322",
                    "150175408405886143688249393240418029690",
                    "83704593953707509883421006997769147505",
                    "254104190437679276928894579154156993618",
                    "30685602022434209311629179246751576243",
                    "92363621112148120404404932725039195285"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java",
                "function": "disassociate"
            },
            "id": "ASB-A-391895151-b724469d",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/f243250a5a1687615f55447de3dca31b397821f1",
            "digest": {
                "function_hash": "129772020976561085994699083632266106004",
                "length": 1536.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/association/DisassociationProcessor.java"
            },
            "id": "ASB-A-391895151-f4447bb8",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/f243250a5a1687615f55447de3dca31b397821f1",
            "digest": {
                "line_hashes": [
                    "111196623312269078544605534748940278352",
                    "110616766088686729141488890429897443604",
                    "160881396359160971940494073742754141084",
                    "242852168627118547095630167348533587375",
                    "333158382004397226329177941036085169796",
                    "110693862293711561994493765854341321999",
                    "35527390653189312790148240165913348329",
                    "65390765202743514593722661444993442390",
                    "260615246397730610615221522384519515628",
                    "257236602800045795613224395271099683030",
                    "241566093871299448453362607487562564254",
                    "282420350620586888362415846865081529786",
                    "36668858271810843708514905438556587764",
                    "22912693543173609837291971538841278703",
                    "38990807379158312806838961111480277831",
                    "10872868273359013040991485356049429448",
                    "215680779770145337015270169130232036675",
                    "200409215949431583964729816389060924750",
                    "263704220994384047272629482241240029649",
                    "189223645562335092854015427713124847713",
                    "173807312309976425354510982866422257705",
                    "259211609069869359927618729133846706765",
                    "297453802949158459445721350727562036010",
                    "244335141723197415211244633316997433990",
                    "170849742271529749083465805094643416376",
                    "302241669565149768402960608396931291883",
                    "36112839976616695843671765269044348922",
                    "256314904127862190810145673243978102936",
                    "255406843946423947995190466422920562248"
                ],
                "threshold": 0.9
            }
        }
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-391895151.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-12-01

Affected versions

Other
13

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/c3c33a70f51717b0663225f2e4490e1384463cca",
        "https://android.googlesource.com/platform/frameworks/base/+/edebcf8c35ef4d678e139903a92433a0e9f19d73"
    ],
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function": "onAssociationChangedInternal"
            },
            "id": "ASB-A-391895151-01d90fcf",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3c33a70f51717b0663225f2e4490e1384463cca",
            "digest": {
                "function_hash": "29890315949837257664937957294284590736",
                "length": 503.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            },
            "id": "ASB-A-391895151-034df78e",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/edebcf8c35ef4d678e139903a92433a0e9f19d73",
            "digest": {
                "line_hashes": [
                    "269118845109656422351534861483809120602",
                    "134407070797929397961335489910589958636",
                    "336827049471319736342058240362868143295",
                    "238117677842753769745418312066380217713",
                    "4493138862372030183378553740725731938",
                    "314406025723043590085351019948976071130",
                    "180799179979543109761650192802852830306",
                    "250720053619378589152333733522792321016",
                    "308327032858913313409545021187827252250",
                    "185258182257966233539903910555801390013",
                    "234785494343687199293697508810147501977",
                    "232994678282660146738806563401032988544",
                    "191404283547045081668308787916736279123",
                    "106488068958741894746420371671320884466",
                    "296203795275199152370935387016202439723",
                    "196161703081774174210164658210116439091",
                    "24330567847276050912181555415484680539",
                    "285341660945159177563129552567544032328"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            },
            "id": "ASB-A-391895151-0e8d2b27",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3c33a70f51717b0663225f2e4490e1384463cca",
            "digest": {
                "line_hashes": [
                    "206857814786126941322516407327927784681",
                    "96185116157668927777267656130356840199",
                    "96630885225518829951170024466211655314",
                    "93505789209653322299540361301656201105",
                    "164950645593680378095109890364271738198",
                    "92023149127886067915070659992793732850",
                    "106228442408815019389491845553998894673",
                    "70203639626921298864861582290658292203",
                    "166854858581644605478039733155366445812",
                    "250562337289751585533383670744964105956",
                    "86140774689073175570682745039067690795",
                    "213285053164091708239455549660333170735",
                    "103389067554016675178547139780321330977",
                    "43798593756976830419822353309294028661",
                    "42802547434200191345534059904183996850",
                    "76710306172948272268939940151942794891"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function": "onAssociationChangedInternal"
            },
            "id": "ASB-A-391895151-6b7b6352",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/edebcf8c35ef4d678e139903a92433a0e9f19d73",
            "digest": {
                "function_hash": "232595064938759525929250071992479276588",
                "length": 992.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/RolesUtils.java"
            },
            "id": "ASB-A-391895151-de91f765",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/edebcf8c35ef4d678e139903a92433a0e9f19d73",
            "digest": {
                "line_hashes": [
                    "62941049047597701107604811865851098885",
                    "274145962762412729861794122786066571547",
                    "2813798995699955596501646920849802377",
                    "156782909839541261439736597285810333755",
                    "275946905494477356474447522574143191017",
                    "215865237660403225371680921679011239348",
                    "206106616837496120789080083720279239060",
                    "222863969333522057704262124703278969374"
                ],
                "threshold": 0.9
            }
        }
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-391895151.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-12-01

