In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/89ea066ba92f262d2e0be0f2c3eee5669101ebb5"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "279428955614949626166117920405294028631",
"length": 1223
},
"id": "ASB-A-472968114-252302a2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/89ea066ba92f262d2e0be0f2c3eee5669101ebb5",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java",
"function": "UsbDialogHelper"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"149654889227933720674393225608003150239",
"67292528303854517754581559914614451833",
"81202166694238742005829687742260732596",
"108996166463859623885543732661904351932",
"127962894947933470260906163637106348805",
"311253382171490320894174643691533771028"
],
"threshold": 0.9
},
"id": "ASB-A-472968114-e786a81d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/89ea066ba92f262d2e0be0f2c3eee5669101ebb5",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/b87ab5e10bc73cabab61b8eac09aace9340b9324"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"149654889227933720674393225608003150239",
"67292528303854517754581559914614451833",
"81202166694238742005829687742260732596",
"108996166463859623885543732661904351932",
"127962894947933470260906163637106348805",
"311253382171490320894174643691533771028"
],
"threshold": 0.9
},
"id": "ASB-A-472968114-9481b004",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b87ab5e10bc73cabab61b8eac09aace9340b9324",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "279428955614949626166117920405294028631",
"length": 1223
},
"id": "ASB-A-472968114-9663a7e0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/b87ab5e10bc73cabab61b8eac09aace9340b9324",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java",
"function": "UsbDialogHelper"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ac097ce019fce7696b2889b2f53b02fac059db09"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"149654889227933720674393225608003150239",
"67292528303854517754581559914614451833",
"81202166694238742005829687742260732596",
"108996166463859623885543732661904351932",
"127962894947933470260906163637106348805",
"311253382171490320894174643691533771028"
],
"threshold": 0.9
},
"id": "ASB-A-472968114-a52e1ba7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/ac097ce019fce7696b2889b2f53b02fac059db09",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "279428955614949626166117920405294028631",
"length": 1223
},
"id": "ASB-A-472968114-cfa6fbf8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/ac097ce019fce7696b2889b2f53b02fac059db09",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java",
"function": "UsbDialogHelper"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/8266d500f315be47546a6267bf5a9100e042352f"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"149654889227933720674393225608003150239",
"67292528303854517754581559914614451833",
"81202166694238742005829687742260732596",
"108996166463859623885543732661904351932",
"127962894947933470260906163637106348805",
"311253382171490320894174643691533771028"
],
"threshold": 0.9
},
"id": "ASB-A-472968114-d52a3220",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8266d500f315be47546a6267bf5a9100e042352f",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "279428955614949626166117920405294028631",
"length": 1223
},
"id": "ASB-A-472968114-f13941fa",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/8266d500f315be47546a6267bf5a9100e042352f",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java",
"function": "UsbDialogHelper"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/08574e0bfa4dc3babf1a05d0896c9a128525ed59"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "279428955614949626166117920405294028631",
"length": 1223
},
"id": "ASB-A-472968114-7df11f3e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/08574e0bfa4dc3babf1a05d0896c9a128525ed59",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java",
"function": "UsbDialogHelper"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"149654889227933720674393225608003150239",
"67292528303854517754581559914614451833",
"81202166694238742005829687742260732596",
"108996166463859623885543732661904351932",
"127962894947933470260906163637106348805",
"311253382171490320894174643691533771028"
],
"threshold": 0.9
},
"id": "ASB-A-472968114-fa5ab6ad",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/08574e0bfa4dc3babf1a05d0896c9a128525ed59",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/4818a52a27e1bda1417507ba01bd31dbe4e6b7db"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"149654889227933720674393225608003150239",
"67292528303854517754581559914614451833",
"81202166694238742005829687742260732596",
"108996166463859623885543732661904351932",
"127962894947933470260906163637106348805",
"311253382171490320894174643691533771028"
],
"threshold": 0.9
},
"id": "ASB-A-472968114-0c150038",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4818a52a27e1bda1417507ba01bd31dbe4e6b7db",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "279428955614949626166117920405294028631",
"length": 1223
},
"id": "ASB-A-472968114-accd5381",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4818a52a27e1bda1417507ba01bd31dbe4e6b7db",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/usb/UsbDialogHelper.java",
"function": "UsbDialogHelper"
}
}
]
}