ASB-A-471173239

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-471173239.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-471173239
Aliases
  • A-471173239
  • CVE-2026-0094
Published
2026-06-01T00:00:00Z
Modified
2026-06-23T15:45:40.410020820Z
Summary
[none]
Details

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/apps/KeyChain

Package

Name
platform/packages/apps/KeyChain

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-06-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/KeyChain/+/63b405131fb57386e4157218c124813952267bc6"
    ],
    "severity": "High",
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "26687373485879391662561325096342427190",
                    "10564120794107447998862692671314800852",
                    "334786948668186791478667143733520750042",
                    "195454848540004563348757865935509402405",
                    "259441048041282786093793524702039661347",
                    "107820713247193742428586680493675422330",
                    "293227346220967011805556519508892492054",
                    "128544837652075124560358436014501237450",
                    "317048380878952574016295194129660067147",
                    "294065243487837461116566329224669477416",
                    "253516173234571607432916551470524949743",
                    "36981083390145988513535660273564440671",
                    "123880397416625023861882326713496867314",
                    "200867467935981279924066975327163370854",
                    "167851226727725959219140596888092811555",
                    "132044811077109378497839070930778047943",
                    "334117210891919007265941916267990304455"
                ]
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/KeyChain/+/63b405131fb57386e4157218c124813952267bc6",
            "id": "ASB-A-471173239-8f4618ba",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/keychain/KeyChainActivity.java"
            }
        },
        {
            "signature_version": "v1",
            "id": "ASB-A-471173239-f3e6d939",
            "source": "https://android.googlesource.com/platform/packages/apps/KeyChain/+/63b405131fb57386e4157218c124813952267bc6",
            "signature_type": "Function",
            "deprecated": false,
            "target": {
                "file": "src/com/android/keychain/KeyChainActivity.java",
                "function": "getApplicationLabel"
            },
            "digest": {
                "length": 216.0,
                "function_hash": "278906053347869451486875652198283524472"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-471173239.json"
platform/packages/apps/KeyChain

Package

Name
platform/packages/apps/KeyChain

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-06-01

Affected versions

Other
15

Ecosystem specific 

{
    "severity": "High",
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "length": 216.0,
                "function_hash": "278906053347869451486875652198283524472"
            },
            "id": "ASB-A-471173239-c947540e",
            "source": "https://android.googlesource.com/platform/packages/apps/KeyChain/+/7a734d424c21f937601b89bae1dc90e07e27de03",
            "signature_type": "Function",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/keychain/KeyChainActivity.java",
                "function": "getApplicationLabel"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "26687373485879391662561325096342427190",
                    "10564120794107447998862692671314800852",
                    "334786948668186791478667143733520750042",
                    "195454848540004563348757865935509402405",
                    "259441048041282786093793524702039661347",
                    "107820713247193742428586680493675422330",
                    "293227346220967011805556519508892492054",
                    "128544837652075124560358436014501237450",
                    "317048380878952574016295194129660067147",
                    "294065243487837461116566329224669477416",
                    "253516173234571607432916551470524949743",
                    "36981083390145988513535660273564440671",
                    "123880397416625023861882326713496867314",
                    "200867467935981279924066975327163370854",
                    "167851226727725959219140596888092811555",
                    "132044811077109378497839070930778047943",
                    "334117210891919007265941916267990304455"
                ]
            },
            "id": "ASB-A-471173239-e82da58d",
            "source": "https://android.googlesource.com/platform/packages/apps/KeyChain/+/7a734d424c21f937601b89bae1dc90e07e27de03",
            "signature_type": "Line",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/keychain/KeyChainActivity.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/KeyChain/+/7a734d424c21f937601b89bae1dc90e07e27de03"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-471173239.json"
platform/packages/apps/KeyChain

