ASB-A-482024712

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-482024712.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-482024712
Aliases
  • A-482024712
  • CVE-2026-45522
Published
2026-11-01T00:00:00Z
Modified
2026-11-03T17:44:55Z
Summary
[none]
Details

In setProvisioning of EnterpriseProvisioningWrapper.java, there is a possible local bypass of user interaction requirements on package installation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/apps/ManagedProvisioning

Package

Name
platform/packages/apps/ManagedProvisioning

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8"
    ],
    "severity": "High",
    "spl": "2026-11-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "220262975009191960028187275266101907036",
                "length": 475
            },
            "id": "ASB-A-482024712-4440ee92",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java",
                "function": "verifyActionAndCallerInner"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "101977703831286833404947090558882533891",
                    "79528439821016581726390354556650250724",
                    "110628985262927932226201206664334467886"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-46a1ba16",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8",
            "target": {
                "file": "src/com/android/managedprovisioning/common/Globals.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "234386524556167911415314882076874463555",
                    "100779069912042773471003773619909090394",
                    "102622712216492252712970956182813507611",
                    "128727856196892671407637945168632125947",
                    "3363069296211027055243577965575008862",
                    "120237504258966383069508387728616585931",
                    "8251588826120684776545440082453682050",
                    "212439321413227085732384524619099854882",
                    "191934219505742740381089598127273525815",
                    "186182902646409464002697776283655398623",
                    "98272384021563122742223539537536677623",
                    "206713745442346364713057073319978224460"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-52048703",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"
platform/packages/apps/ManagedProvisioning

Package

Name
platform/packages/apps/ManagedProvisioning

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee"
    ],
    "severity": "High",
    "spl": "2026-11-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "234386524556167911415314882076874463555",
                    "100779069912042773471003773619909090394",
                    "102622712216492252712970956182813507611",
                    "128727856196892671407637945168632125947",
                    "3363069296211027055243577965575008862",
                    "120237504258966383069508387728616585931",
                    "8251588826120684776545440082453682050",
                    "212439321413227085732384524619099854882",
                    "191934219505742740381089598127273525815",
                    "186182902646409464002697776283655398623",
                    "98272384021563122742223539537536677623",
                    "206713745442346364713057073319978224460"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-5c8f164f",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "101977703831286833404947090558882533891",
                    "79528439821016581726390354556650250724",
                    "110628985262927932226201206664334467886"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-d4b90f8f",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee",
            "target": {
                "file": "src/com/android/managedprovisioning/common/Globals.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "220262975009191960028187275266101907036",
                "length": 475
            },
            "id": "ASB-A-482024712-ddc52f4c",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java",
                "function": "verifyActionAndCallerInner"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"
platform/packages/apps/ManagedProvisioning

Package

Name
platform/packages/apps/ManagedProvisioning

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246"
    ],
    "severity": "High",
    "spl": "2026-11-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "101977703831286833404947090558882533891",
                    "79528439821016581726390354556650250724",
                    "110628985262927932226201206664334467886"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-855f156f",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246",
            "target": {
                "file": "src/com/android/managedprovisioning/common/Globals.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "234386524556167911415314882076874463555",
                    "100779069912042773471003773619909090394",
                    "102622712216492252712970956182813507611",
                    "128727856196892671407637945168632125947",
                    "3363069296211027055243577965575008862",
                    "120237504258966383069508387728616585931",
                    "8251588826120684776545440082453682050",
                    "212439321413227085732384524619099854882",
                    "191934219505742740381089598127273525815",
                    "186182902646409464002697776283655398623",
                    "98272384021563122742223539537536677623",
                    "206713745442346364713057073319978224460"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-b4dd14b5",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "220262975009191960028187275266101907036",
                "length": 475
            },
            "id": "ASB-A-482024712-bd220c20",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java",
                "function": "verifyActionAndCallerInner"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"
platform/packages/apps/ManagedProvisioning

Package

Name
platform/packages/apps/ManagedProvisioning

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb"
    ],
    "severity": "High",
    "spl": "2026-11-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "101977703831286833404947090558882533891",
                    "79528439821016581726390354556650250724",
                    "110628985262927932226201206664334467886"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-3217096e",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb",
            "target": {
                "file": "src/com/android/managedprovisioning/common/Globals.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "234386524556167911415314882076874463555",
                    "100779069912042773471003773619909090394",
                    "102622712216492252712970956182813507611",
                    "128727856196892671407637945168632125947",
                    "3363069296211027055243577965575008862",
                    "120237504258966383069508387728616585931",
                    "8251588826120684776545440082453682050",
                    "212439321413227085732384524619099854882",
                    "191934219505742740381089598127273525815",
                    "186182902646409464002697776283655398623",
                    "98272384021563122742223539537536677623",
                    "206713745442346364713057073319978224460"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-67714aa5",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "220262975009191960028187275266101907036",
                "length": 475
            },
            "id": "ASB-A-482024712-a0aa23c7",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java",
                "function": "verifyActionAndCallerInner"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"
platform/packages/apps/ManagedProvisioning

Package

Name
platform/packages/apps/ManagedProvisioning

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0"
    ],
    "severity": "High",
    "spl": "2026-11-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "234386524556167911415314882076874463555",
                    "100779069912042773471003773619909090394",
                    "102622712216492252712970956182813507611",
                    "128727856196892671407637945168632125947",
                    "3363069296211027055243577965575008862",
                    "120237504258966383069508387728616585931",
                    "8251588826120684776545440082453682050",
                    "212439321413227085732384524619099854882",
                    "191934219505742740381089598127273525815",
                    "186182902646409464002697776283655398623",
                    "98272384021563122742223539537536677623",
                    "206713745442346364713057073319978224460"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-070888c2",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "220262975009191960028187275266101907036",
                "length": 475
            },
            "id": "ASB-A-482024712-779e6a92",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java",
                "function": "verifyActionAndCallerInner"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "101977703831286833404947090558882533891",
                    "79528439821016581726390354556650250724",
                    "110628985262927932226201206664334467886"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-ff0ee458",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0",
            "target": {
                "file": "src/com/android/managedprovisioning/common/Globals.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"
platform/packages/apps/ManagedProvisioning

Package

Name
platform/packages/apps/ManagedProvisioning

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d"
    ],
    "severity": "High",
    "spl": "2026-11-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "234386524556167911415314882076874463555",
                    "100779069912042773471003773619909090394",
                    "102622712216492252712970956182813507611",
                    "128727856196892671407637945168632125947",
                    "3363069296211027055243577965575008862",
                    "120237504258966383069508387728616585931",
                    "8251588826120684776545440082453682050",
                    "212439321413227085732384524619099854882",
                    "191934219505742740381089598127273525815",
                    "186182902646409464002697776283655398623",
                    "98272384021563122742223539537536677623",
                    "206713745442346364713057073319978224460"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-706ac887",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "220262975009191960028187275266101907036",
                "length": 475
            },
            "id": "ASB-A-482024712-80b79654",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d",
            "target": {
                "file": "src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java",
                "function": "verifyActionAndCallerInner"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "101977703831286833404947090558882533891",
                    "79528439821016581726390354556650250724",
                    "110628985262927932226201206664334467886"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-482024712-8361b830",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d",
            "target": {
                "file": "src/com/android/managedprovisioning/common/Globals.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"