In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"signature_version": "v1",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f275f865d49559a6bb3ef9cecf0ab1dd7a7a0bc3",
"deprecated": false,
"digest": {
"line_hashes": [
"114073869964296632157670569846676702422",
"138036685855942454692411830274339593226",
"67012193583568258957577653494082010695",
"33822579946737582753612445129738211212",
"165196539129020205162904621788016353979",
"312948042545973441953087998528932458620",
"137241084698408732810802534606494397599"
],
"threshold": 0.9
},
"id": "ASB-A-392614656-0647f1b0",
"signature_type": "Line"
},
{
"signature_version": "v1",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java",
"function": "setHideSensitive"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e93d4b015c283e55cb08d68a499aab41f03e1272",
"deprecated": false,
"digest": {
"function_hash": "117689141328632545875697874019980723196",
"length": 982.0
},
"id": "ASB-A-392614656-9b1e022e",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e93d4b015c283e55cb08d68a499aab41f03e1272",
"deprecated": false,
"digest": {
"line_hashes": [
"151932585259494840766923844266771410858",
"283927817851978125243590851241301788138",
"264541952904611360498810476359673248735",
"273409044583803062562242237504551767652"
],
"threshold": 0.9
},
"id": "ASB-A-392614656-f46bb596",
"signature_type": "Line"
},
{
"signature_version": "v1",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java",
"function": "setHideSensitive"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f275f865d49559a6bb3ef9cecf0ab1dd7a7a0bc3",
"deprecated": false,
"digest": {
"function_hash": "11127489024241662912245881992082036758",
"length": 910.0
},
"id": "ASB-A-392614656-fa624535",
"signature_type": "Function"
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/f275f865d49559a6bb3ef9cecf0ab1dd7a7a0bc3",
"https://android.googlesource.com/platform/frameworks/base/+/e93d4b015c283e55cb08d68a499aab41f03e1272"
],
"spl": "2026-03-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"signature_version": "v1",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/323542be0bb081ba81568c49c73e4e307345d6e6",
"deprecated": false,
"digest": {
"line_hashes": [
"114073869964296632157670569846676702422",
"138036685855942454692411830274339593226",
"67012193583568258957577653494082010695",
"262397376547428500919071137322870358533",
"231175195535880071964175474672825256947",
"234301822308282951973179078116800446634",
"57658155187489598595004896077018161357",
"180755274449494196288971641692851866844"
],
"threshold": 0.9
},
"id": "ASB-A-392614656-67437da3",
"signature_type": "Line"
},
{
"signature_version": "v1",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java",
"function": "setHideSensitive"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/323542be0bb081ba81568c49c73e4e307345d6e6",
"deprecated": false,
"digest": {
"function_hash": "16250083509385765468384873263066633786",
"length": 968.0
},
"id": "ASB-A-392614656-ba65f736",
"signature_type": "Function"
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/323542be0bb081ba81568c49c73e4e307345d6e6"
],
"spl": "2026-03-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"signature_version": "v1",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java",
"function": "setHideSensitive"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c552db42595bc5d472d29a60e09566e59877c33b",
"deprecated": false,
"digest": {
"function_hash": "117689141328632545875697874019980723196",
"length": 982.0
},
"id": "ASB-A-392614656-7952b111",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c552db42595bc5d472d29a60e09566e59877c33b",
"deprecated": false,
"digest": {
"line_hashes": [
"151932585259494840766923844266771410858",
"283927817851978125243590851241301788138",
"264541952904611360498810476359673248735",
"273409044583803062562242237504551767652"
],
"threshold": 0.9
},
"id": "ASB-A-392614656-e41b5ded",
"signature_type": "Line"
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/c552db42595bc5d472d29a60e09566e59877c33b"
],
"spl": "2026-03-01",
"severity": "High"
}
{
"vanir_signatures": [
{
"signature_version": "v1",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java",
"function": "setHideSensitive"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e6db8cd89c62c658aa2da5f2493fb3b90f6fd9d6",
"deprecated": false,
"digest": {
"function_hash": "116751853752255457879965662367562212215",
"length": 773.0
},
"id": "ASB-A-392614656-ef9e6de7",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/e6db8cd89c62c658aa2da5f2493fb3b90f6fd9d6",
"deprecated": false,
"digest": {
"line_hashes": [
"114073869964296632157670569846676702422",
"138036685855942454692411830274339593226",
"67012193583568258957577653494082010695",
"33822579946737582753612445129738211212",
"231717195237696745366136764691926124068",
"105575591288388116249479318408086726908",
"180755274449494196288971641692851866844"
],
"threshold": 0.9
},
"id": "ASB-A-392614656-f2e42b6a",
"signature_type": "Line"
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/e6db8cd89c62c658aa2da5f2493fb3b90f6fd9d6"
],
"spl": "2026-03-01",
"severity": "High"
}