In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text in a permission popup due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "37876277042882961774571832764351283716", "269458287287563012433905513959353935107", "104214980192024939577819818891578066066", "237475930497240201939556655798515482635", "255332656328781610514668830818884769674", "137139273315319569512436360191619240345", "30094808026787124630296350887046792166", "162757685645516588871294181607580211833", "251759438643673393520861235509435845431" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3", "target": { "file": "src/com/android/documentsui/base/Shared.java" }, "id": "ASB-A-397216537-1ac068b6", "signature_type": "Line" }, { "digest": { "length": 63.0, "function_hash": "194650644673830432688761763122559843523" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3", "target": { "file": "src/com/android/documentsui/dirlist/DirectoryFragment.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-4e6a8688", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "191796742205120856426560608536963393886", "248392357307326825488608007907906247569", "253664579616272120019020293042089869825", "119640721929178758864171116543777235448", "88614894248070539149749001153057611333", "192236331321682913283373241993408442795" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3", "target": { "file": "src/com/android/documentsui/dirlist/DirectoryFragment.java" }, "id": "ASB-A-397216537-50da8fbf", "signature_type": "Line" }, { "digest": { "length": 41.0, "function_hash": "178697288976910297250387690471494008398" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3", "target": { "file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-51ee83b1", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "135733718630255411048675363695623840220", "318836206997742897580377676149031540748", "131622419250986092245848435957312969760", "230235986588592318493714804292173863471" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3", "target": { "file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java" }, "id": "ASB-A-397216537-69a92f25", "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "171545660746234868457838934132160564399", "16620385211362110162349410932687275954", "155380109869855992816550928114507728332", "151033081719793388373943812935464634995", "222863958647210402686620657406730865541" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3", "target": { "file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java" }, "id": "ASB-A-397216537-e62ea1a5", "signature_type": "Line" }, { "digest": { "length": 465.0, "function_hash": "34987950939639189483444613650854068396" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3", "target": { "file": "src/com/android/documentsui/base/Shared.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-f617e44a", "signature_type": "Function" } ], "severity": "High", "types": [ "EoP" ], "fixes": [ "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3" ], "spl": "2025-09-01" }
{ "vanir_signatures": [ { "digest": { "length": 63.0, "function_hash": "194650644673830432688761763122559843523" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32", "target": { "file": "src/com/android/documentsui/dirlist/DirectoryFragment.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-1c59e327", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "135733718630255411048675363695623840220", "318836206997742897580377676149031540748", "131622419250986092245848435957312969760", "230235986588592318493714804292173863471" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32", "target": { "file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java" }, "id": "ASB-A-397216537-4cdccad9", "signature_type": "Line" }, { "digest": { "length": 41.0, "function_hash": "178697288976910297250387690471494008398" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32", "target": { "file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-84ec682c", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "191796742205120856426560608536963393886", "248392357307326825488608007907906247569", "253664579616272120019020293042089869825", "119640721929178758864171116543777235448", "88614894248070539149749001153057611333", "192236331321682913283373241993408442795" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32", "target": { "file": "src/com/android/documentsui/dirlist/DirectoryFragment.java" }, "id": "ASB-A-397216537-a68cfa3b", "signature_type": "Line" }, { "digest": { "length": 465.0, "function_hash": "34987950939639189483444613650854068396" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32", "target": { "file": "src/com/android/documentsui/base/Shared.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-ae3f90ae", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "171545660746234868457838934132160564399", "16620385211362110162349410932687275954", "155380109869855992816550928114507728332", "151033081719793388373943812935464634995", "222863958647210402686620657406730865541" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32", "target": { "file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java" }, "id": "ASB-A-397216537-daddfdb0", "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "117381096027824942318502849749025878871", "269458287287563012433905513959353935107", "104214980192024939577819818891578066066", "237475930497240201939556655798515482635", "255332656328781610514668830818884769674", "137139273315319569512436360191619240345", "30094808026787124630296350887046792166", "162757685645516588871294181607580211833", "251759438643673393520861235509435845431" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32", "target": { "file": "src/com/android/documentsui/base/Shared.java" }, "id": "ASB-A-397216537-ffd8b5f4", "signature_type": "Line" } ], "severity": "High", "types": [ "EoP" ], "fixes": [ "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32" ], "spl": "2025-09-01" }
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "191796742205120856426560608536963393886", "248392357307326825488608007907906247569", "253664579616272120019020293042089869825", "119640721929178758864171116543777235448", "88614894248070539149749001153057611333", "192236331321682913283373241993408442795" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72", "target": { "file": "src/com/android/documentsui/dirlist/DirectoryFragment.java" }, "id": "ASB-A-397216537-1cad1c6c", "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "135733718630255411048675363695623840220", "318836206997742897580377676149031540748", "131622419250986092245848435957312969760", "230235986588592318493714804292173863471" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72", "target": { "file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java" }, "id": "ASB-A-397216537-2d39c0b1", "signature_type": "Line" }, { "digest": { "length": 63.0, "function_hash": "194650644673830432688761763122559843523" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72", "target": { "file": "src/com/android/documentsui/dirlist/DirectoryFragment.