In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text in a permission popup due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"
],
"spl": "2025-09-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3",
"target": {
"file": "src/com/android/documentsui/base/Shared.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"37876277042882961774571832764351283716",
"269458287287563012433905513959353935107",
"104214980192024939577819818891578066066",
"237475930497240201939556655798515482635",
"255332656328781610514668830818884769674",
"137139273315319569512436360191619240345",
"30094808026787124630296350887046792166",
"162757685645516588871294181607580211833",
"251759438643673393520861235509435845431"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-1ac068b6"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"deprecated": false,
"digest": {
"function_hash": "194650644673830432688761763122559843523",
"length": 63.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-4e6a8688"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3",
"target": {
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"191796742205120856426560608536963393886",
"248392357307326825488608007907906247569",
"253664579616272120019020293042089869825",
"119640721929178758864171116543777235448",
"88614894248070539149749001153057611333",
"192236331321682913283373241993408442795"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-50da8fbf"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3",
"target": {
"function": "getCallingAppName",
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"deprecated": false,
"digest": {
"function_hash": "178697288976910297250387690471494008398",
"length": 41.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-51ee83b1"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3",
"target": {
"file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"135733718630255411048675363695623840220",
"318836206997742897580377676149031540748",
"131622419250986092245848435957312969760",
"230235986588592318493714804292173863471"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-69a92f25"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3",
"target": {
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"171545660746234868457838934132160564399",
"16620385211362110162349410932687275954",
"155380109869855992816550928114507728332",
"151033081719793388373943812935464634995",
"222863958647210402686620657406730865541"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-e62ea1a5"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/base/Shared.java"
},
"deprecated": false,
"digest": {
"function_hash": "34987950939639189483444613650854068396",
"length": 465.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-f617e44a"
}
],
"types": [
"EoP"
]
}{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"
],
"spl": "2025-09-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"deprecated": false,
"digest": {
"function_hash": "194650644673830432688761763122559843523",
"length": 63.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-1c59e327"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32",
"target": {
"file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"135733718630255411048675363695623840220",
"318836206997742897580377676149031540748",
"131622419250986092245848435957312969760",
"230235986588592318493714804292173863471"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-4cdccad9"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32",
"target": {
"function": "getCallingAppName",
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"deprecated": false,
"digest": {
"function_hash": "178697288976910297250387690471494008398",
"length": 41.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-84ec682c"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32",
"target": {
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"191796742205120856426560608536963393886",
"248392357307326825488608007907906247569",
"253664579616272120019020293042089869825",
"119640721929178758864171116543777235448",
"88614894248070539149749001153057611333",
"192236331321682913283373241993408442795"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-a68cfa3b"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/base/Shared.java"
},
"deprecated": false,
"digest": {
"function_hash": "34987950939639189483444613650854068396",
"length": 465.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-ae3f90ae"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32",
"target": {
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"171545660746234868457838934132160564399",
"16620385211362110162349410932687275954",
"155380109869855992816550928114507728332",
"151033081719793388373943812935464634995",
"222863958647210402686620657406730865541"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-daddfdb0"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32",
"target": {
"file": "src/com/android/documentsui/base/Shared.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"117381096027824942318502849749025878871",
"269458287287563012433905513959353935107",
"104214980192024939577819818891578066066",
"237475930497240201939556655798515482635",
"255332656328781610514668830818884769674",
"137139273315319569512436360191619240345",
"30094808026787124630296350887046792166",
"162757685645516588871294181607580211833",
"251759438643673393520861235509435845431"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-ffd8b5f4"
}
],
"types": [
"EoP"
]
}{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"
],
"spl": "2025-09-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72",
"target": {
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"191796742205120856426560608536963393886",
"248392357307326825488608007907906247569",
"253664579616272120019020293042089869825",
"119640721929178758864171116543777235448",
"88614894248070539149749001153057611333",
"192236331321682913283373241993408442795"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-1cad1c6c"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72",
"target": {
"file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"135733718630255411048675363695623840220",
"318836206997742897580377676149031540748",
"131622419250986092245848435957312969760",
"230235986588592318493714804292173863471"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-2d39c0b1"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"deprecated": false,
"digest": {
"function_hash": "194650644673830432688761763122559843523",
"length": 63.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-2f64c38c"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72",
"target": {
"function": "getCallingAppName",
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"deprecated": false,
"digest": {
"function_hash": "178697288976910297250387690471494008398",
