ASB-A-286235483
See a problem?- Import Source
- https://storage.googleapis.com/android-osv/ASB-A-286235483.json
- JSON Data
- https://api.osv.dev/v1/vulns/ASB-A-286235483
- Aliases
-
- A-286235483
- CVE-2023-40122
- Published
- 2024-02-01T00:00:00Z
- Modified
- 2024-08-07T19:29:30.033210Z
- Summary
- Enumerating other users' contact photos via CustomDescription templateUpdates shown in AutoFillService's SaveUi
- Details
-
In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- References
Affected packages
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"195550187764114165661677033491385867525",
"207939012160879388942929324645558281641",
"197882718764834178866649541080794831380",
"239233852245253813103569443623407063279",
"44698807005793972678540295405764893919",
"21183059188807409401714516310665780128",
"300048194628243201263727493046361281547",
"303844278245018911624601514776114041871",
"229695913011207263233075675270896549026",
"55169701512537227256118636456135333684",
"198388733492753553705907241123091591212",
"304920987658179113312826479999607115028",
"269055928370450172860520757506759510794",
"237757000885932752970060260599884987089",
"33379483823330199745001603645193499184"
]
},
"id": "ASB-A-286235483-17a5ef08",
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"70384187207969473467724071990317729398",
"320418546227076084465594181217435078892",
"139034975296227356350451546793061696188",
"198840029242654939539433467117586934531",
"313245536086977364838236582966126120156",
"9821241575628344625617058172907797661",
"84864080468086762366722034388010268348",
"321713212781640076910098641929018121181",
"60835553322294116645322918846401089571",
"194254830192584495059033577937727898134",
"147075656553749944497531376143451541327",
"11224255276186999251427813799537284016",
"190000541700740439308365212289947348130"
]
},
"id": "ASB-A-286235483-23175e15",
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 754.0,
"function_hash": "49532191195551615746744837755912801092"
},
"id": "ASB-A-286235483-3a84daff",
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "initialAuthenticationLayout"
},
"signature_type": "Function"
},
{
"digest": {
"length": 3696.0,
"function_hash": "110995354895912650465302359732992851334"
},
"id": "ASB-A-286235483-4f415735",
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
},
{
"digest": {
"length": 1677.0,
"function_hash": "14933855057066592257347322952625317997"
},
"id": "ASB-A-286235483-590db78b",
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "createDatasetItems"
},
"signature_type": "Function"
},
{
"digest": {
"length": 6510.0,
"function_hash": "31646391903980341277154471442477253944"
},
"id": "ASB-A-286235483-635effe6",
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"signature_type": "Function"
},
{
"digest": {
"length": 498.0,
"function_hash": "243658678464188710220306003597891618027"
},
"id": "ASB-A-286235483-66739f63",
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "setHeader"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
]
},
"id": "ASB-A-286235483-a4ec1175",
"source": "https://android.googlesource.com/platform/frameworks/base/+/ed132ae5552fb7080e4c9f73ab32d42bccae7849",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"id": "ASB-A-286235483-d6481d67",
"source": "https://android.googlesource.com/platform/frameworks/base/+/ed132ae5552fb7080e4c9f73ab32d42bccae7849",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"152706124914265209826722211813105497440",
"122457438830031755697776489763091500155",
"9557648870503328618362177008065891024",
"21424190766785613237481844130356205668",
"318743049332437221904056720756700357292",
"19494396699293671953931356471127301788",
"125685506690105876920915180744054100445",
"193060436326013056668025233908441392097",
"45525861848201633409686579962243666914",
"247171390140834564838122080548466479325",
"11417974425339281741084590764620266974",
"63675271650473437443478445002199682738",
"337643276294840670681719171796552205364",
"120308007170846405930104003764350781053",
"110491743816707019839998419656968232453",
"290369119132319450297915760482112743456",
"318831208973307593363994768019606516553",
"118585930299939295491472408901765825976"
]
},
"id": "ASB-A-286235483-e167b512",
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"148303161279659643660660451501034279234",
"125883638802437311423689325172088876430",
"68109407143103339498063405506151933519",
"141851605057521366089072764562061264673"
]
},
"id": "ASB-A-286235483-f1d8e5e5",
