ASB-A-495409704

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-495409704.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-495409704
Aliases
  • A-495409704
  • CVE-2026-49935
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:22Z
Summary
[none]
Details

In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "204640619156121527015000109178908719778",
                "length":  134
            },
            "id":  "ASB-A-495409704-12424313",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "enforceReadAppSpecificLocalesPermission"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "65108249682543369662895169525771640678",
                    "124511008088410140102027306009226811097",
                    "12578430793144090836326824156709633016",
                    "309170623087012450335331149533740038672",
                    "99760262590819959032684605100204788914",
                    "22956372567448344252373219566971357170",
                    "28154918724281620191803097820962342153",
                    "20373327523386036825058087662538163121",
                    "142932191048381655066480454741982696669",
                    "246294234149769732362235853238767381830",
                    "194021661568072029242773898042590878321",
                    "304593631200895600299124931216184258654",
                    "135400389216790823390656141790877931888",
                    "121709718552727013508263063397889062031",
                    "287984017247713266422381603041510423238",
                    "105197364842148803494048246472238349333",
                    "84444668375217595136283703802417526042",
                    "115081509818505196177982383578720692195",
                    "69466328432589881792934062894658759388",
                    "310199797424744018136115483308189328266",
                    "310779936514822097921495146728044147206",
                    "270050512741005101982096221570688599084",
                    "107431043384748316432201972400711436992",
                    "128912889450738313214841166868332171371",
                    "314575291799610489605641954583839074466"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-32819cbd",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "27582516652715705737538442692828518397",
                "length":  654
            },
            "id":  "ASB-A-495409704-3324d127",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getApplicationLocales"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "19651672710792399300603434211876709189",
                "length":  208
            },
            "id":  "ASB-A-495409704-7b7aece0",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getXmlFileNameForUser"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "316882120375936217854703695627144018893",
                "length":  1042
            },
            "id":  "ASB-A-495409704-81f6ebe2",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29",
        "https://android.googlesource.com/platform/frameworks/base/+/0b14d40e2f7cb84add09163976f7cbb45e1d3b7a"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "316882120375936217854703695627144018893",
                "length":  1042
            },
            "id":  "ASB-A-495409704-1982a7e5",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "27582516652715705737538442692828518397",
                "length":  654
            },
            "id":  "ASB-A-495409704-2acb0f48",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getApplicationLocales"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "250637483692756758966468287869369123818",
                    "238861801233761563171882973496142869361",
                    "275198498035068956357998673455030678984"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-41d096e5",
            "match_only_versions":  [
                "15"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b14d40e2f7cb84add09163976f7cbb45e1d3b7a",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "65108249682543369662895169525771640678",
                    "124511008088410140102027306009226811097",
                    "12578430793144090836326824156709633016",
                    "309170623087012450335331149533740038672",
                    "99760262590819959032684605100204788914",
                    "22956372567448344252373219566971357170",
                    "28154918724281620191803097820962342153",
                    "20373327523386036825058087662538163121",
                    "142932191048381655066480454741982696669",
                    "246294234149769732362235853238767381830",
                    "194021661568072029242773898042590878321",
                    "304593631200895600299124931216184258654",
                    "135400389216790823390656141790877931888",
                    "121709718552727013508263063397889062031",
                    "287984017247713266422381603041510423238",
                    "105197364842148803494048246472238349333",
                    "84444668375217595136283703802417526042",
                    "115081509818505196177982383578720692195",
                    "69466328432589881792934062894658759388",
                    "310199797424744018136115483308189328266",
                    "310779936514822097921495146728044147206",
                    "270050512741005101982096221570688599084",
                    "107431043384748316432201972400711436992",
                    "128912889450738313214841166868332171371",
                    "314575291799610489605641954583839074466"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-5cddc01b",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "204640619156121527015000109178908719778",
                "length":  134
            },
            "id":  "ASB-A-495409704-9b4c9df5",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "enforceReadAppSpecificLocalesPermission"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "185141413877681854166128703631407916015",
                "length":  1349
            },
            "id":  "ASB-A-495409704-d5ea8915",
            "match_only_versions":  [
                "15"
            ],
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b14d40e2f7cb84add09163976f7cbb45e1d3b7a",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "19651672710792399300603434211876709189",
                "length":  208
            },
            "id":  "ASB-A-495409704-f6b72aa7",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getXmlFileNameForUser"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6",
        "https://android.googlesource.com/platform/frameworks/base/+/b27cab2b96365d2b64aa2858d299c99f01961eff"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "204640619156121527015000109178908719778",
                "length":  134
            },
            "id":  "ASB-A-495409704-0070ae57",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "enforceReadAppSpecificLocalesPermission"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "250637483692756758966468287869369123818",
