ASB-A-397217317

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-397217317.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-397217317
Aliases
  • A-397217317
  • CVE-2026-0098
Published
2026-06-01T00:00:00Z
Modified
2026-06-05T15:03:38.651710474Z
Summary
[none]
Details

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/apps/DocumentsUI

Package

Name
platform/packages/apps/DocumentsUI

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-06-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/006c7c2f5ec255a8515c7ec146a08ea60bdc720f"
    ],
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 88.0,
                "function_hash": "38673750997274407261682880125275058068"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/006c7c2f5ec255a8515c7ec146a08ea60bdc720f",
            "id": "ASB-A-397217317-2dfda822",
            "target": {
                "function": "isSystemApp",
                "file": "src/com/android/documentsui/base/Shared.java"
            },
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "161956108484107881812162884493901490715",
                    "193326091447123318753589310785420373853",
                    "323561138117190907110380822680174018117",
                    "65415743965004308047591729733479812636",
                    "139586179987113903947346816010772098188",
                    "338613077567168148189503532332683689180",
                    "168456180647270069580637864414621457773",
                    "168289643694590275222239970142598954939",
                    "252360881713344047199030154100628168038",
                    "16049538143845701904592240750317558828",
                    "218620902214056641589552916484904121248",
                    "82587592119246921571602313652639698905",
                    "271788266482599497009122099061488626137",
                    "318531081343054827428008377452257620080",
                    "300643187459060726765340991358488416312",
                    "38669683162161503270728076274733219033",
                    "310355640744183645400324554538072947937",
                    "80901011836666089040166712009679233920"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/006c7c2f5ec255a8515c7ec146a08ea60bdc720f",
            "id": "ASB-A-397217317-5c2726bd",
            "target": {
                "file": "src/com/android/documentsui/base/Shared.java"
            },
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 387.0,
                "function_hash": "219849726313033047941582013681064357104"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/006c7c2f5ec255a8515c7ec146a08ea60bdc720f",
            "id": "ASB-A-397217317-e04a4408",
            "target": {
                "function": "getCallingPackageName",
                "file": "src/com/android/documentsui/base/Shared.java"
            },
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 100.0,
                "function_hash": "80612551930596608646497750952715777009"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/006c7c2f5ec255a8515c7ec146a08ea60bdc720f",
            "id": "ASB-A-397217317-f96c1173",
            "target": {
                "function": "isUpdatedSystemApp",
                "file": "src/com/android/documentsui/base/Shared.java"
            },
            "signature_type": "Function"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-397217317.json"
platform/packages/apps/DocumentsUI

Package

Name
platform/packages/apps/DocumentsUI

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-06-01

Affected versions

Other
15

Ecosystem specific 

{
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/08582e104a16b18f578a69ee9bca418226ba8360"
    ],
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "48824242202000771007508310945523377584",
                    "325498635662759965840201795406878624040",
                    "323561138117190907110380822680174018117",
                    "65415743965004308047591729733479812636",
                    "139586179987113903947346816010772098188",
                    "338613077567168148189503532332683689180",
                    "168456180647270069580637864414621457773",
                    "168289643694590275222239970142598954939",
                    "252360881713344047199030154100628168038",
                    "16049538143845701904592240750317558828",
                    "218620902214056641589552916484904121248",
                    "82587592119246921571602313652639698905",
                    "271788266482599497009122099061488626137",
                    "318531081343054827428008377452257620080",
                    "300643187459060726765340991358488416312",
                    "38669683162161503270728076274733219033",
                    "310355640744183645400324554538072947937",
                    "225841640417887430115579563027318368521"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/08582e104a16b18f578a69ee9bca418226ba8360",
            "id": "ASB-A-397217317-4c30e20b",
            "signature_type": "Line",
            "target": {
                "file": "src/com/android/documentsui/base/Shared.java"
            }
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 100.0,
                "function_hash": "80612551930596608646497750952715777009"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/08582e104a16b18f578a69ee9bca418226ba8360",
            "id": "ASB-A-397217317-9570db9e",
            "signature_type": "Function",
            "target": {
                "function": "isUpdatedSystemApp",
                "file": "src/com/android/documentsui/base/Shared.java"
            }
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 88.0,
                "function_hash": "38673750997274407261682880125275058068"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/08582e104a16b18f578a69ee9bca418226ba8360",
            "id": "ASB-A-397217317-b9d43048",
            "target": {
                "function": "isSystemApp",
                "file": "src/com/android/documentsui/base/Shared.java"
            },
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 387.0,
                "function_hash": "219849726313033047941582013681064357104"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/08582e104a16b18f578a69ee9bca418226ba8360",
            "id": "ASB-A-397217317-fc0927cc",
            "target": {
                "file": "src/com/android/documentsui/base/Shared.java",
                "function": "getCallingPackageName"
            },
            "signature_type": "Function"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-397217317.json"
platform/packages/apps/DocumentsUI