"source": "https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78",
"https://android.googlesource.com/platform/frameworks/base/+/ed132ae5552fb7080e4c9f73ab32d42bccae7849"
],
"spl": "2024-02-01",
"severity": "High",
"types": [
"ID"
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206563368113645024653705304061605275981",
"197882718764834178866649541080794831380",
"239233852245253813103569443623407063279",
"44698807005793972678540295405764893919",
"21183059188807409401714516310665780128",
"300048194628243201263727493046361281547",
"200644165688969314273219891189461360855",
"1533552725838892988904021190204807092",
"24868220839740881984862838880748668578",
"150704527154317727477530934568826194535",
"199961918734733418034626543626299241461",
"299745589297796933467607047619440155784",
"269055928370450172860520757506759510794",
"237757000885932752970060260599884987089",
"33379483823330199745001603645193499184"
]
},
"id": "ASB-A-286235483-2d0c043a",
"source": "https://android.googlesource.com/platform/frameworks/base/+/26beceb9a252a50374d056b162fa7e8ea55051b3",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"id": "ASB-A-286235483-31259de2",
"source": "https://android.googlesource.com/platform/frameworks/base/+/91fb94942778c8907575a0eed674187dde854a5b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
},
{
"digest": {
"length": 3696.0,
"function_hash": "110995354895912650465302359732992851334"
},
"id": "ASB-A-286235483-46955e79",
"source": "https://android.googlesource.com/platform/frameworks/base/+/26beceb9a252a50374d056b162fa7e8ea55051b3",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"148303161279659643660660451501034279234",
"125883638802437311423689325172088876430",
"68109407143103339498063405506151933519",
"141851605057521366089072764562061264673"
]
},
"id": "ASB-A-286235483-68e3d071",
"source": "https://android.googlesource.com/platform/frameworks/base/+/26beceb9a252a50374d056b162fa7e8ea55051b3",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"109535534066620136114047541315525119830",
"39969641276167070584553621571552279175",
"273102936699452161018250453562184661223",
"336957761749332893969238411852890882197",
"129960398606289640900436180927353833227",
"237703053832879051061104204999411942989",
"163913456718500460619567237726221108710",
"207422323756427847318687779668421267848",
"90656393623779830526015349851986904249",
"136483317192978289448188539767753986557",
"162016040917808076471911659073216628590",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
]
},
"id": "ASB-A-286235483-6abb645b",
"source": "https://android.googlesource.com/platform/frameworks/base/+/91fb94942778c8907575a0eed674187dde854a5b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"signature_type": "Line"
},
{
"match_only_versions": [
"11"
],
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"id": "ASB-A-286235483-89871c23",
"source": "https://android.googlesource.com/platform/frameworks/base/+/91fb94942778c8907575a0eed674187dde854a5b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
]
},
"id": "ASB-A-286235483-8c0382f2",
"source": "https://android.googlesource.com/platform/frameworks/base/+/91fb94942778c8907575a0eed674187dde854a5b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"70384187207969473467724071990317729398",
"320418546227076084465594181217435078892",
"139034975296227356350451546793061696188",
"198840029242654939539433467117586934531",
"313245536086977364838236582966126120156",
"9821241575628344625617058172907797661",
"84864080468086762366722034388010268348",
"321713212781640076910098641929018121181",
"60835553322294116645322918846401089571",
"194254830192584495059033577937727898134",
"147075656553749944497531376143451541327",
"11224255276186999251427813799537284016",
"190000541700740439308365212289947348130"
]
},
"id": "ASB-A-286235483-b1396b33",
"source": "https://android.googlesource.com/platform/frameworks/base/+/26beceb9a252a50374d056b162fa7e8ea55051b3",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"284941637186884576196230685734131204928",
"321634460043371652687586406768793962657",
"289366947562006151229857786952402180915",
"193943010465166432163737506361443001835",
"211838578195068104099508692525501844031",
"250169775779716262098479289038361735106",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"173131988331465702442932404114481572319",
"21486416942560900997186924977493908859",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
]
},
"id": "ASB-A-286235483-c48f0c78",