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-2f64c38c", "signature_type": "Function" }, { "digest": { "length": 41.0, "function_hash": "178697288976910297250387690471494008398" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72", "target": { "file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-3898f5df", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "37876277042882961774571832764351283716", "269458287287563012433905513959353935107", "104214980192024939577819818891578066066", "237475930497240201939556655798515482635", "255332656328781610514668830818884769674", "137139273315319569512436360191619240345", "30094808026787124630296350887046792166", "162757685645516588871294181607580211833", "251759438643673393520861235509435845431" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72", "target": { "file": "src/com/android/documentsui/base/Shared.java" }, "id": "ASB-A-397216537-94c79dcc", "signature_type": "Line" }, { "digest": { "length": 465.0, "function_hash": "34987950939639189483444613650854068396" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72", "target": { "file": "src/com/android/documentsui/base/Shared.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-9db69ac6", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "171545660746234868457838934132160564399", "16620385211362110162349410932687275954", "155380109869855992816550928114507728332", "151033081719793388373943812935464634995", "222863958647210402686620657406730865541" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72", "target": { "file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java" }, "id": "ASB-A-397216537-d01373ee", "signature_type": "Line" } ], "severity": "High", "types": [ "EoP" ], "fixes": [ "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72" ], "spl": "2025-09-01" }
{ "vanir_signatures": [ { "digest": { "length": 63.0, "function_hash": "194650644673830432688761763122559843523" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6", "target": { "file": "src/com/android/documentsui/dirlist/DirectoryFragment.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-0225bd83", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "135733718630255411048675363695623840220", "318836206997742897580377676149031540748", "131622419250986092245848435957312969760", "230235986588592318493714804292173863471" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6", "target": { "file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java" }, "id": "ASB-A-397216537-053292d0", "signature_type": "Line" }, { "digest": { "length": 465.0, "function_hash": "34987950939639189483444613650854068396" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6", "target": { "file": "src/com/android/documentsui/base/Shared.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-2a639903", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "191796742205120856426560608536963393886", "248392357307326825488608007907906247569", "253664579616272120019020293042089869825", "119640721929178758864171116543777235448", "88614894248070539149749001153057611333", "192236331321682913283373241993408442795" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6", "target": { "file": "src/com/android/documentsui/dirlist/DirectoryFragment.java" }, "id": "ASB-A-397216537-2c02dbc3", "signature_type": "Line" }, { "digest": { "length": 41.0, "function_hash": "178697288976910297250387690471494008398" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6", "target": { "file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-45a3fb18", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "171545660746234868457838934132160564399", "16620385211362110162349410932687275954", "155380109869855992816550928114507728332", "151033081719793388373943812935464634995", "222863958647210402686620657406730865541" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6", "target": { "file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java" }, "id": "ASB-A-397216537-a8749d78", "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "117381096027824942318502849749025878871", "269458287287563012433905513959353935107", "104214980192024939577819818891578066066", "237475930497240201939556655798515482635", "255332656328781610514668830818884769674", "137139273315319569512436360191619240345", "30094808026787124630296350887046792166", "162757685645516588871294181607580211833", "251759438643673393520861235509435845431" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6", "target": { "file": "src/com/android/documentsui/base/Shared.java" }, "id": "ASB-A-397216537-a87a27b4", "signature_type": "Line" } ], "severity": "High", "types": [ "EoP" ], "fixes": [ "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6" ], "spl": "2025-09-01" }
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "135733718630255411048675363695623840220", "318836206997742897580377676149031540748", "131622419250986092245848435957312969760", "230235986588592318493714804292173863471" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421", "target": { "file": "src/com/android/documentsui/dirlist/DocumentsAdapter.java" }, "id": "ASB-A-397216537-05b48beb", "signature_type": "Line" }, { "digest": { "length": 63.0, "function_hash": "194650644673830432688761763122559843523" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421", "target": { "file": "src/com/android/documentsui/dirlist/DirectoryFragment.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-2090736d", "signature_type": "Function" }, { "digest": { "length": 465.0, "function_hash": "34987950939639189483444613650854068396" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421", "target": { "file": "src/com/android/documentsui/base/Shared.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-47036df4", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "117381096027824942318502849749025878871", "269458287287563012433905513959353935107", "104214980192024939577819818891578066066", "237475930497240201939556655798515482635", "255332656328781610514668830818884769674", "137139273315319569512436360191619240345", "30094808026787124630296350887046792166", "162757685645516588871294181607580211833", "251759438643673393520861235509435845431" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421", "target": { "file": "src/com/android/documentsui/base/Shared.java" }, "id": "ASB-A-397216537-864e3cfc", "signature_type": "Line" }, { "digest": { "length": 41.0, "function_hash": "178697288976910297250387690471494008398" }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421", "target": { "file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java", "function": "getCallingAppName" }, "id": "ASB-A-397216537-895d0a5a", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "191796742205120856426560608536963393886", "248392357307326825488608007907906247569", "253664579616272120019020293042089869825", "119640721929178758864171116543777235448", "88614894248070539149749001153057611333", "192236331321682913283373241993408442795" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421", "target": { "file": "src/com/android/documentsui/dirlist/DirectoryFragment.java" }, "id": "ASB-A-397216537-b419be83", "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "171545660746234868457838934132160564399", "16620385211362110162349410932687275954", "155380109869855992816550928114507728332", "151033081719793388373943812935464634995", "222863958647210402686620657406730865541" ] }, "signature_version": "v1", "deprecated": false, "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421", "target": { "file": "tests/common/com/android/documentsui/dirlist/TestEnvironment.java" }, "id": "ASB-A-397216537-cce5727f", "signature_type": "Line" } ], "severity": "High", "types": [ "EoP" ], "fixes": [ "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421" ], "spl": "2025-09-01" }