ASB-A-517378646

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-517378646.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-517378646
Aliases
  • A-517378646
  • CVE-2026-59000
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:23Z
Summary
[none]
Details

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/a814ad6d56b5c7e8243fe7ddc676da5e542e9fc4"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517378646.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/0dc2c3fd6195c025f7a9742924f8a493b7ec323f"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "323463694391609619445568372849698478643",
                    "112038861784580018291703009984132528504",
                    "329624200026860581763552315525988049421",
                    "329360009051108909203806268107839048198"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517378646-02a79d2b",
            "match_only_versions":  [
                "16-qpr2"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0dc2c3fd6195c025f7a9742924f8a493b7ec323f",
            "target":  {
                "file":  "core/java/android/hardware/biometrics/PromptInfo.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "221841269241582759979250311414019288036",
                "length":  550
            },
            "id":  "ASB-A-517378646-847f9c67",
            "match_only_versions":  [
                "16-qpr2"
            ],
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0dc2c3fd6195c025f7a9742924f8a493b7ec323f",
            "target":  {
                "file":  "core/java/android/hardware/biometrics/PromptInfo.java",
                "function":  "requiresTestOrInternalPermission"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517378646.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/c37066ed3f6c99400853d36895102e7292ad23dc"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "323463694391609619445568372849698478643",
                    "112038861784580018291703009984132528504",
                    "329624200026860581763552315525988049421",
                    "329360009051108909203806268107839048198"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517378646-793c3575",
            "match_only_versions":  [
                "17"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/c37066ed3f6c99400853d36895102e7292ad23dc",
            "target":  {
                "file":  "core/java/android/hardware/biometrics/PromptInfo.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "221841269241582759979250311414019288036",
                "length":  550
            },
            "id":  "ASB-A-517378646-d4207051",
            "match_only_versions":  [
                "17"
            ],
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/c37066ed3f6c99400853d36895102e7292ad23dc",
            "target":  {
                "file":  "core/java/android/hardware/biometrics/PromptInfo.java",
                "function":  "requiresTestOrInternalPermission"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517378646.json"