ASB-A-395643490

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-395643490.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-395643490
Aliases
Published
2025-06-01T00:00:00Z
Modified
2026-04-21T15:25:42.831358Z
Summary
[none]
Details

In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-next:0
Fixed
16-next:2025-06-01

Affected versions

Other
16-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "11559564152567410588841309182019922453",
                    "337809177206004408410866049586567079404",
                    "243609537335498261158402131136130791968",
                    "166773958120470170245871513799902712038",
                    "258350316179677958070410293551336327512",
                    "339113351835433311248376092654761255280",
                    "112717731568769911142188584640700964495",
                    "34428064101220884156165098493368061377",
                    "172952041559240759459238309440144356394"
                ]
            },
            "id": "ASB-A-395643490-8802a875",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/bb8a03783901dc92738fdd9af6f3ca88feda4bcf",
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            }
        },
        {
            "digest": {
                "length": 177.0,
                "function_hash": "75651737353455493637771210726560281246"
            },
            "id": "ASB-A-395643490-9b546d54",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/bb8a03783901dc92738fdd9af6f3ca88feda4bcf",
            "target": {
                "function": "isContentUriForOtherUser",
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/bb8a03783901dc92738fdd9af6f3ca88feda4bcf"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-06-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-395643490.json"
platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-06-01

Affected versions

Other
15

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "11559564152567410588841309182019922453",
                    "337809177206004408410866049586567079404",
                    "243609537335498261158402131136130791968",
                    "166773958120470170245871513799902712038",
                    "258350316179677958070410293551336327512",
                    "339113351835433311248376092654761255280",
                    "112717731568769911142188584640700964495",
                    "34428064101220884156165098493368061377",
                    "172952041559240759459238309440144356394"
                ]
            },
            "id": "ASB-A-395643490-54f37dff",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/230fa5b83f10c34983cbf7637faef6c060b8ef25",
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            }
        },
        {
            "digest": {
                "length": 177.0,
                "function_hash": "75651737353455493637771210726560281246"
            },
            "id": "ASB-A-395643490-a81667a3",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/230fa5b83f10c34983cbf7637faef6c060b8ef25",
            "target": {
                "function": "isContentUriForOtherUser",
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/230fa5b83f10c34983cbf7637faef6c060b8ef25"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-06-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-395643490.json"
platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-06-01

Affected versions

Other
13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "258350316179677958070410293551336327512",
                    "339113351835433311248376092654761255280",
                    "112717731568769911142188584640700964495",
                    "34428064101220884156165098493368061377",
                    "172952041559240759459238309440144356394"
                ]
            },
            "id": "ASB-A-395643490-2d0725e4",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/6bb33205dbc8e331a01356cc0ad6c36c27d1f6d9",
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            }
        },
        {
            "digest": {
                "length": 177.0,
                "function_hash": "75651737353455493637771210726560281246"
            },
            "id": "ASB-A-395643490-c77a9f0a",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/6bb33205dbc8e331a01356cc0ad6c36c27d1f6d9",
            "target": {
                "function": "isContentUriForOtherUser",
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/6bb33205dbc8e331a01356cc0ad6c36c27d1f6d9"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-06-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-395643490.json"
platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-06-01

Affected versions

Other
14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "258350316179677958070410293551336327512",
                    "339113351835433311248376092654761255280",
                    "112717731568769911142188584640700964495",
                    "34428064101220884156165098493368061377",
                    "172952041559240759459238309440144356394"
                ]
            },
            "id": "ASB-A-395643490-5311b3f4",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/73ef4306e91bc500769f2abbad94b61742c43602",
            "target": {
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            }
        },
        {
            "digest": {
                "length": 177.0,
                "function_hash": "75651737353455493637771210726560281246"
            },
            "id": "ASB-A-395643490-be0ab433",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/73ef4306e91bc500769f2abbad94b61742c43602",
            "target": {
                "function": "isContentUriForOtherUser",
                "file": "android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/73ef4306e91bc500769f2abbad94b61742c43602"
    ],
    "types": [
        "ID"
    ],
    "spl": "2025-06-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-395643490.json"