                    "238861801233761563171882973496142869361",
                    "275198498035068956357998673455030678984"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-3e5c1fb9",
            "match_only_versions":  [
                "16"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/b27cab2b96365d2b64aa2858d299c99f01961eff",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "316882120375936217854703695627144018893",
                "length":  1042
            },
            "id":  "ASB-A-495409704-444fa1f7",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "19651672710792399300603434211876709189",
                "length":  208
            },
            "id":  "ASB-A-495409704-818bd204",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getXmlFileNameForUser"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "65108249682543369662895169525771640678",
                    "124511008088410140102027306009226811097",
                    "12578430793144090836326824156709633016",
                    "309170623087012450335331149533740038672",
                    "99760262590819959032684605100204788914",
                    "22956372567448344252373219566971357170",
                    "28154918724281620191803097820962342153",
                    "20373327523386036825058087662538163121",
                    "142932191048381655066480454741982696669",
                    "246294234149769732362235853238767381830",
                    "194021661568072029242773898042590878321",
                    "304593631200895600299124931216184258654",
                    "135400389216790823390656141790877931888",
                    "121709718552727013508263063397889062031",
                    "287984017247713266422381603041510423238",
                    "105197364842148803494048246472238349333",
                    "84444668375217595136283703802417526042",
                    "115081509818505196177982383578720692195",
                    "69466328432589881792934062894658759388",
                    "310199797424744018136115483308189328266",
                    "310779936514822097921495146728044147206",
                    "270050512741005101982096221570688599084",
                    "107431043384748316432201972400711436992",
                    "128912889450738313214841166868332171371",
                    "314575291799610489605641954583839074466"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-d95aeae8",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "27582516652715705737538442692828518397",
                "length":  654
            },
            "id":  "ASB-A-495409704-e2bf08c9",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getApplicationLocales"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "185141413877681854166128703631407916015",
                "length":  1349
            },
            "id":  "ASB-A-495409704-ec58e87c",
            "match_only_versions":  [
                "16"
            ],
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/b27cab2b96365d2b64aa2858d299c99f01961eff",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c",
        "https://android.googlesource.com/platform/frameworks/base/+/c9e9635f6a80b987ed2cb0a829da31dad951c178"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "27582516652715705737538442692828518397",
                "length":  654
            },
            "id":  "ASB-A-495409704-13a2f209",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getApplicationLocales"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "316882120375936217854703695627144018893",
                "length":  1042
            },
            "id":  "ASB-A-495409704-64597355",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "204640619156121527015000109178908719778",
                "length":  134
            },
            "id":  "ASB-A-495409704-a85cebde",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "enforceReadAppSpecificLocalesPermission"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "185141413877681854166128703631407916015",
                "length":  1349
            },
            "id":  "ASB-A-495409704-c58e54a3",
            "match_only_versions":  [
                "16-qpr2"
            ],
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/c9e9635f6a80b987ed2cb0a829da31dad951c178",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "65108249682543369662895169525771640678",
                    "124511008088410140102027306009226811097",
                    "12578430793144090836326824156709633016",
                    "309170623087012450335331149533740038672",
                    "99760262590819959032684605100204788914",
                    "22956372567448344252373219566971357170",
                    "28154918724281620191803097820962342153",
                    "20373327523386036825058087662538163121",
                    "142932191048381655066480454741982696669",
                    "246294234149769732362235853238767381830",
                    "194021661568072029242773898042590878321",
                    "304593631200895600299124931216184258654",
                    "135400389216790823390656141790877931888",
                    "121709718552727013508263063397889062031",
                    "287984017247713266422381603041510423238",
                    "105197364842148803494048246472238349333",
                    "84444668375217595136283703802417526042",
                    "115081509818505196177982383578720692195",
                    "69466328432589881792934062894658759388",
                    "310199797424744018136115483308189328266",
                    "310779936514822097921495146728044147206",
                    "270050512741005101982096221570688599084",
                    "107431043384748316432201972400711436992",
                    "128912889450738313214841166868332171371",
                    "314575291799610489605641954583839074466"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-cb8d1a64",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "250637483692756758966468287869369123818",
                    "238861801233761563171882973496142869361",
                    "275198498035068956357998673455030678984"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-e89e32d9",
            "match_only_versions":  [
                "16-qpr2"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/c9e9635f6a80b987ed2cb0a829da31dad951c178",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "19651672710792399300603434211876709189",
                "length":  208
            },
            "id":  "ASB-A-495409704-eb3a486a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getXmlFileNameForUser"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd",
        "https://android.googlesource.com/platform/frameworks/base/+/e2491491cc025861177114cf8be226952f32e046"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "27582516652715705737538442692828518397",
                "length":  654
            },
            "id":  "ASB-A-495409704-12a512ff",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getApplicationLocales"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "204640619156121527015000109178908719778",