Package

Name
platform/packages/apps/DocumentsUI

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-06-01

Affected versions

Other
16

Ecosystem specific 

{
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/cdad9a0002bdcb09fb8594a71169031c910d25f2"
    ],
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "48824242202000771007508310945523377584",
                    "325498635662759965840201795406878624040",
                    "323561138117190907110380822680174018117",
                    "65415743965004308047591729733479812636",
                    "139586179987113903947346816010772098188",
                    "338613077567168148189503532332683689180",
                    "168456180647270069580637864414621457773",
                    "168289643694590275222239970142598954939",
                    "252360881713344047199030154100628168038",
                    "16049538143845701904592240750317558828",
                    "218620902214056641589552916484904121248",
                    "82587592119246921571602313652639698905",
                    "271788266482599497009122099061488626137",
                    "318531081343054827428008377452257620080",
                    "300643187459060726765340991358488416312",
                    "38669683162161503270728076274733219033",
                    "310355640744183645400324554538072947937",
                    "225841640417887430115579563027318368521"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/cdad9a0002bdcb09fb8594a71169031c910d25f2",
            "id": "ASB-A-397217317-0ef81ce8",
            "signature_type": "Line",
            "target": {
                "file": "src/com/android/documentsui/base/Shared.java"
            }
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 387.0,
                "function_hash": "219849726313033047941582013681064357104"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/cdad9a0002bdcb09fb8594a71169031c910d25f2",
            "id": "ASB-A-397217317-19030f1f",
            "signature_type": "Function",
            "target": {
                "function": "getCallingPackageName",
                "file": "src/com/android/documentsui/base/Shared.java"
            }
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 100.0,
                "function_hash": "80612551930596608646497750952715777009"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/cdad9a0002bdcb09fb8594a71169031c910d25f2",
            "id": "ASB-A-397217317-da490c51",
            "signature_type": "Function",
            "target": {
                "file": "src/com/android/documentsui/base/Shared.java",
                "function": "isUpdatedSystemApp"
            }
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 88.0,
                "function_hash": "38673750997274407261682880125275058068"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/cdad9a0002bdcb09fb8594a71169031c910d25f2",
            "id": "ASB-A-397217317-e38ea371",
            "signature_type": "Function",
            "target": {
                "file": "src/com/android/documentsui/base/Shared.java",
                "function": "isSystemApp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-397217317.json"
platform/packages/apps/DocumentsUI

