{"id":"ASB-A-286235483","details":"In applyCustomDescription of SaveUi.java, there is a possible way to view another user's image content. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-286235483","CVE-2023-40122"],"modified":"2026-04-03T15:37:31.002635Z","published":"2025-02-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-02-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/2d1d69e1571c7814661b81a468af127c940a1cd8"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-02-01"}]}],"versions":["15-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78","https://android.googlesource.com/platform/frameworks/base/+/ed132ae5552fb7080e4c9f73ab32d42bccae7849","https://android.googlesource.com/platform/frameworks/base/+/73e2b35a63d8c5da528b7a2dad2091f40b0f49c1"],"types":["ID"],"spl":"2025-02-01","vanir_signatures":[{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-06445f7a","digest":{"line_hashes":["152706124914265209826722211813105497440","122457438830031755697776489763091500155","9557648870503328618362177008065891024","21424190766785613237481844130356205668","318743049332437221904056720756700357292","19494396699293671953931356471127301788","125685506690105876920915180744054100445","193060436326013056668025233908441392097","45525861848201633409686579962243666914","247171390140834564838122080548466479325","11417974425339281741084590764620266974","63675271650473437443478445002199682738","337643276294840670681719171796552205364","120308007170846405930104003764350781053","110491743816707019839998419656968232453","290369119132319450297915760482112743456","318831208973307593363994768019606516553","118585930299939295491472408901765825976"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/73e2b35a63d8c5da528b7a2dad2091f40b0f49c1","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-3731be54","digest":{"line_hashes":["112952464657230451295373430336711070277","213242121108263414533176388173764621","131797680883177356094980231743236799214","13743237982565477192462131139233942864","220855508336303408398916928186082455251","329619481055895590037036631590622970823","142548056876858934317447270565251659585","303175247934198869648397341081908772561","250169775779716262098479289038361735106","117549971729738303213187240697902417647","325377119551318670331077072736210979542","277591822674160709559676687053562326858","111796235914419191665964098960243226521","207213852785232402439269374595379165908","203848945185388572641881933342812273789","85290425299232820361070354058640610311","324514966097401313249705843429493881194","210725813622199945237354985780156527502","336903288044557023701705779291860779033","33379483823330199745001603645193499184"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java","function":"applyCustomDescription"},"source":"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-4124815a","digest":{"length":3696,"function_hash":"110995354895912650465302359732992851334"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/73e2b35a63d8c5da528b7a2dad2091f40b0f49c1","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-43a65616","digest":{"line_hashes":["200862853780378720348640037330789933907","17313944253611234045688364596866441050","285199099437841853788243777921881450983","99948937744765183478018849530354293151","333330205953434566825133141790243117107","58915646493387186588182974914160953951","248943584820202994872759346386167068984","260697254239794973846077706164223601082"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java","function":"renderSuggestion"},"source":"https://android.googlesource.com/platform/frameworks/base/+/73e2b35a63d8c5da528b7a2dad2091f40b0f49c1","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-5fd37c0e","digest":{"length":348,"function_hash":"153158990732941846506093926013815013472"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java","function":"applyCustomDescription"},"source":"https://android.googlesource.com/platform/frameworks/base/+/ed132ae5552fb7080e4c9f73ab32d42bccae7849","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-63d6a911","digest":{"length":3718,"function_hash":"146126191384554906066663087368571267907"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"initialAuthenticationLayout"},"source":"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-6438f6a0","digest":{"length":754,"function_hash":"49532191195551615746744837755912801092"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-77854c22","digest":{"line_hashes":["70384187207969473467724071990317729398","320418546227076084465594181217435078892","139034975296227356350451546793061696188","198840029242654939539433467117586934531","313245536086977364838236582966126120156","9821241575628344625617058172907797661","84864080468086762366722034388010268348","321713212781640076910098641929018121181","60835553322294116645322918846401089571","194254830192584495059033577937727898134","147075656553749944497531376143451541327","11224255276186999251427813799537284016","190000541700740439308365212289947348130"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java","function":"FillUi"},"source":"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-80fd7a71","digest":{"length":6510,"function