{"id":"ASB-A-304497167","details":"In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-304497167","CVE-2025-26417"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/ed764e06106adef1cff5178c6df038fd054e7bec"}],"affected":[{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-03-01"}]}],"versions":["15-next"],"ecosystem_specific":{"severity":"High","spl":"2025-03-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bf66a79ddcd8d93f502bf908621469893f513780","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"],"threshold":0.9},"id":"ASB-A-304497167-05f72f23"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bf66a79ddcd8d93f502bf908621469893f513780","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkDownloadedFilePath"},"deprecated":false,"digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"id":"ASB-A-304497167-e86f2d98"}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bf66a79ddcd8d93f502bf908621469893f513780"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-03-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2025-03-01","types":["ID"],"vanir_signatures":[{"digest":{"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"],"threshold":0.9},"id":"ASB-A-304497167-a253a0b7","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","target":{"function":"checkDownloadedFilePath","file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"id":"ASB-A-304497167-c9c90dd9","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-03-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"]},"id":"ASB-A-304497167-80e34c00","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","target":{"function":"checkDownloadedFilePath","file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"length":852,"function_hash":"151107043774485541674138510849676846659"},"id":"ASB-A-304497167-e181120e"}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e"],"severity":"High","spl":"2025-03-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-03-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"id":"ASB-A-304497167-9ba3fa5e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a2e3e8c7bec2b51f9192ca44757f170c0bde34a5","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkDownloadedFilePath"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a2e3e8c7bec2b51f9192ca44757f170c0bde34a5","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"],"threshold":0.9},"id":"ASB-A-304497167-9e21b710"}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a2e3e8c7bec2b51f9192ca44757f170c0bde34a5"],"severity":"High","spl":"2025-03-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-03-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e"],"severity":"High","spl":"2025-03-01","types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"]},"id":"ASB-A-304497167-7d273ba1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkDownloadedFilePath"},"deprecated":false,"digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"id":"ASB-A-304497167-8214e529"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-03-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"id":"ASB-A-304497167-0e7bae2c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkDownloadedFilePath"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"],"threshold":0.9},"id":"ASB-A-304497167-4b7f6cc4","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e"],"severity":"High","spl":"2025-03-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}}],"schema_version":"1.9.0"}