In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 2106.0,
"function_hash": "122749625844804206727342454752676686296"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b",
"id": "ASB-A-435188844-0151069d",
"signature_type": "Function",
"target": {
"function": "getInstalledApplications",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1984.0,
"function_hash": "5647340085746230413610397063328464262"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b",
"id": "ASB-A-435188844-625ae55b",
"target": {
"function": "queryIntentServicesInternal",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"227316091039036741688165405033312270495",
"168041188259495589488515740846403180969",
"296082808144919494521700876815600945391",
"99142030560691458793086281728954589051",
"139900786063038530169935772350342113882",
"108281999829929096221549010765423657699",
"200989171371557913724393867628334998461"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/57eaa465cabb9a74cc57cbb16657c36ad9fc2d58",
"id": "ASB-A-435188844-81793f07",
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/d1ec2efc0b8941a0585712d5b4cec95fd9f12f17",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"4294957759969163647030007171520665213",
"306741063813963352960024090521032319801",
"321143770395008550573402163604596675100",
"159971660088949769821375506581406084819",
"36913861435273227248918589552137622929",
"36963201016912102583229836077585078143",
"55766225966301963280177765834222273378",
"41950295011078535475049143437751156035",
"41380579415712750401924041556804812701",
"85770552592431473164032735928327496872",
"219997553884769946559652061920708055675",
"198234216519597277862920543544592306576",
"1487286327549188928671549598742772044"
]
},
"signature_version": "v1",
"id": "ASB-A-435188844-944e4bea",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1211.0,
"function_hash": "249151320877369229577323512686903901657"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d1ec2efc0b8941a0585712d5b4cec95fd9f12f17",
"id": "ASB-A-435188844-c2834459",
"signature_type": "Function",
"target": {
"function": "resolveContentProvider",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 570.0,
"function_hash": "8306612149884868563026530448652594284"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b",
"id": "ASB-A-435188844-d6d4cfa5",
"target": {
"function": "hasCrossUserPermission",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 197.0,
"function_hash": "155955387924007233392608071178537083333"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b",
"id": "ASB-A-435188844-e70dc1ed",
"signature_type": "Function",
"target": {
"function": "getComponentEnabledSetting",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/57eaa465cabb9a74cc57cbb16657c36ad9fc2d58",
"deprecated": false,
"digest": {
"length": 1313.0,
"function_hash": "218154990225916159172293927134632331536"
},
"signature_version": "v1",
"id": "ASB-A-435188844-f1ff118f",
"target": {
"function": "resolveContentProvider",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"15870670946479014925001504625572540566",
"266496136111753541690104297175217800057",
"256033668868439213716330198766041779588",
"72923278655251581498243308851500364391",
"98905019191585788313594137073002121425",
"267145194869585725088647465490166871692",
"178824460229124039209746682262284872734",
"32888512578613526980746288787537898207",
"149303953833791877644512825266718304072",
"73876162608022179835938230523821631111",
"10191450910670444366152688014456025508",
"111365901445882203949516727381253004922",
"154716211210760544107959204467901304495",
"16390171742763364730724830698676653437",
"147946162775492104294407966842086961863",
"145693316129868691273772613216711399073",
"35882275691100037462877197287475299546",
"222528837614798955560984759610539387666",
"281153006355958011749245036745581092893",
"91837217503181450060727752121693815721",
"97832320229534722407012942704610568251",
"154573272478387978490097957500149675549",
"211002399056754244271423834466983655530"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b",
"id": "ASB-A-435188844-f422a1f5",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/d1ec2efc0b8941a0585712d5b4cec95fd9f12f17",
"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b",
"https://android.googlesource.com/platform/frameworks/base/+/57eaa465cabb9a74cc57cbb16657c36ad9fc2d58"
],
"spl": "2026-06-01",
"severity": "High",
"types": [
"ID"
]
}{
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218",
"https://android.googlesource.com/platform/frameworks/base/+/517492cb0b1b2fb664de1689548dbfe4a8a3cec1",
"https://android.googlesource.com/platform/frameworks/base/+/c732cc437484fb8665c93d587143869c0a11c9d5"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"15870670946479014925001504625572540566",
"266496136111753541690104297175217800057",
"256033668868439213716330198766041779588",
"72923278655251581498243308851500364391",
"98905019191585788313594137073002121425",
"267145194869585725088647465490166871692",
"178824460229124039209746682262284872734",
"32888512578613526980746288787537898207",
"264875104936512111300848035006535202788",
"271655580764290341023650166012204054618",
"29740387121134890746022108021521388352",
"232740267204609464100447218023341939531",
"544833157332720308311909603872673442",
