ASB-A-465133716

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-465133716.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-465133716
Aliases
  • A-465133716
  • CVE-2026-0075
Published
2026-06-01T00:00:00Z
Modified
2026-06-26T15:22:10.377767615Z
Summary
[none]
Details

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-06-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6044ca5db93f9e8e5ef59dd94b97b7039a3e2c7d",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java"
            },
            "id": "ASB-A-465133716-0b7487f7",
            "signature_type": "Line",
            "digest": {
                "line_hashes": [
                    "174109802260110429025126535300258579448",
                    "61805258838576181967175519828738291817",
                    "99276373545876684026409368586235741696",
                    "104117919953874387096920762805432908424",
                    "44905717540477058735536096648194851899",
                    "253775033116321958565428467414583301252",
                    "63815629847303037668932222887346538451",
                    "2670960310369602436491354670582779299",
                    "293136208918172338730680569222876507201",
                    "310937112749657920413302397518481637823",
                    "104128373343281123032534124348768326166",
                    "18387634154170669671388436057341323992",
                    "140941994007822631418484391586177374107",
                    "284782678103595873297176302575901559363",
                    "104128373343281123032534124348768326166",
                    "150562261012211004977834823951934166130",
                    "149883628856771879461821604510907118754",
                    "177390120815022758096083881275067438441",
                    "104128373343281123032534124348768326166",
                    "289152166078996194694446288779704684673",
                    "130185578066441930697048196985935568995",
                    "295345443212088835607338847109546060955",
                    "211382881051308093025017484833165007430",
                    "320877382351371652279712052870875667691",
                    "104128373343281123032534124348768326166",
                    "329079589182380244815330219273344792087",
                    "299010617626844963994754332333966742317",
                    "62878674153116585571822223835893772099",
                    "69802657251485483034272610549141850711",
                    "247367063144086811135727449968378200560"
                ],
                "threshold": 0.9
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "delete"
            },
            "id": "ASB-A-465133716-4dc70c98",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6044ca5db93f9e8e5ef59dd94b97b7039a3e2c7d",
            "digest": {
                "function_hash": "234885050796259996493313331127043670853",
                "length": 949.0
            }
        },
        {
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6044ca5db93f9e8e5ef59dd94b97b7039a3e2c7d",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "query"
            },
            "id": "ASB-A-465133716-d97e5c18",
            "deprecated": false,
            "digest": {
                "function_hash": "273119325761839804296270056522454957983",
                "length": 668.0
            }
        },
        {
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6044ca5db93f9e8e5ef59dd94b97b7039a3e2c7d",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "insert"
            },
            "id": "ASB-A-465133716-dacac33e",
            "signature_type": "Function",
            "digest": {
                "function_hash": "94411036843228921880291415215601056123",
                "length": 1285.0
            }
        },
        {
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6044ca5db93f9e8e5ef59dd94b97b7039a3e2c7d",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "update"
            },
            "id": "ASB-A-465133716-ebce673c",
            "signature_type": "Function",
            "digest": {
                "function_hash": "275820184881413845175302596607676766459",
                "length": 1033.0
            }
        }
    ],
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6044ca5db93f9e8e5ef59dd94b97b7039a3e2c7d"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-465133716.json"
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-06-01

Affected versions

Other
15

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/45596d704731173036c8cb3f4470b76b9869a930",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "update"
            },
            "id": "ASB-A-465133716-0a24611f",
            "signature_type": "Function",
            "digest": {
                "function_hash": "275820184881413845175302596607676766459",
                "length": 1033.0
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "query"
            },
            "id": "ASB-A-465133716-202bf808",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/45596d704731173036c8cb3f4470b76b9869a930",
            "digest": {
                "function_hash": "273119325761839804296270056522454957983",
                "length": 668.0
            }
        },
        {
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/45596d704731173036c8cb3f4470b76b9869a930",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java"
            },
            "id": "ASB-A-465133716-3c178563",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "174109802260110429025126535300258579448",
                    "61805258838576181967175519828738291817",
                    "99276373545876684026409368586235741696",
                    "104117919953874387096920762805432908424",
                    "44905717540477058735536096648194851899",
                    "253775033116321958565428467414583301252",
                    "63815629847303037668932222887346538451",
                    "2670960310369602436491354670582779299",
                    "293136208918172338730680569222876507201",
                    "310937112749657920413302397518481637823",
                    "104128373343281123032534124348768326166",
                    "18387634154170669671388436057341323992",
                    "140941994007822631418484391586177374107",
                    "284782678103595873297176302575901559363",
                    "104128373343281123032534124348768326166",
                    "150562261012211004977834823951934166130",
                    "149883628856771879461821604510907118754",
                    "177390120815022758096083881275067438441",
                    "104128373343281123032534124348768326166",
                    "289152166078996194694446288779704684673",
                    "130185578066441930697048196985935568995",
                    "295345443212088835607338847109546060955",
                    "211382881051308093025017484833165007430",
                    "320877382351371652279712052870875667691",
                    "104128373343281123032534124348768326166",
                    "329079589182380244815330219273344792087",
                    "299010617626844963994754332333966742317",
                    "62878674153116585571822223835893772099",
                    "69802657251485483034272610549141850711",
                    "247367063144086811135727449968378200560"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/45596d704731173036c8cb3f4470b76b9869a930",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "insert"
            },
            "id": "ASB-A-465133716-c043e38e",
            "deprecated": false,
            "digest": {
                "function_hash": "273975568050708746596117449317992794879",
                "length": 990.0
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "delete"
            },
            "id": "ASB-A-465133716-f246b9c8",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/45596d704731173036c8cb3f4470b76b9869a930",
            "digest": {
                "function_hash": "234885050796259996493313331127043670853",
                "length": 949.0
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/45596d704731173036c8cb3f4470b76b9869a930"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-465133716.json"
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-06-01