"source": "https://android.googlesource.com/platform/frameworks/base/+/91fb94942778c8907575a0eed674187dde854a5b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 6466.0,
"function_hash": "155518773178166328024443815934004657924"
},
"id": "ASB-A-286235483-c97843b0",
"source": "https://android.googlesource.com/platform/frameworks/base/+/26beceb9a252a50374d056b162fa7e8ea55051b3",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"signature_type": "Function"
},
{
"digest": {
"length": 314.0,
"function_hash": "188489595388106952960806512309835331279"
},
"id": "ASB-A-286235483-e823f8d7",
"source": "https://android.googlesource.com/platform/frameworks/base/+/91fb94942778c8907575a0eed674187dde854a5b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/26beceb9a252a50374d056b162fa7e8ea55051b3",
"https://android.googlesource.com/platform/frameworks/base/+/91fb94942778c8907575a0eed674187dde854a5b"
],
"spl": "2024-02-01",
"severity": "High",
"types": [
"ID"
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"70384187207969473467724071990317729398",
"320418546227076084465594181217435078892",
"139034975296227356350451546793061696188",
"198840029242654939539433467117586934531",
"313245536086977364838236582966126120156",
"9821241575628344625617058172907797661",
"84864080468086762366722034388010268348",
"321713212781640076910098641929018121181",
"60835553322294116645322918846401089571",
"194254830192584495059033577937727898134",
"147075656553749944497531376143451541327",
"11224255276186999251427813799537284016",
"190000541700740439308365212289947348130"
]
},
"id": "ASB-A-286235483-0590a6cc",
"source": "https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206563368113645024653705304061605275981",
"197882718764834178866649541080794831380",
"239233852245253813103569443623407063279",
"44698807005793972678540295405764893919",
"21183059188807409401714516310665780128",
"300048194628243201263727493046361281547",
"200644165688969314273219891189461360855",
"77496428704198062703578586753481553588",
"55169701512537227256118636456135333684",
"198388733492753553705907241123091591212",
"304920987658179113312826479999607115028",
"269055928370450172860520757506759510794",
"237757000885932752970060260599884987089",
"33379483823330199745001603645193499184"
]
},
"id": "ASB-A-286235483-18d6296e",
"source": "https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 3696.0,
"function_hash": "110995354895912650465302359732992851334"
},
"id": "ASB-A-286235483-2d52724e",
"source": "https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
},
{
"digest": {
"length": 314.0,
"function_hash": "188489595388106952960806512309835331279"
},
"id": "ASB-A-286235483-33ffe7f4",
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"signature_type": "Function"
},
{
"match_only_versions": [
"12"
],
"digest": {
"threshold": 0.9,
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"109535534066620136114047541315525119830",
"39969641276167070584553621571552279175",
"273102936699452161018250453562184661223",
"336957761749332893969238411852890882197",
"129960398606289640900436180927353833227",
"237703053832879051061104204999411942989",
"163913456718500460619567237726221108710",
"207422323756427847318687779668421267848",
"90656393623779830526015349851986904249",
"319878405943239932225760530864971781909",
"333330205953434566825133141790243117107",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
]
},
"id": "ASB-A-286235483-3a4ca0ae",
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"signature_type": "Line"
},
{
"match_only_versions": [
"12"
],
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"id": "ASB-A-286235483-5eb7d8ea",
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
]
},
"id": "ASB-A-286235483-73eb36df",
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"148303161279659643660660451501034279234",
"125883638802437311423689325172088876430",
"68109407143103339498063405506151933519",
"141851605057521366089072764562061264673"
]
},
"id": "ASB-A-286235483-8a876055",
"source": "https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 6466.0,
"function_hash": "155518773178166328024443815934004657924"
},
"id": "ASB-A-286235483-b7baffbd",
"source": "https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"signature_type": "Function"
},
{
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"id": "ASB-A-286235483-f37192b9",
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"284941637186884576196230685734131204928",
"321634460043371652687586406768793962657",