_hash":"31646391903980341277154471442477253944"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-a53a4b64","digest":{"line_hashes":["148303161279659643660660451501034279234","125883638802437311423689325172088876430","68109407143103339498063405506151933519","141851605057521366089072764562061264673"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-ad39c60e","digest":{"line_hashes":["195550187764114165661677033491385867525","207939012160879388942929324645558281641","197882718764834178866649541080794831380","239233852245253813103569443623407063279","44698807005793972678540295405764893919","21183059188807409401714516310665780128","300048194628243201263727493046361281547","303844278245018911624601514776114041871","229695913011207263233075675270896549026","55169701512537227256118636456135333684","198388733492753553705907241123091591212","304920987658179113312826479999607115028","269055928370450172860520757506759510794","237757000885932752970060260599884987089","33379483823330199745001603645193499184"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java","function":"checkRemoteViewUriPermissions"},"source":"https://android.googlesource.com/platform/frameworks/base/+/73e2b35a63d8c5da528b7a2dad2091f40b0f49c1","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-d6904a05","digest":{"length":313,"function_hash":"294333741050012603622705831431024664218"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"createDatasetItems"},"source":"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-e69baae4","digest":{"length":1677,"function_hash":"14933855057066592257347322952625317997"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"setHeader"},"source":"https://android.googlesource.com/platform/frameworks/base/+/bf7fbbccd920596e514d1559fb3feaca70e55e78","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-eeb818cb","digest":{"length":498,"function_hash":"243658678464188710220306003597891618027"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/ed132ae5552fb7080e4c9f73ab32d42bccae7849","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-f736212f","digest":{"line_hashes":["286441232365397093711237365480635901637","50700799141270583952450401580627784040","214274456044980043678109479360566617655","324417098881712109557143259217049528559"],"threshold":0.9}}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-286235483.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-02-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053","https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0"],"types":["ID"],"spl":"2025-02-01","vanir_signatures":[{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-000b4702","digest":{"line_hashes":["112952464657230451295373430336711070277","213242121108263414533176388173764621","284941637186884576196230685734131204928","321634460043371652687586406768793962657","110285166450574441902084564330346162982","142548056876858934317447270565251659585","303175247934198869648397341081908772561","250169775779716262098479289038361735106","325377119551318670331077072736210979542","277591822674160709559676687053562326858","173131988331465702442932404114481572319","21486416942560900997186924977493908859","210725813622199945237354985780156527502","336903288044557023701705779291860779033","33379483823330199745001603645193499184"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java","function":"applyCustomDescription"},"source":"https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-339bd43d","digest":{"length":3718,"function_hash":"146126191384554906066663087368571267907"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java","function":"checkRemoteViewUriPermissions"},"source":"https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-452cb38e","digest":{"length":314,"function_hash":"188489595388106952960806512309835331279"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java","function":"renderSuggestion"},"source":"https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-4b2a22a0","digest":{"length":348,"function_hash":"153158990732941846506093926013815013472"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-4bba6ff2","digest":{"line_hashes":["70384187207969473467724071990317729398","320418546227076084465594181217435078892","139034975296227356350451546793061696188","198840029242654939539433467117586934531","313245536086977364838236582966126120156","9821241575628344625617058172907797661","84864080468086762366722034388010268348","321713212781640076910098641929018121181","60835553322294116645322918846401089571","194254830192584495059033577937727898134","147075656553749944497531376143451541327","11224255276186999251427813799537284016","190000541700740439308365212289947348130"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-5897c9bc","digest":{"line_hashes":["206563368113645024653705304061605275981","197882718764834178866649541080794831380","239233852245253813103569443623407063279","44698807005793972678540295405764893919","21183059188807409401714516310665780128","300048194628243201263727493046361281547","200644165688969314273219891189461360855","77496428704198062703578586753481553588","55169701512537227256118636456135333684","198388733492753553705907241123091591