Affected versions

Other
14

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/c3c33a70f51717b0663225f2e4490e1384463cca",
        "https://android.googlesource.com/platform/frameworks/base/+/8577610ffd0b5db4589cb66badb86c855414d915"
    ],
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            },
            "id": "ASB-A-391895151-04ce642d",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8577610ffd0b5db4589cb66badb86c855414d915",
            "digest": {
                "line_hashes": [
                    "269118845109656422351534861483809120602",
                    "79978746676530757726673817504239133322",
                    "288336172136979509669137402562689448630",
                    "309988207650866775772718728985068753614",
                    "4493138862372030183378553740725731938",
                    "314406025723043590085351019948976071130",
                    "180799179979543109761650192802852830306",
                    "250720053619378589152333733522792321016",
                    "308327032858913313409545021187827252250",
                    "185258182257966233539903910555801390013",
                    "234785494343687199293697508810147501977",
                    "232994678282660146738806563401032988544",
                    "191404283547045081668308787916736279123",
                    "106488068958741894746420371671320884466",
                    "296203795275199152370935387016202439723",
                    "196161703081774174210164658210116439091",
                    "24330567847276050912181555415484680539",
                    "285341660945159177563129552567544032328"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function": "onAssociationChangedInternal"
            },
            "id": "ASB-A-391895151-84af527b",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3c33a70f51717b0663225f2e4490e1384463cca",
            "digest": {
                "function_hash": "29890315949837257664937957294284590736",
                "length": 503.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/RolesUtils.java"
            },
            "id": "ASB-A-391895151-a31a61af",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8577610ffd0b5db4589cb66badb86c855414d915",
            "digest": {
                "line_hashes": [
                    "62941049047597701107604811865851098885",
                    "274145962762412729861794122786066571547",
                    "2813798995699955596501646920849802377",
                    "186222902920813300254076640366382622693",
                    "330506515604873636788492076197318353326",
                    "333999596267622850455252676437833874463",
                    "144783868528967148133860606095967290399",
                    "206106616837496120789080083720279239060",
                    "222863969333522057704262124703278969374"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function": "onAssociationChangedInternal"
            },
            "id": "ASB-A-391895151-e389b621",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8577610ffd0b5db4589cb66badb86c855414d915",
            "digest": {
                "function_hash": "232595064938759525929250071992479276588",
                "length": 992.0
            }
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            },
            "id": "ASB-A-391895151-e54abc3a",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3c33a70f51717b0663225f2e4490e1384463cca",
            "digest": {
                "line_hashes": [
                    "206857814786126941322516407327927784681",
                    "96185116157668927777267656130356840199",
                    "96630885225518829951170024466211655314",
                    "93505789209653322299540361301656201105",
                    "164950645593680378095109890364271738198",
                    "92023149127886067915070659992793732850",
                    "106228442408815019389491845553998894673",
                    "70203639626921298864861582290658292203",
                    "166854858581644605478039733155366445812",
                    "250562337289751585533383670744964105956",
                    "86140774689073175570682745039067690795",
                    "213285053164091708239455549660333170735",
                    "103389067554016675178547139780321330977",
                    "43798593756976830419822353309294028661",
                    "42802547434200191345534059904183996850",
                    "76710306172948272268939940151942794891"
                ],
                "threshold": 0.9
            }
        }
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-391895151.json"