In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/7d817db0c5a3b103603a0e6e47cec9e3f6b95ec3",
"https://android.googlesource.com/platform/packages/modules/Wifi/+/93ca4281c01fb5cadc1bdf79be65b710a3b63256"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "108086094004880633123570366906343498325",
"length": 494
},
"id": "ASB-A-515047710-b90101a0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/7d817db0c5a3b103603a0e6e47cec9e3f6b95ec3",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "registerWifiP2pListener"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "72869400086485505989062622375901578852",
"length": 352
},
"id": "ASB-A-515047710-c46c7843",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/7d817db0c5a3b103603a0e6e47cec9e3f6b95ec3",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "onPersistentGroupsChanged"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"112257403986519742860065239296274251384",
"77961325959252286955069597365345097624",
"99443849730743792278388922197807718286",
"164769216474073794088455229768928576420",
"247532707757141643064998750562578680329",
"13501552734441802460084566571509469690",
"332292612691143494110334715795874937287",
"242882442419903341531942324073619549489",
"203441389134543188957780018908971992466",
"244543513927979928410432770889404171206",
"188897799118401018699935768072558636331",
"267131289175941878523434434750590482836",
"145199796909884548486427085372976920697",
"260020638824935238736300278669408738524"
],
"threshold": 0.9
},
"id": "ASB-A-515047710-d550d0ea",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/7d817db0c5a3b103603a0e6e47cec9e3f6b95ec3",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/34e6300afd568b003d4762087399eff4e35fd1d8"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"112257403986519742860065239296274251384",
"77961325959252286955069597365345097624",
"65531172256773244012679539841123941873",
"333807762369364191184803517734408588451",
"186501837106468484504837273752844819589",
"247223415378523380593001108455163080894",
"242882442419903341531942324073619549489",
"203441389134543188957780018908971992466",
"244543513927979928410432770889404171206",
"188897799118401018699935768072558636331",
"267131289175941878523434434750590482836",
"145199796909884548486427085372976920697",
"260020638824935238736300278669408738524"
],
"threshold": 0.9
},
"id": "ASB-A-515047710-1c4c2b70",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/34e6300afd568b003d4762087399eff4e35fd1d8",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "118878228239815373289065064614406321149",
"length": 478
},
"id": "ASB-A-515047710-594fcb20",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/34e6300afd568b003d4762087399eff4e35fd1d8",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "registerWifiP2pListener"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "72869400086485505989062622375901578852",
"length": 352
},
"id": "ASB-A-515047710-b8b8b33f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/34e6300afd568b003d4762087399eff4e35fd1d8",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "onPersistentGroupsChanged"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/c65f17d6eab0113c4d047e04475838bf6c0e47de"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "118878228239815373289065064614406321149",
"length": 478
},
"id": "ASB-A-515047710-30c11d12",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/c65f17d6eab0113c4d047e04475838bf6c0e47de",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "registerWifiP2pListener"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"112257403986519742860065239296274251384",
"77961325959252286955069597365345097624",
"65531172256773244012679539841123941873",
"333807762369364191184803517734408588451",
"186501837106468484504837273752844819589",
"247223415378523380593001108455163080894",
"242882442419903341531942324073619549489",
"203441389134543188957780018908971992466",
"244543513927979928410432770889404171206",
"188897799118401018699935768072558636331",
"267131289175941878523434434750590482836",
"145199796909884548486427085372976920697",
"260020638824935238736300278669408738524"
],
"threshold": 0.9
},
"id": "ASB-A-515047710-6a560dd6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/c65f17d6eab0113c4d047e04475838bf6c0e47de",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "72869400086485505989062622375901578852",
"length": 352
},
"id": "ASB-A-515047710-ea7afbf5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/c65f17d6eab0113c4d047e04475838bf6c0e47de",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "onPersistentGroupsChanged"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/fd46f812758e7067602ac9f403c5fe6512bcb8fd"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "118878228239815373289065064614406321149",
"length": 478
},
"id": "ASB-A-515047710-39d5d73c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/fd46f812758e7067602ac9f403c5fe6512bcb8fd",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "registerWifiP2pListener"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "72869400086485505989062622375901578852",
"length": 352
},
"id": "ASB-A-515047710-777bbeba",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/fd46f812758e7067602ac9f403c5fe6512bcb8fd",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "onPersistentGroupsChanged"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"112257403986519742860065239296274251384",
"77961325959252286955069597365345097624",
"65531172256773244012679539841123941873",
"333807762369364191184803517734408588451",
"186501837106468484504837273752844819589",
"247223415378523380593001108455163080894",
"242882442419903341531942324073619549489",
"203441389134543188957780018908971992466",
"244543513927979928410432770889404171206",
"188897799118401018699935768072558636331",
"267131289175941878523434434750590482836",
"145199796909884548486427085372976920697",
"260020638824935238736300278669408738524"
],
"threshold": 0.9
},
"id": "ASB-A-515047710-e6223602",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/fd46f812758e7067602ac9f403c5fe6512bcb8fd",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/de4872cf04a1b4814226863a7d9a55ee9e8a9390"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"112257403986519742860065239296274251384",
"77961325959252286955069597365345097624",
"65531172256773244012679539841123941873",
"333807762369364191184803517734408588451",
"186501837106468484504837273752844819589",
"247223415378523380593001108455163080894",
"242882442419903341531942324073619549489",
"203441389134543188957780018908971992466",
"244543513927979928410432770889404171206",
"188897799118401018699935768072558636331",
"267131289175941878523434434750590482836",
"145199796909884548486427085372976920697",
"260020638824935238736300278669408738524"
],
"threshold": 0.9
},
"id": "ASB-A-515047710-634791bd",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/de4872cf04a1b4814226863a7d9a55ee9e8a9390",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "118878228239815373289065064614406321149",
"length": 478
},
"id": "ASB-A-515047710-e840d0f1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/de4872cf04a1b4814226863a7d9a55ee9e8a9390",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "registerWifiP2pListener"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "72869400086485505989062622375901578852",
"length": 352
},
"id": "ASB-A-515047710-fd3cbb9a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/de4872cf04a1b4814226863a7d9a55ee9e8a9390",
"target": {
"file": "service/java/com/android/server/wifi/p2p/WifiP2pServiceImpl.java",
"function": "onPersistentGroupsChanged"
}
}
]
}