212","304920987658179113312826479999607115028","269055928370450172860520757506759510794","237757000885932752970060260599884987089","33379483823330199745001603645193499184"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java","function":"FillUi"},"source":"https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-9791299f","digest":{"length":6466,"function_hash":"155518773178166328024443815934004657924"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-9c0241b7","digest":{"line_hashes":["286441232365397093711237365480635901637","50700799141270583952450401580627784040","214274456044980043678109479360566617655","324417098881712109557143259217049528559"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java","function":"applyCustomDescription"},"source":"https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-be69d6ef","digest":{"length":3696,"function_hash":"110995354895912650465302359732992851334"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/73fa082a7202100da107ae14dd7742ecd86da053","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-d4299c57","digest":{"line_hashes":["148303161279659643660660451501034279234","125883638802437311423689325172088876430","68109407143103339498063405506151933519","141851605057521366089072764562061264673"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/36875556fca3a0e9715d1cbd6cebff8e5720b2a0","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-df1f98e3","digest":{"line_hashes":["200862853780378720348640037330789933907","17313944253611234045688364596866441050","285199099437841853788243777921881450983","99948937744765183478018849530354293151","109535534066620136114047541315525119830","39969641276167070584553621571552279175","273102936699452161018250453562184661223","336957761749332893969238411852890882197","129960398606289640900436180927353833227","237703053832879051061104204999411942989","163913456718500460619567237726221108710","207422323756427847318687779668421267848","90656393623779830526015349851986904249","319878405943239932225760530864971781909","333330205953434566825133141790243117107","58915646493387186588182974914160953951","248943584820202994872759346386167068984","260697254239794973846077706164223601082"],"threshold":0.9}}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-286235483.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-02-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a","https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158"],"types":["ID"],"spl":"2025-02-01","vanir_signatures":[{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-0061e4bb","digest":{"line_hashes":["200862853780378720348640037330789933907","17313944253611234045688364596866441050","285199099437841853788243777921881450983","99948937744765183478018849530354293151","109535534066620136114047541315525119830","39969641276167070584553621571552279175","273102936699452161018250453562184661223","336957761749332893969238411852890882197","129960398606289640900436180927353833227","237703053832879051061104204999411942989","163913456718500460619567237726221108710","207422323756427847318687779668421267848","90656393623779830526015349851986904249","319878405943239932225760530864971781909","333330205953434566825133141790243117107","58915646493387186588182974914160953951","248943584820202994872759346386167068984","260697254239794973846077706164223601082"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-4b9be62e","digest":{"line_hashes":["206563368113645024653705304061605275981","197882718764834178866649541080794831380","239233852245253813103569443623407063279","44698807005793972678540295405764893919","21183059188807409401714516310665780128","300048194628243201263727493046361281547","200644165688969314273219891189461360855","77496428704198062703578586753481553588","55169701512537227256118636456135333684","198388733492753553705907241123091591212","304920987658179113312826479999607115028","269055928370450172860520757506759510794","237757000885932752970060260599884987089","33379483823330199745001603645193499184"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-62af7399","digest":{"line_hashes":["112952464657230451295373430336711070277","213242121108263414533176388173764621","284941637186884576196230685734131204928","321634460043371652687586406768793962657","110285166450574441902084564330346162982","142548056876858934317447270565251659585","303175247934198869648397341081908772561","250169775779716262098479289038361735106","325377119551318670331077072736210979542","277591822674160709559676687053562326858","173131988331465702442932404114481572319","21486416942560900997186924977493908859","210725813622199945237354985780156527502","336903288044557023701705779291860779033","33379483823330199745001603645193499184"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java","function":"FillUi"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-69bfefd7","digest":{"length":6466,"function_hash":"155518773178166328024443815934004657924"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java","function":"renderSuggestion"},"source":"https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-9b515141","digest":{"length":348,"function_hash":"153158990732941846506093926