Affected versions

Other
16

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "delete"
            },
            "id": "ASB-A-465133716-1f77c3d8",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/0570ed10b63de586efbe4bd3ac6c59ca4f4d9bbb",
            "digest": {
                "function_hash": "234885050796259996493313331127043670853",
                "length": 949.0
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "update"
            },
            "id": "ASB-A-465133716-2162f57d",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/0570ed10b63de586efbe4bd3ac6c59ca4f4d9bbb",
            "digest": {
                "function_hash": "275820184881413845175302596607676766459",
                "length": 1033.0
            }
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java"
            },
            "id": "ASB-A-465133716-2c7b0971",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/0570ed10b63de586efbe4bd3ac6c59ca4f4d9bbb",
            "digest": {
                "line_hashes": [
                    "174109802260110429025126535300258579448",
                    "61805258838576181967175519828738291817",
                    "99276373545876684026409368586235741696",
                    "104117919953874387096920762805432908424",
                    "44905717540477058735536096648194851899",
                    "253775033116321958565428467414583301252",
                    "63815629847303037668932222887346538451",
                    "2670960310369602436491354670582779299",
                    "293136208918172338730680569222876507201",
                    "310937112749657920413302397518481637823",
                    "104128373343281123032534124348768326166",
                    "18387634154170669671388436057341323992",
                    "140941994007822631418484391586177374107",
                    "284782678103595873297176302575901559363",
                    "104128373343281123032534124348768326166",
                    "150562261012211004977834823951934166130",
                    "149883628856771879461821604510907118754",
                    "177390120815022758096083881275067438441",
                    "104128373343281123032534124348768326166",
                    "289152166078996194694446288779704684673",
                    "130185578066441930697048196985935568995",
                    "295345443212088835607338847109546060955",
                    "211382881051308093025017484833165007430",
                    "320877382351371652279712052870875667691",
                    "104128373343281123032534124348768326166",
                    "329079589182380244815330219273344792087",
                    "299010617626844963994754332333966742317",
                    "62878674153116585571822223835893772099",
                    "69802657251485483034272610549141850711",
                    "247367063144086811135727449968378200560"
                ],
                "threshold": 0.9
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "query"
            },
            "id": "ASB-A-465133716-2f7767ad",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/0570ed10b63de586efbe4bd3ac6c59ca4f4d9bbb",
            "digest": {
                "function_hash": "273119325761839804296270056522454957983",
                "length": 668.0
            }
        },
        {
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/0570ed10b63de586efbe4bd3ac6c59ca4f4d9bbb",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "insert"
            },
            "id": "ASB-A-465133716-e2c5ab06",
            "signature_type": "Function",
            "digest": {
                "function_hash": "273975568050708746596117449317992794879",
                "length": 990.0
            }
        }
    ],
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/0570ed10b63de586efbe4bd3ac6c59ca4f4d9bbb"
    ],
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-465133716.json"
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-06-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "update"
            },
            "id": "ASB-A-465133716-0afa3603",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/f281a7acfd2c79257c57009eda4dc4eeb418710c",
            "digest": {
                "function_hash": "275820184881413845175302596607676766459",
                "length": 1033.0
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "delete"
            },
            "id": "ASB-A-465133716-32ddc5b4",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/f281a7acfd2c79257c57009eda4dc4eeb418710c",
            "digest": {
                "function_hash": "234885050796259996493313331127043670853",
                "length": 949.0
            }
        },
        {
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/f281a7acfd2c79257c57009eda4dc4eeb418710c",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "insert"
            },
            "id": "ASB-A-465133716-97851bec",
            "signature_type": "Function",
            "digest": {
                "function_hash": "94411036843228921880291415215601056123",
                "length": 1285.0
            }
        },
        {
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/f281a7acfd2c79257c57009eda4dc4eeb418710c",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "query"
            },
            "id": "ASB-A-465133716-b48ced03",
            "signature_type": "Function",
            "digest": {
                "function_hash": "273119325761839804296270056522454957983",
                "length": 668.0
            }
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java"
            },
            "id": "ASB-A-465133716-e5e7ea6a",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/f281a7acfd2c79257c57009eda4dc4eeb418710c",
            "digest": {
                "line_hashes": [
                    "174109802260110429025126535300258579448",
                    "61805258838576181967175519828738291817",
                    "99276373545876684026409368586235741696",
                    "104117919953874387096920762805432908424",
                    "44905717540477058735536096648194851899",
                    "253775033116321958565428467414583301252",
                    "63815629847303037668932222887346538451",
                    "2670960310369602436491354670582779299",
                    "293136208918172338730680569222876507201",
                    "310937112749657920413302397518481637823",
                    "104128373343281123032534124348768326166",
                    "18387634154170669671388436057341323992",
                    "140941994007822631418484391586177374107",
                    "284782678103595873297176302575901559363",
                    "104128373343281123032534124348768326166",
                    "150562261012211004977834823951934166130",
                    "149883628856771879461821604510907118754",
                    "177390120815022758096083881275067438441",
                    "104128373343281123032534124348768326166",
                    "289152166078996194694446288779704684673",
                    "130185578066441930697048196985935568995",
                    "295345443212088835607338847109546060955",
                    "211382881051308093025017484833165007430",
                    "320877382351371652279712052870875667691",
                    "104128373343281123032534124348768326166",
                    "329079589182380244815330219273344792087",
                    "299010617626844963994754332333966742317",
                    "62878674153116585571822223835893772099",
                    "69802657251485483034272610549141850711",
                    "247367063144086811135727449968378200560"
                ],
                "threshold": 0.9
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/f281a7acfd2c79257c57009eda4dc4eeb418710c"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-465133716.json"
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-06-01

