In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text in a permission popup due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"
],
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"37876277042882961774571832764351283716",
"269458287287563012433905513959353935107",
"104214980192024939577819818891578066066",
"237475930497240201939556655798515482635",
"255332656328781610514668830818884769674",
"137139273315319569512436360191619240345",
"30094808026787124630296350887046792166",
"162757685645516588871294181607580211833",
"251759438643673393520861235509435845431"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-1ac068b6",
"target": {
"file": "src/com/android/documentsui/base/Shared.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"
},
{
"digest": {
"length": 63.0,
"function_hash": "194650644673830432688761763122559843523"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-4e6a8688",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"191796742205120856426560608536963393886",
"248392357307326825488608007907906247569",
"253664579616272120019020293042089869825",
"119640721929178758864171116543777235448",
"88614894248070539149749001153057611333",
"192236331321682913283373241993408442795"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-50da8fbf",
"target": {
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"
},
{
"digest": {
"length": 41.0,
"function_hash": "178697288976910297250387690471494008398"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-51ee83b1",
"target": {
"function": "getCallingAppName",
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135733718630255411048675363695623840220",
"318836206997742897580377676149031540748",
"131622419250986092245848435957312969760",
"230235986588592318493714804292173863471"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-69a92f25",
"target": {
"file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"171545660746234868457838934132160564399",
"16620385211362110162349410932687275954",
"155380109869855992816550928114507728332",
"151033081719793388373943812935464634995",
"222863958647210402686620657406730865541"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-e62ea1a5",
"target": {
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"
},
{
"digest": {
"length": 465.0,
"function_hash": "34987950939639189483444613650854068396"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-f617e44a",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/base/Shared.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"
}
],
"types": [
"EoP"
],
"spl": "2025-09-01",
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"
],
"vanir_signatures": [
{
"digest": {
"length": 63.0,
"function_hash": "194650644673830432688761763122559843523"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-1c59e327",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135733718630255411048675363695623840220",
"318836206997742897580377676149031540748",
"131622419250986092245848435957312969760",
"230235986588592318493714804292173863471"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-4cdccad9",
"target": {
"file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"
},
{
"digest": {
"length": 41.0,
"function_hash": "178697288976910297250387690471494008398"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-84ec682c",
"target": {
"function": "getCallingAppName",
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"191796742205120856426560608536963393886",
"248392357307326825488608007907906247569",
"253664579616272120019020293042089869825",
"119640721929178758864171116543777235448",
"88614894248070539149749001153057611333",
"192236331321682913283373241993408442795"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-a68cfa3b",
"target": {
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"
},
{
"digest": {
"length": 465.0,
"function_hash": "34987950939639189483444613650854068396"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-ae3f90ae",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/base/Shared.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"171545660746234868457838934132160564399",
"16620385211362110162349410932687275954",
"155380109869855992816550928114507728332",
"151033081719793388373943812935464634995",
"222863958647210402686620657406730865541"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-daddfdb0",
"target": {
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"117381096027824942318502849749025878871",
"269458287287563012433905513959353935107",
"104214980192024939577819818891578066066",
"237475930497240201939556655798515482635",
"255332656328781610514668830818884769674",
"137139273315319569512436360191619240345",
"30094808026787124630296350887046792166",
"162757685645516588871294181607580211833",
"251759438643673393520861235509435845431"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-ffd8b5f4",
"target": {
"file": "src/com/android/documentsui/base/Shared.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"
}
],
"types": [
"EoP"
],
"spl": "2025-09-01",
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"
],
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"191796742205120856426560608536963393886",
"248392357307326825488608007907906247569",
"253664579616272120019020293042089869825",
"119640721929178758864171116543777235448",
"88614894248070539149749001153057611333",
"192236331321682913283373241993408442795"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-1cad1c6c",
"target": {
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135733718630255411048675363695623840220",
"318836206997742897580377676149031540748",
"131622419250986092245848435957312969760",
"230235986588592318493714804292173863471"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-2d39c0b1",
"target": {
"file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"
},
{
"digest": {
"length": 63.0,
"function_hash": "194650644673830432688761763122559843523"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-2f64c38c",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"
},
{
"digest": {
"length": 41.0,
"function_hash": "178697288976910297250387690471494008398"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-3898f5df",
"target": {
"function": "getCallingAppName",
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"37876277042882961774571832764351283716",