013815013472"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java","function":"checkRemoteViewUriPermissions"},"source":"https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-9eb4608b","digest":{"length":314,"function_hash":"188489595388106952960806512309835331279"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java","function":"applyCustomDescription"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-c0f2a3a7","digest":{"length":3696,"function_hash":"110995354895912650465302359732992851334"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-d7552cd1","digest":{"line_hashes":["148303161279659643660660451501034279234","125883638802437311423689325172088876430","68109407143103339498063405506151933519","141851605057521366089072764562061264673"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java","function":"applyCustomDescription"},"source":"https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-e241027c","digest":{"length":3718,"function_hash":"146126191384554906066663087368571267907"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/c5846894b27b4a1d8e7753611352844f31679158","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-e533f972","digest":{"line_hashes":["286441232365397093711237365480635901637","50700799141270583952450401580627784040","214274456044980043678109479360566617655","324417098881712109557143259217049528559"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f7ca136c514dc975c3f46d95c53fd6b3752c577a","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-f36bcf55","digest":{"line_hashes":["70384187207969473467724071990317729398","320418546227076084465594181217435078892","139034975296227356350451546793061696188","198840029242654939539433467117586934531","313245536086977364838236582966126120156","9821241575628344625617058172907797661","84864080468086762366722034388010268348","321713212781640076910098641929018121181","60835553322294116645322918846401089571","194254830192584495059033577937727898134","147075656553749944497531376143451541327","11224255276186999251427813799537284016","190000541700740439308365212289947348130"],"threshold":0.9}}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-286235483.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-02-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/91388db0875db874d53ea9d3f3a39d925af631d8"],"types":["ID"],"spl":"2025-02-01","vanir_signatures":[{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/91388db0875db874d53ea9d3f3a39d925af631d8","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-4f18a5a7","digest":{"line_hashes":["112952464657230451295373430336711070277","213242121108263414533176388173764621","131797680883177356094980231743236799214","13743237982565477192462131139233942864","220855508336303408398916928186082455251","329619481055895590037036631590622970823","142548056876858934317447270565251659585","303175247934198869648397341081908772561","250169775779716262098479289038361735106","325377119551318670331077072736210979542","277591822674160709559676687053562326858","111796235914419191665964098960243226521","207213852785232402439269374595379165908","210725813622199945237354985780156527502","336903288044557023701705779291860779033","33379483823330199745001603645193499184"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java","function":"checkRemoteViewUriPermissions"},"source":"https://android.googlesource.com/platform/frameworks/base/+/91388db0875db874d53ea9d3f3a39d925af631d8","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-ace37762","digest":{"length":313,"function_hash":"294333741050012603622705831431024664218"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java","function":"renderSuggestion"},"source":"https://android.googlesource.com/platform/frameworks/base/+/91388db0875db874d53ea9d3f3a39d925af631d8","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-bcd16bdf","digest":{"length":348,"function_hash":"153158990732941846506093926013815013472"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/91388db0875db874d53ea9d3f3a39d925af631d8","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-f8261a1a","digest":{"line_hashes":["200862853780378720348640037330789933907","17313944253611234045688364596866441050","285199099437841853788243777921881450983","99948937744765183478018849530354293151","109535534066620136114047541315525119830","39969641276167070584553621571552279175","273102936699452161018250453562184661223","336957761749332893969238411852890882197","129960398606289640900436180927353833227","237703053832879051061104204999411942989","163913456718500460619567237726221108710","207422323756427847318687779668421267848","90656393623779830526015349851986904249","5563047589043757462169386622850731423","143759379317545216397527536916097700704","189102626901464415316969655810919033406","245131540180806575368969544734024544462","159888205038063237398178461743637855398","67217958381954166457199508546200067698","240567232716717344909651784978029474606","286541530287770368649486844991579581516","166274331552122355056395927718241162762","137975847977573320425778059453991540263","132810242104132405657307340012094167302","183142955510329644846449222720220875517","333330205953434566825133141790243117107","58915646493387186588182974914160953951","248943584820202994872759346386167068984","260697254239794973846077706164223601082"],"threshold":0.9}}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-286235483.