ASB-A-473812391

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-473812391.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-473812391
Aliases
  • A-473812391
  • CVE-2026-0093
Published
2026-06-01T00:00:00Z
Modified
2026-06-19T15:21:58.810540849Z
Summary
[none]
Details

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-06-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f"
    ],
    "types": [
        "EoP"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "249607597370264830851362726405154015173",
                    "178623044373981739044386017382561244851",
                    "260735100511349823035606178929262004152",
                    "96905710419506132194088665086566227236",
                    "99838751565460380791628710163388835392"
                ]
            },
            "id": "ASB-A-473812391-225db993",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/RequestManageCredentials.java"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f",
            "digest": {
                "function_hash": "293033288484433833086437616036677828180",
                "length": 446.0
            },
            "id": "ASB-A-473812391-665fc370",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java",
                "function": "bindView"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f",
            "digest": {
                "function_hash": "1969484911312321971625466025349271612",
                "length": 571.0
            },
            "id": "ASB-A-473812391-a1296dc3",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java",
                "function": "bindView"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f",
            "digest": {
                "function_hash": "77512333391319097563945191882230601873",
                "length": 655.0
            },
            "id": "ASB-A-473812391-db26a6db",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/RequestManageCredentials.java",
                "function": "loadHeader"
            }
        },
        {
            "signature_version": "v1",
            "id": "ASB-A-473812391-ff3e23a8",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/9499ab2800925ea1dff516f58895945f298b730f",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "286758239130468370542504240264374029998",
                    "198929640315088684422500658482555996242",
                    "9082788145369732231762339435505700124",
                    "58496260375189408325215300380198540524",
                    "40014189659150200916594044700088199513",
                    "77224342357809149183479777464751465054",
                    "11711124836413969668047194545661499358",
                    "104386890673949926694563712726201540078",
                    "174970364241947853447272827728673893129"
                ]
            },
            "signature_type": "Line",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java"
            }
        }
    ],
    "spl": "2026-06-01"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-473812391.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-06-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5"
    ],
    "types": [
        "EoP"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5",
            "digest": {
                "function_hash": "77512333391319097563945191882230601873",
                "length": 655.0
            },
            "id": "ASB-A-473812391-064b1f99",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/RequestManageCredentials.java",
                "function": "loadHeader"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5",
            "digest": {
                "function_hash": "1969484911312321971625466025349271612",
                "length": 571.0
            },
            "id": "ASB-A-473812391-1fb293b0",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java",
                "function": "bindView"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "286758239130468370542504240264374029998",
                    "198929640315088684422500658482555996242",
                    "9082788145369732231762339435505700124",
                    "58496260375189408325215300380198540524",
                    "40014189659150200916594044700088199513",
                    "77224342357809149183479777464751465054",
                    "11711124836413969668047194545661499358",
                    "104386890673949926694563712726201540078",
                    "174970364241947853447272827728673893129"
                ]
            },
            "id": "ASB-A-473812391-6262da86",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "249607597370264830851362726405154015173",
                    "178623044373981739044386017382561244851",
                    "260735100511349823035606178929262004152",
                    "96905710419506132194088665086566227236",
                    "99838751565460380791628710163388835392"
                ]
            },
            "id": "ASB-A-473812391-6fde0e4a",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/RequestManageCredentials.java"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/64947620bdb3080575b798231d92d6985db9afd5",
            "digest": {
                "function_hash": "293033288484433833086437616036677828180",
                "length": 446.0
            },
            "id": "ASB-A-473812391-72c93583",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java",
                "function": "bindView"
            }
        }
    ],
    "spl": "2026-06-01"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-473812391.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-06-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b"
    ],
    "types": [
        "EoP"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b",
            "digest": {
                "function_hash": "293033288484433833086437616036677828180",
                "length": 446.0
            },
            "id": "ASB-A-473812391-3c366345",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java",
                "function": "bindView"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "249607597370264830851362726405154015173",
                    "178623044373981739044386017382561244851",
                    "260735100511349823035606178929262004152",
                    "96905710419506132194088665086566227236",
                    "99838751565460380791628710163388835392"
                ]
            },
            "id": "ASB-A-473812391-3cca0454",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/RequestManageCredentials.java"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b",
            "digest": {
                "function_hash": "1969484911312321971625466025349271612",
                "length": 571.0
            },
            "id": "ASB-A-473812391-4750fe21",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java",
                "function": "bindView"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b",
            "digest": {
