ASB-A-454062218

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-454062218.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-454062218
Aliases
Published
2026-03-01T00:00:00Z
Modified
2026-04-17T15:55:28.020024Z
Summary
[none]
Details

In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2-next:0
Fixed
16-qpr2-next:2026-03-01

Affected versions

Other
16-qpr2-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 661.0,
                "function_hash": "284319997343437165940897188224211807351"
            },
            "id": "ASB-A-454062218-16d6e914",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6b5ea2f7fbf50313d46e54e0d8f8c18c398e4869",
            "target": {
                "function": "addPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 1425.0,
                "function_hash": "125525195444894464217750330831410874590"
            },
            "id": "ASB-A-454062218-502158f4",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6b5ea2f7fbf50313d46e54e0d8f8c18c398e4869",
            "target": {
                "function": "enableSystemPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "193113628533422175067756173000827679994",
                    "309213008556413727970549784491072885555",
                    "103915627977762916572369854172376953855",
                    "270127856189385190131160968200975479895",
                    "331893266207625245204074903190443087899",
                    "255973484546427106109957016636518011297",
                    "155557292261108720229786485200282669595",
                    "64052198750897090704486203272274023043",
                    "290286764007979456270792027756986547649",
                    "2494170172020733298864325503100546890",
                    "98032843297654820866704555570670938284",
                    "142833129536356055003338544649091743284",
                    "81741354079129105791891338335974593241",
                    "80381060306142723617551929211147565004",
                    "197676826216394513519894417943599559895",
                    "212535098048582496322705205159881901718",
                    "141935063808271989837062787007033630046",
                    "158869717454838622534477537067446210174",
                    "81034217693563637724627856537760142288",
                    "6905083402804303387014043728206991340",
                    "271853793945591977299721426559251769222"
                ]
            },
            "id": "ASB-A-454062218-6148dbcd",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6b5ea2f7fbf50313d46e54e0d8f8c18c398e4869",
            "target": {
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 11716.0,
                "function_hash": "288397329113914151108030394943692643022"
            },
            "id": "ASB-A-454062218-c496a497",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6b5ea2f7fbf50313d46e54e0d8f8c18c398e4869",
            "target": {
                "function": "readPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/dba78af51647402d8233bd4c52ecb3c3551622a4",
        "https://android.googlesource.com/platform/frameworks/base/+/6b5ea2f7fbf50313d46e54e0d8f8c18c398e4869"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-454062218.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-03-01

Affected versions

Other
15

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "193113628533422175067756173000827679994",
                    "309213008556413727970549784491072885555",
                    "103915627977762916572369854172376953855",
                    "270127856189385190131160968200975479895",
                    "331893266207625245204074903190443087899",
                    "255973484546427106109957016636518011297",
                    "155557292261108720229786485200282669595",
                    "64052198750897090704486203272274023043",
                    "290286764007979456270792027756986547649",
                    "2494170172020733298864325503100546890",
                    "98032843297654820866704555570670938284",
                    "142833129536356055003338544649091743284",
                    "81741354079129105791891338335974593241",
                    "80381060306142723617551929211147565004",
                    "197676826216394513519894417943599559895",
                    "212535098048582496322705205159881901718",
                    "141935063808271989837062787007033630046",
                    "158869717454838622534477537067446210174",
                    "81034217693563637724627856537760142288",
                    "6905083402804303387014043728206991340",
                    "271853793945591977299721426559251769222"
                ]
            },
            "id": "ASB-A-454062218-03620439",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4b32b0bd6876ecc25d60d95431763bf618699880",
            "target": {
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 10768.0,
                "function_hash": "334617102533654471552284364481224219330"
            },
            "id": "ASB-A-454062218-4929763e",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4b32b0bd6876ecc25d60d95431763bf618699880",
            "target": {
                "function": "readPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 661.0,
                "function_hash": "284319997343437165940897188224211807351"
            },
            "id": "ASB-A-454062218-6668a63c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4b32b0bd6876ecc25d60d95431763bf618699880",
            "target": {
                "function": "addPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 1425.0,
                "function_hash": "125525195444894464217750330831410874590"
            },
            "id": "ASB-A-454062218-ad073264",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4b32b0bd6876ecc25d60d95431763bf618699880",
            "target": {
                "function": "enableSystemPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/4b32b0bd6876ecc25d60d95431763bf618699880"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-454062218.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-03-01