Package

Name
platform/packages/apps/DocumentsUI

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-06-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 387.0,
                "function_hash": "219849726313033047941582013681064357104"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/ad6f3423dd814ae5599237bc15d5f4ca072c77bc",
            "id": "ASB-A-397217317-23919003",
            "target": {
                "file": "src/com/android/documentsui/base/Shared.java",
                "function": "getCallingPackageName"
            },
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "48824242202000771007508310945523377584",
                    "325498635662759965840201795406878624040",
                    "323561138117190907110380822680174018117",
                    "65415743965004308047591729733479812636",
                    "139586179987113903947346816010772098188",
                    "338613077567168148189503532332683689180",
                    "168456180647270069580637864414621457773",
                    "168289643694590275222239970142598954939",
                    "252360881713344047199030154100628168038",
                    "16049538143845701904592240750317558828",
                    "218620902214056641589552916484904121248",
                    "82587592119246921571602313652639698905",
                    "271788266482599497009122099061488626137",
                    "318531081343054827428008377452257620080",
                    "300643187459060726765340991358488416312",
                    "38669683162161503270728076274733219033",
                    "310355640744183645400324554538072947937",
                    "80901011836666089040166712009679233920"
                ]
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/ad6f3423dd814ae5599237bc15d5f4ca072c77bc",
            "id": "ASB-A-397217317-7c99c3f1",
            "target": {
                "file": "src/com/android/documentsui/base/Shared.java"
            },
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 88.0,
                "function_hash": "38673750997274407261682880125275058068"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/ad6f3423dd814ae5599237bc15d5f4ca072c77bc",
            "id": "ASB-A-397217317-d40a1e98",
            "signature_type": "Function",
            "target": {
                "function": "isSystemApp",
                "file": "src/com/android/documentsui/base/Shared.java"
            }
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 100.0,
                "function_hash": "80612551930596608646497750952715777009"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/ad6f3423dd814ae5599237bc15d5f4ca072c77bc",
            "id": "ASB-A-397217317-ee5026ea",
            "signature_type": "Function",
            "target": {
                "function": "isUpdatedSystemApp",
                "file": "src/com/android/documentsui/base/Shared.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/ad6f3423dd814ae5599237bc15d5f4ca072c77bc"
    ],
    "spl": "2026-06-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-397217317.json"
platform/packages/apps/DocumentsUI

Package

Name
platform/packages/apps/DocumentsUI

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-06-01

Affected versions

Other
14

Ecosystem specific 

{
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a08d1c7ea084830a74b9828cc84a1a5380eaad99"
    ],
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 387.0,
                "function_hash": "219849726313033047941582013681064357104"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a08d1c7ea084830a74b9828cc84a1a5380eaad99",
            "id": "ASB-A-397217317-0b6f76df",
            "signature_type": "Function",
            "target": {
                "function": "getCallingPackageName",
                "file": "src/com/android/documentsui/base/Shared.java"
            }
        },
        {
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a08d1c7ea084830a74b9828cc84a1a5380eaad99",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "48824242202000771007508310945523377584",
                    "325498635662759965840201795406878624040",
                    "323561138117190907110380822680174018117",
                    "65415743965004308047591729733479812636",
                    "139586179987113903947346816010772098188",
                    "338613077567168148189503532332683689180",
                    "168456180647270069580637864414621457773",
                    "168289643694590275222239970142598954939",
                    "252360881713344047199030154100628168038",
                    "16049538143845701904592240750317558828",
                    "218620902214056641589552916484904121248",
                    "82587592119246921571602313652639698905",
                    "271788266482599497009122099061488626137",
                    "318531081343054827428008377452257620080",
                    "300643187459060726765340991358488416312",
                    "38669683162161503270728076274733219033",
                    "310355640744183645400324554538072947937",
                    "225841640417887430115579563027318368521"
                ]
            },
            "signature_version": "v1",
            "id": "ASB-A-397217317-32ac511a",
            "target": {
                "file": "src/com/android/documentsui/base/Shared.java"
            },
            "signature_type": "Line"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 100.0,
                "function_hash": "80612551930596608646497750952715777009"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a08d1c7ea084830a74b9828cc84a1a5380eaad99",
            "id": "ASB-A-397217317-524ec4d2",
            "target": {
                "function": "isUpdatedSystemApp",
                "file": "src/com/android/documentsui/base/Shared.java"
            },
            "signature_type": "Function"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 88.0,
                "function_hash": "38673750997274407261682880125275058068"
            },
            "source": "https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a08d1c7ea084830a74b9828cc84a1a5380eaad99",
            "id": "ASB-A-397217317-c61ae8fb",
            "target": {
                "function": "isSystemApp",
                "file": "src/com/android/documentsui/base/Shared.java"
            },
            "signature_type": "Function"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-397217317.json"