                "function_hash": "77512333391319097563945191882230601873",
                "length": 655.0
            },
            "id": "ASB-A-473812391-d7060a23",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/RequestManageCredentials.java",
                "function": "loadHeader"
            }
        },
        {
            "signature_version": "v1",
            "id": "ASB-A-473812391-d8c32a2f",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/90d0369007b8674681117482774835c004caf72b",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "286758239130468370542504240264374029998",
                    "198929640315088684422500658482555996242",
                    "9082788145369732231762339435505700124",
                    "58496260375189408325215300380198540524",
                    "40014189659150200916594044700088199513",
                    "77224342357809149183479777464751465054",
                    "11711124836413969668047194545661499358",
                    "104386890673949926694563712726201540078",
                    "174970364241947853447272827728673893129"
                ]
            },
            "signature_type": "Line",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java"
            }
        }
    ],
    "spl": "2026-06-01"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-473812391.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-06-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db"
    ],
    "types": [
        "EoP"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "id": "ASB-A-473812391-2b0a0704",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db",
            "digest": {
                "function_hash": "1969484911312321971625466025349271612",
                "length": 571.0
            },
            "signature_type": "Function",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java",
                "function": "bindView"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db",
            "digest": {
                "function_hash": "77512333391319097563945191882230601873",
                "length": 655.0
            },
            "id": "ASB-A-473812391-34d3c1e3",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/RequestManageCredentials.java",
                "function": "loadHeader"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "249607597370264830851362726405154015173",
                    "178623044373981739044386017382561244851",
                    "260735100511349823035606178929262004152",
                    "96905710419506132194088665086566227236",
                    "99838751565460380791628710163388835392"
                ]
            },
            "id": "ASB-A-473812391-622ae412",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/RequestManageCredentials.java"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "286758239130468370542504240264374029998",
                    "198929640315088684422500658482555996242",
                    "9082788145369732231762339435505700124",
                    "58496260375189408325215300380198540524",
                    "40014189659150200916594044700088199513",
                    "77224342357809149183479777464751465054",
                    "11711124836413969668047194545661499358",
                    "104386890673949926694563712726201540078",
                    "174970364241947853447272827728673893129"
                ]
            },
            "id": "ASB-A-473812391-7e1a7d12",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java"
            }
        },
        {
            "signature_version": "v1",
            "id": "ASB-A-473812391-9a1cbbbb",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/ede63c0ead0fd2a142fd0702c60a12b2ea2958db",
            "digest": {
                "function_hash": "293033288484433833086437616036677828180",
                "length": 446.0
            },
            "signature_type": "Function",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java",
                "function": "bindView"
            }
        }
    ],
    "spl": "2026-06-01"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-473812391.json"
platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-06-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229"
    ],
    "types": [
        "EoP"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "309903578932951313554907657347158230338",
                    "178623044373981739044386017382561244851",
                    "260735100511349823035606178929262004152",
                    "96905710419506132194088665086566227236",
                    "99838751565460380791628710163388835392"
                ]
            },
            "id": "ASB-A-473812391-2f2b6d51",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/RequestManageCredentials.java"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229",
            "digest": {
                "function_hash": "293033288484433833086437616036677828180",
                "length": 446.0
            },
            "id": "ASB-A-473812391-611c8ad2",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java",
                "function": "bindView"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "286758239130468370542504240264374029998",
                    "198929640315088684422500658482555996242",
                    "9082788145369732231762339435505700124",
                    "58496260375189408325215300380198540524",
                    "40014189659150200916594044700088199513",
                    "77224342357809149183479777464751465054",
                    "11711124836413969668047194545661499358",
                    "104386890673949926694563712726201540078",
                    "174970364241947853447272827728673893129"
                ]
            },
            "id": "ASB-A-473812391-b4784578",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java"
            }
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229",
            "digest": {
                "function_hash": "1969484911312321971625466025349271612",
                "length": 571.0
            },
            "id": "ASB-A-473812391-cbcbd6ce",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/CredentialManagementAppAdapter.java",
                "function": "bindView"
            }
        },
        {
            "signature_version": "v1",
            "id": "ASB-A-473812391-f9683a57",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/9cc2911dc24d2be82d729cce2f7ea4b2e6dfe229",
            "digest": {
                "function_hash": "77512333391319097563945191882230601873",
                "length": 655.0
            },
            "signature_type": "Function",
            "deprecated": false,
            "target": {
                "file": "src/com/android/settings/security/RequestManageCredentials.java",
                "function": "loadHeader"
            }
        }
    ],
    "spl": "2026-06-01"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-473812391.json"