"126765616413512870019687800692235248867",
"197867991546047462033292404306628545077",
"25690728072073030173148040545132618370",
"290442913872884727345794975608903147363",
"310151990810170675759313300378787045167",
"145693316129868691273772613216711399073",
"35882275691100037462877197287475299546",
"222528837614798955560984759610539387666",
"281153006355958011749245036745581092893",
"91837217503181450060727752121693815721",
"97832320229534722407012942704610568251",
"154573272478387978490097957500149675549",
"211002399056754244271423834466983655530"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218",
"id": "ASB-A-435188844-056f931b",
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218",
"deprecated": false,
"digest": {
"length": 449.0,
"function_hash": "102896054550205968779892655968754707601"
},
"signature_version": "v1",
"id": "ASB-A-435188844-53a70c54",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java",
"function": "hasCrossUserPermission"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1211.0,
"function_hash": "249151320877369229577323512686903901657"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/517492cb0b1b2fb664de1689548dbfe4a8a3cec1",
"id": "ASB-A-435188844-7847882e",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java",
"function": "resolveContentProvider"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1984.0,
"function_hash": "5647340085746230413610397063328464262"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218",
"id": "ASB-A-435188844-8d0f46d7",
"signature_type": "Function",
"target": {
"function": "queryIntentServicesInternal",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1313.0,
"function_hash": "218154990225916159172293927134632331536"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c732cc437484fb8665c93d587143869c0a11c9d5",
"id": "ASB-A-435188844-921fafb8",
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java",
"function": "resolveContentProvider"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 197.0,
"function_hash": "155955387924007233392608071178537083333"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218",
"id": "ASB-A-435188844-c84778ee",
"signature_type": "Function",
"target": {
"function": "getComponentEnabledSetting",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"227316091039036741688165405033312270495",
"168041188259495589488515740846403180969",
"296082808144919494521700876815600945391",
"99142030560691458793086281728954589051",
"139900786063038530169935772350342113882",
"108281999829929096221549010765423657699",
"200989171371557913724393867628334998461"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c732cc437484fb8665c93d587143869c0a11c9d5",
"id": "ASB-A-435188844-cde410b3",
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 2106.0,
"function_hash": "122749625844804206727342454752676686296"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218",
"id": "ASB-A-435188844-d91e9187",
"signature_type": "Function",
"target": {
"function": "getInstalledApplications",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"4294957759969163647030007171520665213",
"306741063813963352960024090521032319801",
"321143770395008550573402163604596675100",
"159971660088949769821375506581406084819",
"36913861435273227248918589552137622929",
"36963201016912102583229836077585078143",
"55766225966301963280177765834222273378",
"41950295011078535475049143437751156035",
"41380579415712750401924041556804812701",
"85770552592431473164032735928327496872",
"219997553884769946559652061920708055675",
"198234216519597277862920543544592306576",
"1487286327549188928671549598742772044"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/517492cb0b1b2fb664de1689548dbfe4a8a3cec1",
"id": "ASB-A-435188844-f7d56699",
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
}
],
"severity": "High"
}{
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/90eff8175258a5ef2ad2007585f1f920bcfee0d3"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/90eff8175258a5ef2ad2007585f1f920bcfee0d3",
"deprecated": false,
"digest": {
"length": 1313.0,
"function_hash": "218154990225916159172293927134632331536"
},
"signature_version": "v1",
"id": "ASB-A-435188844-00a004ee",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java",
"function": "resolveContentProvider"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"227316091039036741688165405033312270495",
"168041188259495589488515740846403180969",
"296082808144919494521700876815600945391",
"99142030560691458793086281728954589051",
"139900786063038530169935772350342113882",
"108281999829929096221549010765423657699",
"200989171371557913724393867628334998461"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/90eff8175258a5ef2ad2007585f1f920bcfee0d3",
"id": "ASB-A-435188844-2354fcbb",
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
}
],
"severity": "High"
}{
"vanir_signatures": [
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"227316091039036741688165405033312270495",
"168041188259495589488515740846403180969",
"296082808144919494521700876815600945391",
"99142030560691458793086281728954589051",
"139900786063038530169935772350342113882",
"108281999829929096221549010765423657699",
"200989171371557913724393867628334998461"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f3e6526b770761bfe1b51abdc32e86ee2558ec72",