"110285166450574441902084564330346162982",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"173131988331465702442932404114481572319",
"21486416942560900997186924977493908859",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
]
},
"id": "ASB-A-286235483-f89656d3",
"source": "https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053",
"https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0"
],
"spl": "2024-02-01",
"severity": "High",
"types": [
"ID"
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"match_only_versions": [
"12L"
],
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"id": "ASB-A-286235483-00aa11c1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"signature_type": "Function"
},
{
"digest": {
"length": 6466.0,
"function_hash": "155518773178166328024443815934004657924"
},
"id": "ASB-A-286235483-0df84f09",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"148303161279659643660660451501034279234",
"125883638802437311423689325172088876430",
"68109407143103339498063405506151933519",
"141851605057521366089072764562061264673"
]
},
"id": "ASB-A-286235483-1e2e4319",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"70384187207969473467724071990317729398",
"320418546227076084465594181217435078892",
"139034975296227356350451546793061696188",
"198840029242654939539433467117586934531",
"313245536086977364838236582966126120156",
"9821241575628344625617058172907797661",
"84864080468086762366722034388010268348",
"321713212781640076910098641929018121181",
"60835553322294116645322918846401089571",
"194254830192584495059033577937727898134",
"147075656553749944497531376143451541327",
"11224255276186999251427813799537284016",
"190000541700740439308365212289947348130"
]
},
"id": "ASB-A-286235483-27e596a1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"284941637186884576196230685734131204928",
"321634460043371652687586406768793962657",
"110285166450574441902084564330346162982",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"173131988331465702442932404114481572319",
"21486416942560900997186924977493908859",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
]
},
"id": "ASB-A-286235483-3741a5d6",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 3696.0,
"function_hash": "110995354895912650465302359732992851334"
},
"id": "ASB-A-286235483-39ad0db7",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
},
{
"digest": {
"length": 314.0,
"function_hash": "188489595388106952960806512309835331279"
},
"id": "ASB-A-286235483-8d42ecc3",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"signature_type": "Function"
},
{
"match_only_versions": [
"12L"
],
"digest": {
"threshold": 0.9,
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"109535534066620136114047541315525119830",
"39969641276167070584553621571552279175",
"273102936699452161018250453562184661223",
"336957761749332893969238411852890882197",
"129960398606289640900436180927353833227",
"237703053832879051061104204999411942989",
"163913456718500460619567237726221108710",
"207422323756427847318687779668421267848",
"90656393623779830526015349851986904249",
"319878405943239932225760530864971781909",
"333330205953434566825133141790243117107",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
]
},
"id": "ASB-A-286235483-8dfc6d18",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"id": "ASB-A-286235483-94bb2223",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
]
},
"id": "ASB-A-286235483-ca582aef",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206563368113645024653705304061605275981",
"197882718764834178866649541080794831380",
"239233852245253813103569443623407063279",
"44698807005793972678540295405764893919",
"21183059188807409401714516310665780128",
"300048194628243201263727493046361281547",
"200644165688969314273219891189461360855",
"77496428704198062703578586753481553588",
"55169701512537227256118636456135333684",
"198388733492753553705907241123091591212",
"304920987658179113312826479999607115028",
"269055928370450172860520757506759510794",
"237757000885932752970060260599884987089",
"33379483823330199745001603645193499184"
]
},
"id": "ASB-A-286235483-f26729b3",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a",
"https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158"
],
"spl": "2024-02-01",
"severity": "High",
"types": [
"ID"
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
]
},
"id": "ASB-A-286235483-1229ba24",
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"id": "ASB-A-286235483-146d8d05",
