In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/4f7d1bd3af8c86e2395e4718c69c4e0458eb27cf"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "167131975850304117433709919426000929026",
"length": 470
},
"id": "ASB-A-500705928-25ec1d1a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/4f7d1bd3af8c86e2395e4718c69c4e0458eb27cf",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "checkNearbyDevicesPermission"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"70564892298304164031892557205035915021",
"115212736953521272895707938580084641379",
"138959549201997751952128246317827569166",
"294270371296103123293432040281758543741"
],
"threshold": 0.9
},
"id": "ASB-A-500705928-acaf2a50",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/4f7d1bd3af8c86e2395e4718c69c4e0458eb27cf",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/d5952bbbd0b1dce84431b08605e6974eb73ba462"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "167131975850304117433709919426000929026",
"length": 470
},
"id": "ASB-A-500705928-063ee1ab",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/d5952bbbd0b1dce84431b08605e6974eb73ba462",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "checkNearbyDevicesPermission"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"70564892298304164031892557205035915021",
"115212736953521272895707938580084641379",
"138959549201997751952128246317827569166",
"294270371296103123293432040281758543741"
],
"threshold": 0.9
},
"id": "ASB-A-500705928-555ccf4a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/d5952bbbd0b1dce84431b08605e6974eb73ba462",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/9c5bacd1b6bfb84b7066a0ec6c55a690100127f6"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "167131975850304117433709919426000929026",
"length": 470
},
"id": "ASB-A-500705928-1744b658",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/9c5bacd1b6bfb84b7066a0ec6c55a690100127f6",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "checkNearbyDevicesPermission"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"70564892298304164031892557205035915021",
"115212736953521272895707938580084641379",
"138959549201997751952128246317827569166",
"294270371296103123293432040281758543741"
],
"threshold": 0.9
},
"id": "ASB-A-500705928-f97ecc5d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/9c5bacd1b6bfb84b7066a0ec6c55a690100127f6",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/268aad5eccd754c0a2ecac60a623309811e6bfb0"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "167131975850304117433709919426000929026",
"length": 470
},
"id": "ASB-A-500705928-76cca361",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/268aad5eccd754c0a2ecac60a623309811e6bfb0",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "checkNearbyDevicesPermission"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"70564892298304164031892557205035915021",
"115212736953521272895707938580084641379",
"138959549201997751952128246317827569166",
"294270371296103123293432040281758543741"
],
"threshold": 0.9
},
"id": "ASB-A-500705928-f291afb3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/268aad5eccd754c0a2ecac60a623309811e6bfb0",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/2f20bc3a356a01677033962c9712f66bc2c38e4c"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"70564892298304164031892557205035915021",
"115212736953521272895707938580084641379",
"138959549201997751952128246317827569166",
"294270371296103123293432040281758543741"
],
"threshold": 0.9
},
"id": "ASB-A-500705928-8ffa0f62",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/2f20bc3a356a01677033962c9712f66bc2c38e4c",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "167131975850304117433709919426000929026",
"length": 470
},
"id": "ASB-A-500705928-bd731462",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/2f20bc3a356a01677033962c9712f66bc2c38e4c",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "checkNearbyDevicesPermission"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/3f60b6e3bf7bc46ba167cbd150c910a182a22ad6"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"70564892298304164031892557205035915021",
"115212736953521272895707938580084641379",
"138959549201997751952128246317827569166",
"294270371296103123293432040281758543741"
],
"threshold": 0.9
},
"id": "ASB-A-500705928-29f9494e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/3f60b6e3bf7bc46ba167cbd150c910a182a22ad6",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "167131975850304117433709919426000929026",
"length": 470
},
"id": "ASB-A-500705928-e637063b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/3f60b6e3bf7bc46ba167cbd150c910a182a22ad6",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "checkNearbyDevicesPermission"
}
}
]
}