                "length":  134
            },
            "id":  "ASB-A-495409704-1c383524",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "enforceReadAppSpecificLocalesPermission"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "316882120375936217854703695627144018893",
                "length":  1042
            },
            "id":  "ASB-A-495409704-230e22f1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "250637483692756758966468287869369123818",
                    "238861801233761563171882973496142869361",
                    "275198498035068956357998673455030678984"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-26abf61c",
            "match_only_versions":  [
                "17"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e2491491cc025861177114cf8be226952f32e046",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "19651672710792399300603434211876709189",
                "length":  208
            },
            "id":  "ASB-A-495409704-3b85e1ec",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getXmlFileNameForUser"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "65108249682543369662895169525771640678",
                    "124511008088410140102027306009226811097",
                    "12578430793144090836326824156709633016",
                    "309170623087012450335331149533740038672",
                    "99760262590819959032684605100204788914",
                    "22956372567448344252373219566971357170",
                    "28154918724281620191803097820962342153",
                    "20373327523386036825058087662538163121",
                    "142932191048381655066480454741982696669",
                    "246294234149769732362235853238767381830",
                    "194021661568072029242773898042590878321",
                    "304593631200895600299124931216184258654",
                    "135400389216790823390656141790877931888",
                    "121709718552727013508263063397889062031",
                    "287984017247713266422381603041510423238",
                    "105197364842148803494048246472238349333",
                    "84444668375217595136283703802417526042",
                    "115081509818505196177982383578720692195",
                    "69466328432589881792934062894658759388",
                    "310199797424744018136115483308189328266",
                    "310779936514822097921495146728044147206",
                    "270050512741005101982096221570688599084",
                    "107431043384748316432201972400711436992",
                    "128912889450738313214841166868332171371",
                    "314575291799610489605641954583839074466"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-7aff3b38",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "185141413877681854166128703631407916015",
                "length":  1349
            },
            "id":  "ASB-A-495409704-88c17f96",
            "match_only_versions":  [
                "17"
            ],
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e2491491cc025861177114cf8be226952f32e046",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382",
        "https://android.googlesource.com/platform/frameworks/base/+/23650bac77a4233be59c75956c9d39e1e0e8f170"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "19651672710792399300603434211876709189",
                "length":  208
            },
            "id":  "ASB-A-495409704-35978d46",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getXmlFileNameForUser"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "250637483692756758966468287869369123818",
                    "238861801233761563171882973496142869361",
                    "275198498035068956357998673455030678984"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-7e83219a",
            "match_only_versions":  [
                "14"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/23650bac77a4233be59c75956c9d39e1e0e8f170",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "65108249682543369662895169525771640678",
                    "124511008088410140102027306009226811097",
                    "12578430793144090836326824156709633016",
                    "309170623087012450335331149533740038672",
                    "99760262590819959032684605100204788914",
                    "22956372567448344252373219566971357170",
                    "28154918724281620191803097820962342153",
                    "20373327523386036825058087662538163121",
                    "142932191048381655066480454741982696669",
                    "246294234149769732362235853238767381830",
                    "194021661568072029242773898042590878321",
                    "304593631200895600299124931216184258654",
                    "135400389216790823390656141790877931888",
                    "121709718552727013508263063397889062031",
                    "287984017247713266422381603041510423238",
                    "105197364842148803494048246472238349333",
                    "84444668375217595136283703802417526042",
                    "115081509818505196177982383578720692195",
                    "69466328432589881792934062894658759388",
                    "310199797424744018136115483308189328266",
                    "310779936514822097921495146728044147206",
                    "270050512741005101982096221570688599084",
                    "107431043384748316432201972400711436992",
                    "128912889450738313214841166868332171371",
                    "314575291799610489605641954583839074466"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-495409704-91ae063f",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "185141413877681854166128703631407916015",
                "length":  1349
            },
            "id":  "ASB-A-495409704-d9d7259a",
            "match_only_versions":  [
                "14"
            ],
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/23650bac77a4233be59c75956c9d39e1e0e8f170",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "204640619156121527015000109178908719778",
                "length":  134
            },
            "id":  "ASB-A-495409704-dba13311",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "enforceReadAppSpecificLocalesPermission"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "27582516652715705737538442692828518397",
                "length":  654
            },
            "id":  "ASB-A-495409704-ea25a889",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getApplicationLocales"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "316882120375936217854703695627144018893",
                "length":  1042
            },
            "id":  "ASB-A-495409704-fb4ba960",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382",
            "target":  {
                "file":  "services/core/java/com/android/server/locales/LocaleManagerService.java",
                "function":  "getOverrideLocaleConfig"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"