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-02-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0","https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9"],"types":["ID"],"spl":"2025-02-01","vanir_signatures":[{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java","function":"applyCustomDescription"},"source":"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-0d2943f4","digest":{"length":3696,"function_hash":"110995354895912650465302359732992851334"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-27c06beb","digest":{"line_hashes":["70384187207969473467724071990317729398","320418546227076084465594181217435078892","139034975296227356350451546793061696188","198840029242654939539433467117586934531","313245536086977364838236582966126120156","9821241575628344625617058172907797661","84864080468086762366722034388010268348","321713212781640076910098641929018121181","60835553322294116645322918846401089571","194254830192584495059033577937727898134","147075656553749944497531376143451541327","11224255276186999251427813799537284016","190000541700740439308365212289947348130"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"createDatasetItems"},"source":"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-2b9e0a47","digest":{"length":1677,"function_hash":"14933855057066592257347322952625317997"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java","function":"checkRemoteViewUriPermissions"},"source":"https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-31867ede","digest":{"length":314,"function_hash":"188489595388106952960806512309835331279"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java","function":"applyCustomDescription"},"source":"https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-3226e078","digest":{"length":3718,"function_hash":"146126191384554906066663087368571267907"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-6c21c37f","digest":{"line_hashes":["112952464657230451295373430336711070277","213242121108263414533176388173764621","284941637186884576196230685734131204928","321634460043371652687586406768793962657","110285166450574441902084564330346162982","142548056876858934317447270565251659585","303175247934198869648397341081908772561","250169775779716262098479289038361735106","325377119551318670331077072736210979542","277591822674160709559676687053562326858","173131988331465702442932404114481572319","21486416942560900997186924977493908859","210725813622199945237354985780156527502","336903288044557023701705779291860779033","33379483823330199745001603645193499184"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"initialAuthenticationLayout"},"source":"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-8e58e6f9","digest":{"length":754,"function_hash":"49532191195551615746744837755912801092"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"setHeader"},"source":"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-979c9889","digest":{"length":498,"function_hash":"243658678464188710220306003597891618027"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-a1b813d7","digest":{"line_hashes":["206563368113645024653705304061605275981","197882718764834178866649541080794831380","239233852245253813103569443623407063279","44698807005793972678540295405764893919","21183059188807409401714516310665780128","300048194628243201263727493046361281547","200644165688969314273219891189461360855","77496428704198062703578586753481553588","55169701512537227256118636456135333684","198388733492753553705907241123091591212","304920987658179113312826479999607115028","269055928370450172860520757506759510794","237757000885932752970060260599884987089","33379483823330199745001603645193499184"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java","function":"renderSuggestion"},"source":"https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-a73bc372","digest":{"length":348,"function_hash":"153158990732941846506093926013815013472"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java","function":"FillUi"},"source":"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-acd70eb0","digest":{"length":6466,"function_hash":"155518773178166328024443815934004657924"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-b901e226","digest":{"line_hashes":["152706124914265209826722211813105497440","122457438830031755697776489763091500155","9557648870503328618362177008065891024","21424190766785613237481844130356205668","318743049332437221904056720756700357292","19494396699293671953931356471127301788","125685506690105876920915180744054100445","193060436326013056668025233908441392097","45525861848201633409686579962243666914","247171390140834564838122080548466479325","11417974425339281741084590764620266974","63675271650473437443478445002199682738","337643276294840670681719171796552205364","120308007170846405930104003764350781053","110491743816707019839998419656968232453","290369119132319450297915760482112743456","318831208973307593363994768019606516553","118585