{"id":"ASB-A-296915500","details":"In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-296915500","CVE-2024-49728"],"modified":"2026-04-10T16:16:18.068628Z","published":"2025-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/4b65cbb339db4d3a7a9a6100cb2e7c9f1ece9271"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-04-01"}]}],"versions":["15-next"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5d66a17fa296117b44f23ae45ff7338cee6ae85","digest":{"length":6828,"function_hash":"310464502783358808731355411214931475372"},"deprecated":false,"target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java","function":"generateFileInfo"},"signature_version":"v1","signature_type":"Function","id":"ASB-A-296915500-20430850"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5d66a17fa296117b44f23ae45ff7338cee6ae85","digest":{"threshold":0.9,"line_hashes":["50361072087287655901888329471936174932","121845403833178851004282735359276431864","262251516898660165507780780419640996931","105598966285062567154528998693568200516","30174369586259591690482816430433378549","204432403054961511955038099375169281483","49833795518394411772161861300052649279","27337898617899203000871999642392745760","64739084715090043238196109301508449165","156362479383866266865893582664059420791","315453649490880073579904066497326411611","257514193656426976875766054884252333199","54638474997242602742890622500091766434","196061202865139653099726819319029542276","4792377229830908462556355398952756154"]},"deprecated":false,"target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"},"signature_version":"v1","signature_type":"Line","id":"ASB-A-296915500-9275289e"}],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5d66a17fa296117b44f23ae45ff7338cee6ae85"],"spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-296915500.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-04-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e17b3fcb3946abf2f307fc8393ecc347c3df67d9","digest":{"threshold":0.9,"line_hashes":["50361072087287655901888329471936174932","121845403833178851004282735359276431864","262251516898660165507780780419640996931","105598966285062567154528998693568200516","30174369586259591690482816430433378549","204432403054961511955038099375169281483","49833795518394411772161861300052649279","27337898617899203000871999642392745760","64739084715090043238196109301508449165","156362479383866266865893582664059420791","315453649490880073579904066497326411611","257514193656426976875766054884252333199","54638474997242602742890622500091766434","196061202865139653099726819319029542276","4792377229830908462556355398952756154"]},"deprecated":false,"target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"},"signature_version":"v1","signature_type":"Line","id":"ASB-A-296915500-5f3dff28"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e17b3fcb3946abf2f307fc8393ecc347c3df67d9","digest":{"length":6828,"function_hash":"310464502783358808731355411214931475372"},"deprecated":false,"target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java","function":"generateFileInfo"},"signature_version":"v1","signature_type":"Function","id":"ASB-A-296915500-ea52ef2c"}],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/e17b3fcb3946abf2f307fc8393ecc347c3df67d9"],"spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-296915500.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-04-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5bcfd347823f1d3893d843db2286f2013923fad8","digest":{"threshold":0.9,"line_hashes":["189014771623161666538395564364398214511","121845403833178851004282735359276431864","262251516898660165507780780419640996931","105598966285062567154528998693568200516","317359883940541754133914101727535757081","204432403054961511955038099375169281483","49833795518394411772161861300052649279","27337898617899203000871999642392745760","139406057071785338861518184548622748508","89636947875856846358939766277269167282","315453649490880073579904066497326411611","257514193656426976875766054884252333199","54638474997242602742890622500091766434","196061202865139653099726819319029542276","4792377229830908462556355398952756154"]},"deprecated":false,"target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"},"signature_version":"v1","signature_type":"Line","id":"ASB-A-296915500-bc293155"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5bcfd347823f1d3893d843db2286f2013923fad8","digest":{"length":3536,"function_hash":"3343094387847156907146336674838837384"},"deprecated":false,"target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java","function":"generateFileInfo"},"signature_version":"v1","signature_type":"Function","id":"ASB-A-296915500-ee691c02"}],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5bcfd347823f1d3893d843db2286f2013923fad8"],"spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-296915500.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-04-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/2c5add83a18d87ea4a46bc8ab7f675e32c8d6a56","digest":{"length":3726,"function_hash":"183911023901520138653190158611739293803"},"deprecated":false,"target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java","function":"generateFileInfo"},"signature_version":"v1","signature_type":"Function","id":"ASB-A-296915500-19970b57"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/2c5add83a18d87ea4a46bc8ab7f675e32c8d6a56","digest":{"threshold":0.9,"line_hashes":["189014771623161666538395564364398214511","121845403833178851004282735359276431864","262251516898660165507780780419640996931","105598966285062567154528998693568200516","30174369586259591690482816430433378549","204432403054961511955038099375169281483","49833795518394411772161861300052649279","27337898617899203000871999642392745760","139406057071785338861518184548622748508","89636947875856846358939766277269167282","315453649490880073579904066497326411611","257514193656426976875766054884252333199","54638474997242602742890622500091766434","196061202865139653099726819319029542276","4792377229830908462556355398952756154"]},"deprecated":false,"target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppSendFileInfo.java"},"signature_version":"v1","signature_type":"Line","id":"ASB-A-296915500-8128ebc1"}],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/2c5add83a18d87ea4a46bc8ab7f675e32c8d6a56"],"spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-296915500.json"}}],"schema_version":"1.7.5"}