Affected versions

Other
14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "delete"
            },
            "id": "ASB-A-465133716-3f5dcc2b",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/819ebe4a7c68b944bcb4db30cc941982a3de5313",
            "digest": {
                "function_hash": "234885050796259996493313331127043670853",
                "length": 949.0
            }
        },
        {
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/819ebe4a7c68b944bcb4db30cc941982a3de5313",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "query"
            },
            "id": "ASB-A-465133716-5b6a570d",
            "deprecated": false,
            "digest": {
                "function_hash": "273119325761839804296270056522454957983",
                "length": 668.0
            }
        },
        {
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/819ebe4a7c68b944bcb4db30cc941982a3de5313",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "insert"
            },
            "id": "ASB-A-465133716-7acbd740",
            "deprecated": false,
            "digest": {
                "function_hash": "273975568050708746596117449317992794879",
                "length": 990.0
            }
        },
        {
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/819ebe4a7c68b944bcb4db30cc941982a3de5313",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java"
            },
            "id": "ASB-A-465133716-cc0a4dda",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "174109802260110429025126535300258579448",
                    "61805258838576181967175519828738291817",
                    "99276373545876684026409368586235741696",
                    "104117919953874387096920762805432908424",
                    "44905717540477058735536096648194851899",
                    "253775033116321958565428467414583301252",
                    "63815629847303037668932222887346538451",
                    "2670960310369602436491354670582779299",
                    "293136208918172338730680569222876507201",
                    "310937112749657920413302397518481637823",
                    "104128373343281123032534124348768326166",
                    "18387634154170669671388436057341323992",
                    "140941994007822631418484391586177374107",
                    "284782678103595873297176302575901559363",
                    "104128373343281123032534124348768326166",
                    "150562261012211004977834823951934166130",
                    "149883628856771879461821604510907118754",
                    "177390120815022758096083881275067438441",
                    "104128373343281123032534124348768326166",
                    "289152166078996194694446288779704684673",
                    "130185578066441930697048196985935568995",
                    "295345443212088835607338847109546060955",
                    "211382881051308093025017484833165007430",
                    "320877382351371652279712052870875667691",
                    "104128373343281123032534124348768326166",
                    "329079589182380244815330219273344792087",
                    "299010617626844963994754332333966742317",
                    "62878674153116585571822223835893772099",
                    "69802657251485483034272610549141850711",
                    "247367063144086811135727449968378200560"
                ],
                "threshold": 0.9
            }
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/providers/contacts/ContactsProvider2.java",
                "function": "update"
            },
            "id": "ASB-A-465133716-ec7ec490",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/819ebe4a7c68b944bcb4db30cc941982a3de5313",
            "digest": {
                "function_hash": "275820184881413845175302596607676766459",
                "length": 1033.0
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/819ebe4a7c68b944bcb4db30cc941982a3de5313"
    ],
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-465133716.json"