Affected versions

Other
16

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 661.0,
                "function_hash": "284319997343437165940897188224211807351"
            },
            "id": "ASB-A-454062218-6c616d47",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/740256b41ba113708655f82dc5664291bf79edd0",
            "target": {
                "function": "addPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 11182.0,
                "function_hash": "211106132936534084502720084199233022640"
            },
            "id": "ASB-A-454062218-c721a06b",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/740256b41ba113708655f82dc5664291bf79edd0",
            "target": {
                "function": "readPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "193113628533422175067756173000827679994",
                    "309213008556413727970549784491072885555",
                    "103915627977762916572369854172376953855",
                    "270127856189385190131160968200975479895",
                    "331893266207625245204074903190443087899",
                    "255973484546427106109957016636518011297",
                    "155557292261108720229786485200282669595",
                    "64052198750897090704486203272274023043",
                    "290286764007979456270792027756986547649",
                    "2494170172020733298864325503100546890",
                    "98032843297654820866704555570670938284",
                    "142833129536356055003338544649091743284",
                    "81741354079129105791891338335974593241",
                    "80381060306142723617551929211147565004",
                    "197676826216394513519894417943599559895",
                    "212535098048582496322705205159881901718",
                    "141935063808271989837062787007033630046",
                    "158869717454838622534477537067446210174",
                    "81034217693563637724627856537760142288",
                    "6905083402804303387014043728206991340",
                    "271853793945591977299721426559251769222"
                ]
            },
            "id": "ASB-A-454062218-ccc4fb5c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/740256b41ba113708655f82dc5664291bf79edd0",
            "target": {
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 1425.0,
                "function_hash": "125525195444894464217750330831410874590"
            },
            "id": "ASB-A-454062218-e6bcb9cd",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/740256b41ba113708655f82dc5664291bf79edd0",
            "target": {
                "function": "enableSystemPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/740256b41ba113708655f82dc5664291bf79edd0"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-454062218.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-03-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 661.0,
                "function_hash": "284319997343437165940897188224211807351"
            },
            "id": "ASB-A-454062218-328e701e",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/73b1785a9f8893a2419c4f260b425a152fe75850",
            "target": {
                "function": "addPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 1425.0,
                "function_hash": "125525195444894464217750330831410874590"
            },
            "id": "ASB-A-454062218-3ad9431f",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/73b1785a9f8893a2419c4f260b425a152fe75850",
            "target": {
                "function": "enableSystemPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "193113628533422175067756173000827679994",
                    "309213008556413727970549784491072885555",
                    "103915627977762916572369854172376953855",
                    "270127856189385190131160968200975479895",
                    "331893266207625245204074903190443087899",
                    "255973484546427106109957016636518011297",
                    "155557292261108720229786485200282669595",
                    "64052198750897090704486203272274023043",
                    "290286764007979456270792027756986547649",
                    "2494170172020733298864325503100546890",
                    "98032843297654820866704555570670938284",
                    "142833129536356055003338544649091743284",
                    "81741354079129105791891338335974593241",
                    "80381060306142723617551929211147565004",
                    "197676826216394513519894417943599559895",
                    "212535098048582496322705205159881901718",
                    "141935063808271989837062787007033630046",
                    "158869717454838622534477537067446210174",
                    "81034217693563637724627856537760142288",
                    "6905083402804303387014043728206991340",
                    "271853793945591977299721426559251769222"
                ]
            },
            "id": "ASB-A-454062218-5d481de1",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/73b1785a9f8893a2419c4f260b425a152fe75850",
            "target": {
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 11613.0,
                "function_hash": "264395599137339639107651047999758842093"
            },
            "id": "ASB-A-454062218-d459f8fa",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/73b1785a9f8893a2419c4f260b425a152fe75850",
            "target": {
                "function": "readPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/73b1785a9f8893a2419c4f260b425a152fe75850"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-454062218.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-03-01

Affected versions

Other
14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 9995.0,
                "function_hash": "137784312276013940340327891707124488837"
            },
            "id": "ASB-A-454062218-80b7dc02",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ebd26d85a9e59569e587d5ad6384c1a0fe4440cc",
            "target": {
                "function": "readPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "224402722255896372297002727977158473518",
                    "64902452747486425988219297442902021335",
                    "50901606693728845590594171921752281941",
                    "292156504327675538663829928951282757895",
                    "164481467575030133943999691231751841547",
                    "37406276584328005671714621304520468273",
                    "215148686837882964143970126678391733537",
                    "335516374965104949799896044360537153888",
                    "168140497931974869983212923874137392983",
                    "156531654576830406430712702951441447560",
                    "138393851297676093797771619697090569653",
                    "228718581690540988277919725956730339920",
                    "83885092042609357490336318926515996256",
                    "45606039818385214155443337296054601198",
                    "132383651890466863833289270875205444764",
                    "310809837497482768015315402934777498564",
                    "38510742911989735377743417480857656159",
                    "213400700073499038942915101588328699376",
                    "68298697726680042253384060064172673124"
                ]
            },
            "id": "ASB-A-454062218-83662c44",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ebd26d85a9e59569e587d5ad6384c1a0fe4440cc",
            "target": {
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 806.0,
                "function_hash": "135924383374685116244805398144046121058"
            },
            "id": "ASB-A-454062218-879ccb76",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ebd26d85a9e59569e587d5ad6384c1a0fe4440cc",
            "target": {
                "function": "addPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        },
        {
            "digest": {
                "length": 913.0,
                "function_hash": "240461939662953300303024880342708923427"
            },
            "id": "ASB-A-454062218-ce17854c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ebd26d85a9e59569e587d5ad6384c1a0fe4440cc",
            "target": {
                "function": "enableSystemPackageLPw",
                "file": "services/core/java/com/android/server/pm/Settings.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/ebd26d85a9e59569e587d5ad6384c1a0fe4440cc"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2026-03-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-454062218.json"