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
},
{
"match_only_versions": [
"13"
],
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"id": "ASB-A-286235483-1fd97794",
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"signature_type": "Function"
},
{
"digest": {
"length": 6466.0,
"function_hash": "155518773178166328024443815934004657924"
},
"id": "ASB-A-286235483-23a6ee9f",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java",
"function": "FillUi"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206563368113645024653705304061605275981",
"197882718764834178866649541080794831380",
"239233852245253813103569443623407063279",
"44698807005793972678540295405764893919",
"21183059188807409401714516310665780128",
"300048194628243201263727493046361281547",
"200644165688969314273219891189461360855",
"77496428704198062703578586753481553588",
"55169701512537227256118636456135333684",
"198388733492753553705907241123091591212",
"304920987658179113312826479999607115028",
"269055928370450172860520757506759510794",
"237757000885932752970060260599884987089",
"33379483823330199745001603645193499184"
]
},
"id": "ASB-A-286235483-25010deb",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 1677.0,
"function_hash": "14933855057066592257347322952625317997"
},
"id": "ASB-A-286235483-2c0856d8",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "createDatasetItems"
},
"signature_type": "Function"
},
{
"digest": {
"length": 498.0,
"function_hash": "243658678464188710220306003597891618027"
},
"id": "ASB-A-286235483-2da424a3",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "setHeader"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"284941637186884576196230685734131204928",
"321634460043371652687586406768793962657",
"110285166450574441902084564330346162982",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"173131988331465702442932404114481572319",
"21486416942560900997186924977493908859",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
]
},
"id": "ASB-A-286235483-3bd823d2",
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"152706124914265209826722211813105497440",
"122457438830031755697776489763091500155",
"9557648870503328618362177008065891024",
"21424190766785613237481844130356205668",
"318743049332437221904056720756700357292",
"19494396699293671953931356471127301788",
"125685506690105876920915180744054100445",
"193060436326013056668025233908441392097",
"45525861848201633409686579962243666914",
"247171390140834564838122080548466479325",
"11417974425339281741084590764620266974",
"63675271650473437443478445002199682738",
"337643276294840670681719171796552205364",
"120308007170846405930104003764350781053",
"110491743816707019839998419656968232453",
"290369119132319450297915760482112743456",
"318831208973307593363994768019606516553",
"118585930299939295491472408901765825976"
]
},
"id": "ASB-A-286235483-5e2d173b",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"148303161279659643660660451501034279234",
"125883638802437311423689325172088876430",
"68109407143103339498063405506151933519",
"141851605057521366089072764562061264673"
]
},
"id": "ASB-A-286235483-66a14152",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 314.0,
"function_hash": "188489595388106952960806512309835331279"
},
"id": "ASB-A-286235483-6fb428ec",
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"signature_type": "Function"
},
{
"digest": {
"length": 754.0,
"function_hash": "49532191195551615746744837755912801092"
},
"id": "ASB-A-286235483-88b4c3a4",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java",
"function": "initialAuthenticationLayout"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"70384187207969473467724071990317729398",
"320418546227076084465594181217435078892",
"139034975296227356350451546793061696188",
"198840029242654939539433467117586934531",
"313245536086977364838236582966126120156",
"9821241575628344625617058172907797661",
"84864080468086762366722034388010268348",
"321713212781640076910098641929018121181",
"60835553322294116645322918846401089571",
"194254830192584495059033577937727898134",
"147075656553749944497531376143451541327",
"11224255276186999251427813799537284016",
"190000541700740439308365212289947348130"
]
},
"id": "ASB-A-286235483-c182362d",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/FillUi.java"
},
"signature_type": "Line"
},
{
"match_only_versions": [
"13"
],
"digest": {
"threshold": 0.9,
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"109535534066620136114047541315525119830",