"269458287287563012433905513959353935107",
"104214980192024939577819818891578066066",
"237475930497240201939556655798515482635",
"255332656328781610514668830818884769674",
"137139273315319569512436360191619240345",
"30094808026787124630296350887046792166",
"162757685645516588871294181607580211833",
"251759438643673393520861235509435845431"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-94c79dcc",
"target": {
"file": "src/com/android/documentsui/base/Shared.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"
},
{
"digest": {
"length": 465.0,
"function_hash": "34987950939639189483444613650854068396"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-9db69ac6",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/base/Shared.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"171545660746234868457838934132160564399",
"16620385211362110162349410932687275954",
"155380109869855992816550928114507728332",
"151033081719793388373943812935464634995",
"222863958647210402686620657406730865541"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-d01373ee",
"target": {
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"
}
],
"types": [
"EoP"
],
"spl": "2025-09-01",
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"
],
"vanir_signatures": [
{
"digest": {
"length": 63.0,
"function_hash": "194650644673830432688761763122559843523"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-0225bd83",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135733718630255411048675363695623840220",
"318836206997742897580377676149031540748",
"131622419250986092245848435957312969760",
"230235986588592318493714804292173863471"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-053292d0",
"target": {
"file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"
},
{
"digest": {
"length": 465.0,
"function_hash": "34987950939639189483444613650854068396"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-2a639903",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/base/Shared.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"191796742205120856426560608536963393886",
"248392357307326825488608007907906247569",
"253664579616272120019020293042089869825",
"119640721929178758864171116543777235448",
"88614894248070539149749001153057611333",
"192236331321682913283373241993408442795"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-2c02dbc3",
"target": {
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"
},
{
"digest": {
"length": 41.0,
"function_hash": "178697288976910297250387690471494008398"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-45a3fb18",
"target": {
"function": "getCallingAppName",
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"171545660746234868457838934132160564399",
"16620385211362110162349410932687275954",
"155380109869855992816550928114507728332",
"151033081719793388373943812935464634995",
"222863958647210402686620657406730865541"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-a8749d78",
"target": {
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"117381096027824942318502849749025878871",
"269458287287563012433905513959353935107",
"104214980192024939577819818891578066066",
"237475930497240201939556655798515482635",
"255332656328781610514668830818884769674",
"137139273315319569512436360191619240345",
"30094808026787124630296350887046792166",
"162757685645516588871294181607580211833",
"251759438643673393520861235509435845431"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-a87a27b4",
"target": {
"file": "src/com/android/documentsui/base/Shared.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"
}
],
"types": [
"EoP"
],
"spl": "2025-09-01",
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"
],
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135733718630255411048675363695623840220",
"318836206997742897580377676149031540748",
"131622419250986092245848435957312969760",
"230235986588592318493714804292173863471"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-05b48beb",
"target": {
"file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"
},
{
"digest": {
"length": 63.0,
"function_hash": "194650644673830432688761763122559843523"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-2090736d",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"
},
{
"digest": {
"length": 465.0,
"function_hash": "34987950939639189483444613650854068396"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-47036df4",
"target": {
"function": "getCallingAppName",
"file": "src/com/android/documentsui/base/Shared.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"117381096027824942318502849749025878871",
"269458287287563012433905513959353935107",
"104214980192024939577819818891578066066",
"237475930497240201939556655798515482635",
"255332656328781610514668830818884769674",
"137139273315319569512436360191619240345",
"30094808026787124630296350887046792166",
"162757685645516588871294181607580211833",
"251759438643673393520861235509435845431"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-864e3cfc",
"target": {
"file": "src/com/android/documentsui/base/Shared.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"
},
{
"digest": {
"length": 41.0,
"function_hash": "178697288976910297250387690471494008398"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-397216537-895d0a5a",
"target": {
"function": "getCallingAppName",
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"191796742205120856426560608536963393886",
"248392357307326825488608007907906247569",
"253664579616272120019020293042089869825",
"119640721929178758864171116543777235448",
"88614894248070539149749001153057611333",
"192236331321682913283373241993408442795"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-b419be83",
"target": {
"file": "src/com/android/documentsui/dirlist/DirectoryFragment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"171545660746234868457838934132160564399",
"16620385211362110162349410932687275954",
"155380109869855992816550928114507728332",
"151033081719793388373943812935464634995",
"222863958647210402686620657406730865541"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-397216537-cce5727f",
"target": {
"file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"
}
],
"types": [
"EoP"
],
"spl": "2025-09-01",
"severity": "High"
}