930299939295491472408901765825976"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-bb4c594f","digest":{"line_hashes":["200862853780378720348640037330789933907","17313944253611234045688364596866441050","285199099437841853788243777921881450983","99948937744765183478018849530354293151","109535534066620136114047541315525119830","39969641276167070584553621571552279175","273102936699452161018250453562184661223","336957761749332893969238411852890882197","129960398606289640900436180927353833227","237703053832879051061104204999411942989","163913456718500460619567237726221108710","207422323756427847318687779668421267848","90656393623779830526015349851986904249","319878405943239932225760530864971781909","333330205953434566825133141790243117107","58915646493387186588182974914160953951","248943584820202994872759346386167068984","260697254239794973846077706164223601082"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/93810ba1c0a4d31f49adbf9454731e2b7defdfc0","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-d2b5895d","digest":{"line_hashes":["148303161279659643660660451501034279234","125883638802437311423689325172088876430","68109407143103339498063405506151933519","141851605057521366089072764562061264673"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/046cc236501e4f12bfc4a26948b5b6b76695afb9","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-fdc52583","digest":{"line_hashes":["286441232365397093711237365480635901637","50700799141270583952450401580627784040","214274456044980043678109479360566617655","324417098881712109557143259217049528559"],"threshold":0.9}}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-286235483.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-02-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b"],"types":["ID"],"spl":"2025-02-01","vanir_signatures":[{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java","function":"checkRemoteViewUriPermissions"},"source":"https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-19fcbea9","digest":{"length":314,"function_hash":"188489595388106952960806512309835331279"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-42eb3f3f","digest":{"line_hashes":["200862853780378720348640037330789933907","17313944253611234045688364596866441050","285199099437841853788243777921881450983","99948937744765183478018849530354293151","109535534066620136114047541315525119830","39969641276167070584553621571552279175","273102936699452161018250453562184661223","336957761749332893969238411852890882197","129960398606289640900436180927353833227","237703053832879051061104204999411942989","163913456718500460619567237726221108710","207422323756427847318687779668421267848","90656393623779830526015349851986904249","5563047589043757462169386622850731423","143759379317545216397527536916097700704","189102626901464415316969655810919033406","245131540180806575368969544734024544462","159888205038063237398178461743637855398","67217958381954166457199508546200067698","240567232716717344909651784978029474606","286541530287770368649486844991579581516","166274331552122355056395927718241162762","137975847977573320425778059453991540263","132810242104132405657307340012094167302","183142955510329644846449222720220875517","333330205953434566825133141790243117107","58915646493387186588182974914160953951","248943584820202994872759346386167068984","260697254239794973846077706164223601082"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java","function":"applyCustomDescription"},"source":"https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-45a7a1d1","digest":{"length":3718,"function_hash":"146126191384554906066663087368571267907"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-7845fbb7","digest":{"line_hashes":["286441232365397093711237365480635901637","50700799141270583952450401580627784040","214274456044980043678109479360566617655","324417098881712109557143259217049528559"],"threshold":0.9}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/RemoteInlineSuggestionViewConnector.java","function":"renderSuggestion"},"source":"https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-b39715fe","digest":{"length":348,"function_hash":"153158990732941846506093926013815013472"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/df893defcf8cc6e1e223111e79ad3daf0ec7cd8b","signature_type":"Line","deprecated":false,"signature_version":"v1","id":"ASB-A-286235483-e1503482","digest":{"line_hashes":["112952464657230451295373430336711070277","213242121108263414533176388173764621","131797680883177356094980231743236799214","13743237982565477192462131139233942864","220855508336303408398916928186082455251","329619481055895590037036631590622970823","142548056876858934317447270565251659585","303175247934198869648397341081908772561","250169775779716262098479289038361735106","325377119551318670331077072736210979542","277591822674160709559676687053562326858","173131988331465702442932404114481572319","21486416942560900997186924977493908859","210725813622199945237354985780156527502","336903288044557023701705779291860779033","33379483823330199745001603645193499184"],"threshold":0.9}}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-286235483.json"}}],"schema_version":"1.7.5"}