"length": 41.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-3898f5df"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72",
"target": {
"file": "src/com/android/documentsui/base/Shared.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"37876277042882961774571832764351283716",
"269458287287563012433905513959353935107",
"104214980192024939577819818891578066066",
"237475930497240201939556655798515482635",
"255332656328781610514668830818884769674",
"137139273315319569512436360191619240345",
"30094808026787124630296350887046792166",
"162757685645516588871294181607580211833",
"251759438643673393520861235509435845431"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-94c79dcc"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/base/Shared.java"
},
"deprecated": false,
"digest": {
"function_hash": "34987950939639189483444613650854068396",
"length": 465.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-9db69ac6"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72",
"target": {
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"171545660746234868457838934132160564399",
"16620385211362110162349410932687275954",
"155380109869855992816550928114507728332",
"151033081719793388373943812935464634995",
"222863958647210402686620657406730865541"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-d01373ee"
}
],
"types": [
"EoP"
]
}{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"
],
"spl": "2025-09-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"deprecated": false,
"digest": {
"function_hash": "194650644673830432688761763122559843523",
"length": 63.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-0225bd83"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6",
"target": {
"file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"135733718630255411048675363695623840220",
"318836206997742897580377676149031540748",
"131622419250986092245848435957312969760",
"230235986588592318493714804292173863471"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-053292d0"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/base/Shared.java"
},
"deprecated": false,
"digest": {
"function_hash": "34987950939639189483444613650854068396",
"length": 465.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-2a639903"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6",
"target": {
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"191796742205120856426560608536963393886",
"248392357307326825488608007907906247569",
"253664579616272120019020293042089869825",
"119640721929178758864171116543777235448",
"88614894248070539149749001153057611333",
"192236331321682913283373241993408442795"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-2c02dbc3"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6",
"target": {
"function": "getCallingAppName",
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"deprecated": false,
"digest": {
"function_hash": "178697288976910297250387690471494008398",
"length": 41.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-45a3fb18"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6",
"target": {
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"171545660746234868457838934132160564399",
"16620385211362110162349410932687275954",
"155380109869855992816550928114507728332",
"151033081719793388373943812935464634995",
"222863958647210402686620657406730865541"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-a8749d78"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6",
"target": {
"file": "src/com/android/documentsui/base/Shared.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"117381096027824942318502849749025878871",
"269458287287563012433905513959353935107",
"104214980192024939577819818891578066066",
"237475930497240201939556655798515482635",
"255332656328781610514668830818884769674",
"137139273315319569512436360191619240345",
"30094808026787124630296350887046792166",
"162757685645516588871294181607580211833",
"251759438643673393520861235509435845431"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-a87a27b4"
}
],
"types": [
"EoP"
]
}{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"
],
"spl": "2025-09-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421",
"target": {
"file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"135733718630255411048675363695623840220",
"318836206997742897580377676149031540748",
"131622419250986092245848435957312969760",
"230235986588592318493714804292173863471"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-05b48beb"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"deprecated": false,
"digest": {
"function_hash": "194650644673830432688761763122559843523",
"length": 63.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-2090736d"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/base/Shared.java"
},
"deprecated": false,
"digest": {
"function_hash": "34987950939639189483444613650854068396",
"length": 465.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-47036df4"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421",
"target": {
"file": "src/com/android/documentsui/base/Shared.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"117381096027824942318502849749025878871",
"269458287287563012433905513959353935107",
"104214980192024939577819818891578066066",
"237475930497240201939556655798515482635",
"255332656328781610514668830818884769674",
"137139273315319569512436360191619240345",
"30094808026787124630296350887046792166",
"162757685645516588871294181607580211833",
"251759438643673393520861235509435845431"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-864e3cfc"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421",
"target": {
"function": "getCallingAppName",
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"deprecated": false,
"digest": {
"function_hash": "178697288976910297250387690471494008398",
"length": 41.0
},
"signature_type": "Function",
"id": "ASB-A-397216537-895d0a5a"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421",
"target": {
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"191796742205120856426560608536963393886",
"248392357307326825488608007907906247569",
"253664579616272120019020293042089869825",
"119640721929178758864171116543777235448",
"88614894248070539149749001153057611333",
"192236331321682913283373241993408442795"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-b419be83"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421",
"target": {
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"171545660746234868457838934132160564399",
"16620385211362110162349410932687275954",
"155380109869855992816550928114507728332",
"151033081719793388373943812935464634995",
"222863958647210402686620657406730865541"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-397216537-cce5727f"
}
],
"types": [
"EoP"
]
}