"39969641276167070584553621571552279175",
"273102936699452161018250453562184661223",
"336957761749332893969238411852890882197",
"129960398606289640900436180927353833227",
"237703053832879051061104204999411942989",
"163913456718500460619567237726221108710",
"207422323756427847318687779668421267848",
"90656393623779830526015349851986904249",
"319878405943239932225760530864971781909",
"333330205953434566825133141790243117107",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
]
},
"id": "ASB-A-286235483-d33a0bf2",
"source": "https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 3696.0,
"function_hash": "110995354895912650465302359732992851334"
},
"id": "ASB-A-286235483-e8d69c70",
"source": "https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0",
"https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9"
],
"spl": "2024-02-01",
"severity": "High",
"types": [
"ID"
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"vanir_signatures": [
{
"match_only_versions": [
"14"
],
"digest": {
"threshold": 0.9,
"line_hashes": [
"200862853780378720348640037330789933907",
"17313944253611234045688364596866441050",
"285199099437841853788243777921881450983",
"99948937744765183478018849530354293151",
"109535534066620136114047541315525119830",
"39969641276167070584553621571552279175",
"273102936699452161018250453562184661223",
"336957761749332893969238411852890882197",
"129960398606289640900436180927353833227",
"237703053832879051061104204999411942989",
"163913456718500460619567237726221108710",
"207422323756427847318687779668421267848",
"90656393623779830526015349851986904249",
"5563047589043757462169386622850731423",
"143759379317545216397527536916097700704",
"189102626901464415316969655810919033406",
"245131540180806575368969544734024544462",
"159888205038063237398178461743637855398",
"67217958381954166457199508546200067698",
"240567232716717344909651784978029474606",
"286541530287770368649486844991579581516",
"166274331552122355056395927718241162762",
"137975847977573320425778059453991540263",
"132810242104132405657307340012094167302",
"183142955510329644846449222720220875517",
"333330205953434566825133141790243117107",
"58915646493387186588182974914160953951",
"248943584820202994872759346386167068984",
"260697254239794973846077706164223601082"
]
},
"id": "ASB-A-286235483-11ae3331",
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"112952464657230451295373430336711070277",
"213242121108263414533176388173764621",
"131797680883177356094980231743236799214",
"13743237982565477192462131139233942864",
"220855508336303408398916928186082455251",
"329619481055895590037036631590622970823",
"142548056876858934317447270565251659585",
"303175247934198869648397341081908772561",
"250169775779716262098479289038361735106",
"325377119551318670331077072736210979542",
"277591822674160709559676687053562326858",
"173131988331465702442932404114481572319",
"21486416942560900997186924977493908859",
"210725813622199945237354985780156527502",
"336903288044557023701705779291860779033",
"33379483823330199745001603645193499184"
]
},
"id": "ASB-A-286235483-2f91cbb6",
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java"
},
"signature_type": "Line"
},
{
"digest": {
"length": 3718.0,
"function_hash": "146126191384554906066663087368571267907"
},
"id": "ASB-A-286235483-52885111",
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java",
"function": "applyCustomDescription"
},
"signature_type": "Function"
},
{
"digest": {
"length": 314.0,
"function_hash": "188489595388106952960806512309835331279"
},
"id": "ASB-A-286235483-84d445c2",
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/Helper.java",
"function": "checkRemoteViewUriPermissions"
},
"signature_type": "Function"
},
{
"match_only_versions": [
"14"
],
"digest": {
"length": 348.0,
"function_hash": "153158990732941846506093926013815013472"
},
"id": "ASB-A-286235483-e226863f",
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java",
"function": "renderSuggestion"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"286441232365397093711237365480635901637",
"50700799141270583952450401580627784040",
"214274456044980043678109479360566617655",
"324417098881712109557143259217049528559"
]
},
"id": "ASB-A-286235483-ff2ffd60",
"source": "https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "services/autofill/java/com/android/server/autofill/ui/SaveUi.java"
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b"
],
"spl": "2024-02-01",
"severity": "High",
"types": [
"ID"
]
}