{"id":"ASB-A-304497167","details":"In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-304497167","CVE-2025-26417"],"modified":"2026-04-10T16:16:18.068628Z","published":"2025-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/ed764e06106adef1cff5178c6df038fd054e7bec"}],"affected":[{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-03-01"}]}],"versions":["15-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bf66a79ddcd8d93f502bf908621469893f513780"],"types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bf66a79ddcd8d93f502bf908621469893f513780","digest":{"threshold":0.9,"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"]},"deprecated":false,"id":"ASB-A-304497167-05f72f23"},{"target":{"function":"checkDownloadedFilePath","file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Function","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bf66a79ddcd8d93f502bf908621469893f513780","digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"deprecated":false,"id":"ASB-A-304497167-e86f2d98"}],"severity":"High","spl":"2025-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-03-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e"],"types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","digest":{"threshold":0.9,"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"]},"deprecated":false,"id":"ASB-A-304497167-a253a0b7"},{"target":{"function":"checkDownloadedFilePath","file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Function","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"deprecated":false,"id":"ASB-A-304497167-c9c90dd9"}],"severity":"High","spl":"2025-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-03-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e"],"types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","digest":{"threshold":0.9,"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"]},"deprecated":false,"id":"ASB-A-304497167-80e34c00"},{"target":{"function":"checkDownloadedFilePath","file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Function","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"deprecated":false,"id":"ASB-A-304497167-e181120e"}],"severity":"High","spl":"2025-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-03-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a2e3e8c7bec2b51f9192ca44757f170c0bde34a5"],"types":["ID"],"vanir_signatures":[{"target":{"function":"checkDownloadedFilePath","file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Function","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a2e3e8c7bec2b51f9192ca44757f170c0bde34a5","digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"deprecated":false,"id":"ASB-A-304497167-9ba3fa5e"},{"target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a2e3e8c7bec2b51f9192ca44757f170c0bde34a5","digest":{"threshold":0.9,"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"]},"deprecated":false,"id":"ASB-A-304497167-9e21b710"}],"severity":"High","spl":"2025-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-03-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e"],"types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","digest":{"threshold":0.9,"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"]},"deprecated":false,"id":"ASB-A-304497167-7d273ba1"},{"target":{"function":"checkDownloadedFilePath","file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Function","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"deprecated":false,"id":"ASB-A-304497167-8214e529"}],"severity":"High","spl":"2025-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-03-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e"],"types":["ID"],"vanir_signatures":[{"target":{"function":"checkDownloadedFilePath","file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Function","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","digest":{"function_hash":"151107043774485541674138510849676846659","length":852},"deprecated":false,"id":"ASB-A-304497167-0e7bae2c"},{"target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7139559a207f7cfbabe86c143292042c3bf77d7e","digest":{"threshold":0.9,"line_hashes":["11178458602711922477761236377671491738","323964476593927769308130635745737529357","198801690648515183445420070595674785819","127124046656771281563741059096162754659","212922888651005646510001940762947434719","302796504643020493678420551773153536195","158007238757640493293704202778375990501","221550556625264261387627442779069723423","104922033756251506235816196514269916351"]},"deprecated":false,"id":"ASB-A-304497167-4b7f6cc4"}],"severity":"High","spl":"2025-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304497167.json"}}],"schema_version":"1.7.5"}