"id": "ASB-A-435188844-70e7b7bc",
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1313.0,
"function_hash": "218154990225916159172293927134632331536"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f3e6526b770761bfe1b51abdc32e86ee2558ec72",
"id": "ASB-A-435188844-f4ed263d",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java",
"function": "resolveContentProvider"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/f3e6526b770761bfe1b51abdc32e86ee2558ec72"
],
"spl": "2026-06-01",
"severity": "High",
"types": [
"ID"
]
}{
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647",
"https://android.googlesource.com/platform/frameworks/base/+/97e34e5a6bfa57236995550c5d1d12f979c29ab6",
"https://android.googlesource.com/platform/frameworks/base/+/ef604aa614d6de762954f80b64d9fdbba43a04e5"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 197.0,
"function_hash": "155955387924007233392608071178537083333"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647",
"id": "ASB-A-435188844-22629813",
"target": {
"function": "getComponentEnabledSetting",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"292900562621289740165420360404681557470",
"254099383506272289078753119801457610562",
"8382420818903945909209296020667851894",
"159971660088949769821375506581406084819",
"36913861435273227248918589552137622929",
"36963201016912102583229836077585078143",
"55766225966301963280177765834222273378",
"41950295011078535475049143437751156035",
"41380579415712750401924041556804812701",
"85770552592431473164032735928327496872",
"219997553884769946559652061920708055675",
"198234216519597277862920543544592306576",
"1487286327549188928671549598742772044"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/97e34e5a6bfa57236995550c5d1d12f979c29ab6",
"id": "ASB-A-435188844-497cb12a",
"signature_type": "Line",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1313.0,
"function_hash": "218154990225916159172293927134632331536"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ef604aa614d6de762954f80b64d9fdbba43a04e5",
"id": "ASB-A-435188844-577a65c0",
"target": {
"function": "resolveContentProvider",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1878.0,
"function_hash": "162419856787718227743110672559810970109"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647",
"id": "ASB-A-435188844-77045391",
"signature_type": "Function",
"target": {
"function": "getInstalledApplications",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647",
"deprecated": false,
"digest": {
"length": 1888.0,
"function_hash": "86954973004694357275985886223532729658"
},
"signature_version": "v1",
"id": "ASB-A-435188844-a286a67f",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java",
"function": "queryIntentServicesInternal"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1211.0,
"function_hash": "249151320877369229577323512686903901657"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/97e34e5a6bfa57236995550c5d1d12f979c29ab6",
"id": "ASB-A-435188844-a45054c6",
"signature_type": "Function",
"target": {
"function": "resolveContentProvider",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"57339914458931691710384622355105500640",
"96745049509738410035755485359915924349",
"256033668868439213716330198766041779588",
"72923278655251581498243308851500364391",
"98905019191585788313594137073002121425",
"267145194869585725088647465490166871692",
"178824460229124039209746682262284872734",
"32888512578613526980746288787537898207",
"264875104936512111300848035006535202788",
"271655580764290341023650166012204054618",
"29740387121134890746022108021521388352",
"232740267204609464100447218023341939531",
"544833157332720308311909603872673442",
"126765616413512870019687800692235248867",
"197867991546047462033292404306628545077",
"25690728072073030173148040545132618370",
"290442913872884727345794975608903147363",
"310151990810170675759313300378787045167",
"95997925121681771021803279627538258027",
"215555870435068607277313027158318557484",
"222528837614798955560984759610539387666",
"281153006355958011749245036745581092893",
"91837217503181450060727752121693815721",
"97832320229534722407012942704610568251",
"154573272478387978490097957500149675549",
"211002399056754244271423834466983655530"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647",
"id": "ASB-A-435188844-c15d81bf",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 449.0,
"function_hash": "102896054550205968779892655968754707601"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647",
"id": "ASB-A-435188844-d9b807a0",
"signature_type": "Function",
"target": {
"function": "hasCrossUserPermission",
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/ef604aa614d6de762954f80b64d9fdbba43a04e5",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"227316091039036741688165405033312270495",
"168041188259495589488515740846403180969",
"296082808144919494521700876815600945391",
"99142030560691458793086281728954589051",
"139900786063038530169935772350342113882",
"108281999829929096221549010765423657699",
"200989171371557913724393867628334998461"
]
},
"signature_version": "v1",
"id": "ASB-A-435188844-ec547ff1",
"target": {
"file": "services/core/java/com/android/server/pm/ComputerEngine.java"
},
"signature_type": "Line"
}
],
"severity": "High"
}