Package

Name
platform/packages/apps/KeyChain

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-06-01

Affected versions

Other
16

Ecosystem specific 

{
    "severity": "High",
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "length": 216.0,
                "function_hash": "278906053347869451486875652198283524472"
            },
            "id": "ASB-A-471173239-81d66a41",
            "source": "https://android.googlesource.com/platform/packages/apps/KeyChain/+/fcf77cbf5b240d8b82767b1d510c792510c923b4",
            "signature_type": "Function",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/keychain/KeyChainActivity.java",
                "function": "getApplicationLabel"
            }
        },
        {
            "signature_version": "v1",
            "id": "ASB-A-471173239-b6a77adb",
            "source": "https://android.googlesource.com/platform/packages/apps/KeyChain/+/fcf77cbf5b240d8b82767b1d510c792510c923b4",
            "signature_type": "Line",
            "deprecated": false,
            "target": {
                "file": "src/com/android/keychain/KeyChainActivity.java"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "26687373485879391662561325096342427190",
                    "10564120794107447998862692671314800852",
                    "334786948668186791478667143733520750042",
                    "195454848540004563348757865935509402405",
                    "259441048041282786093793524702039661347",
                    "107820713247193742428586680493675422330",
                    "293227346220967011805556519508892492054",
                    "128544837652075124560358436014501237450",
                    "317048380878952574016295194129660067147",
                    "294065243487837461116566329224669477416",
                    "253516173234571607432916551470524949743",
                    "36981083390145988513535660273564440671",
                    "123880397416625023861882326713496867314",
                    "200867467935981279924066975327163370854",
                    "167851226727725959219140596888092811555",
                    "132044811077109378497839070930778047943",
                    "334117210891919007265941916267990304455"
                ]
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/KeyChain/+/fcf77cbf5b240d8b82767b1d510c792510c923b4"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-471173239.json"
platform/packages/apps/KeyChain

Package

Name
platform/packages/apps/KeyChain

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-06-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/KeyChain/+/a87784d5b7780b9f821431131a99ce59906ef6e8"
    ],
    "severity": "High",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "26687373485879391662561325096342427190",
                    "10564120794107447998862692671314800852",
                    "334786948668186791478667143733520750042",
                    "195454848540004563348757865935509402405",
                    "259441048041282786093793524702039661347",
                    "107820713247193742428586680493675422330",
                    "293227346220967011805556519508892492054",
                    "128544837652075124560358436014501237450",
                    "317048380878952574016295194129660067147",
                    "294065243487837461116566329224669477416",
                    "253516173234571607432916551470524949743",
                    "36981083390145988513535660273564440671",
                    "123880397416625023861882326713496867314",
                    "200867467935981279924066975327163370854",
                    "167851226727725959219140596888092811555",
                    "132044811077109378497839070930778047943",
                    "334117210891919007265941916267990304455"
                ]
            },
            "id": "ASB-A-471173239-aa357ca4",
            "source": "https://android.googlesource.com/platform/packages/apps/KeyChain/+/a87784d5b7780b9f821431131a99ce59906ef6e8",
            "signature_type": "Line",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/keychain/KeyChainActivity.java"
            }
        },
        {
            "digest": {
                "length": 216.0,
                "function_hash": "278906053347869451486875652198283524472"
            },
            "id": "ASB-A-471173239-c33a69c7",
            "source": "https://android.googlesource.com/platform/packages/apps/KeyChain/+/a87784d5b7780b9f821431131a99ce59906ef6e8",
            "signature_type": "Function",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/keychain/KeyChainActivity.java",
                "function": "getApplicationLabel"
            }
        }
    ],
    "spl": "2026-06-01"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-471173239.json"
platform/packages/apps/KeyChain

Package

Name
platform/packages/apps/KeyChain

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-06-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/KeyChain/+/4be5fc7cab669c6e9a2100a1b9ad0c6c0ced6955"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "target": {
                "file": "src/com/android/keychain/KeyChainActivity.java"
            },
            "id": "ASB-A-471173239-249fac11",
            "source": "https://android.googlesource.com/platform/packages/apps/KeyChain/+/4be5fc7cab669c6e9a2100a1b9ad0c6c0ced6955",
            "signature_type": "Line",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "26687373485879391662561325096342427190",
                    "10564120794107447998862692671314800852",
                    "334786948668186791478667143733520750042",
                    "195454848540004563348757865935509402405",
                    "259441048041282786093793524702039661347",
                    "107820713247193742428586680493675422330",
                    "293227346220967011805556519508892492054",
                    "128544837652075124560358436014501237450",
                    "317048380878952574016295194129660067147",
                    "294065243487837461116566329224669477416",
                    "253516173234571607432916551470524949743",
                    "36981083390145988513535660273564440671",
                    "123880397416625023861882326713496867314",
                    "200867467935981279924066975327163370854",
                    "167851226727725959219140596888092811555",
                    "132044811077109378497839070930778047943",
                    "334117210891919007265941916267990304455"
                ]
            },
            "signature_version": "v1"
        },
        {
            "digest": {
                "length": 216.0,
                "function_hash": "278906053347869451486875652198283524472"
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/KeyChain/+/4be5fc7cab669c6e9a2100a1b9ad0c6c0ced6955",
            "id": "ASB-A-471173239-df09e297",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/keychain/KeyChainActivity.java",
                "function": "getApplicationLabel"
            }
        }
    ],
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-471173239.json"