{"id":"ASB-A-305695605","details":"In multiple locations, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-305695605","CVE-2024-49743"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-02-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-02-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/72a3d2d72c39fd48f0a960a1b3c1e16e307421df"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/b8a1a5d47c3916fe08deefaefd8772092b4fb03c"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/f1fd60bb80f9ea95c61b5392102a4afedd948188"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-02-01"}]}],"versions":["15-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["85037658006666256495711568534100022052","229467666211182724747560469273789664372","312629494909736697262904865419933379102","57540953946479815774157697504629096070","206053469531409781021660788735523710879","180491327751502236251619364560797776437","79808247432479523913040605700431768594","20299620725445409408833127988562088817","64547690939005957189596208538801541174","253985167373914951458642757738822739463","232986520336712046533104678489583146598","126655521145519087379944810453797589990","3021525402731901004738233799552241882","192677339505610684826841627563292080084","11286959412873713746562178024082969331","301878307518982347559928197425542054903","253565197664029825539229197874061655590","199145265358552081880196827516054633078","50200154260191364582709129873039878002","281045360337969134192550432942769612693","321636917718518938470445409394647757083"]},"id":"ASB-A-305695605-0937083e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4426de38dd5d622151d54aaa02b8b28c7df5458b","target":{"file":"core/java/android/app/Notification.java"}},{"digest":{"function_hash":"3997262546824667319292908059513015111","length":3629},"id":"ASB-A-305695605-165fa811","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a926ac791b2cab8617d6ad99058f28c91711fdf0","target":{"file":"core/java/android/app/Notification.java","function":"writeToParcelImpl"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"111560259362463267295951328663401609934","length":2218},"id":"ASB-A-305695605-3a3fd38b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c18c614aec9e5345caab70446f058d8706185776","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueNotification"}},{"target":{"file":"core/java/android/app/Notification.java","function":"writeToParcel"},"deprecated":false,"digest":{"function_hash":"66509006529979913958766125385871836656","length":530},"id":"ASB-A-305695605-3b60372e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4426de38dd5d622151d54aaa02b8b28c7df5458b"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4426de38dd5d622151d54aaa02b8b28c7df5458b","target":{"function":"enqueueNotificationInternal","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"length":5049,"function_hash":"301069074102140166372324261649120665254"},"id":"ASB-A-305695605-3f069dfe","signature_type":"Function"},{"digest":{"length":520,"function_hash":"291950908606924116575328434520514402879"},"id":"ASB-A-305695605-515e0156","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4426de38dd5d622151d54aaa02b8b28c7df5458b","target":{"function":"sanitizeSbn","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"digest":{"length":5386,"function_hash":"187747789397200903955428723065029166804"},"id":"ASB-A-305695605-56baba64","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a926ac791b2cab8617d6ad99058f28c91711fdf0","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueNotificationInternal"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["31415007561452340003573644155116694972","92445012336746446864978427129583727191","31679272014392987905608963848351515594","190561075705856580243426880157557036701","275597437203247144000582828455856274254","225088212306405106504876675233163674695","24541974382778463874229154943078455305","99021740852699714452073248053855021919","61519873143357472728918841335867274058","127981140675581855563935422029084197087","40160984067100276873494107316351446132"],"threshold":0.9},"id":"ASB-A-305695605-5791a3ae","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4426de38dd5d622151d54aaa02b8b28c7df5458b","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"digest":{"line_hashes":["4239352080506796364012341555375346599","259514331455699559860620189835439610930","200673563640902453984151171187823703553","311881478900009317805164949768338493130","134275867851966421511622761663367345021","141098950789437346116520750356391273785","204784355936621741491798019382964446799","155775272626075191149481357687509880441","150895249402632748771485092275444393095","141528962745187553077628537406914435002","40160984067100276873494107316351446132","202344743471678016447081558362725950088","29638063145035675738406670412049558590","303980781066571020454779623696903963722","28997514064015404369234373358635249559","35745172226078815074027196644771535407","323011097991548551274795296896944811267"],"threshold":0.9},"id":"ASB-A-305695605-6658fd77","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a926ac791b2cab8617d6ad99058f28c91711fdf0","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"target":{"file":"core/java/android/app/Notification.java","function":"writeToParcel"},"deprecated":false,"digest":{"length":804,"function_hash":"148438091597561690024373464285538308633"},"id":"ASB-A-305695605-6e58c8f6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/95615e047f9713229442fab54297e1cecbf3d228"},{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["332249987708208355826775349116006719512","88101045458231375917755699395328517489","225283257802790122009137159824352952734","173115987420253814188646070078400139838"],"threshold":0.9},"id":"ASB-A-305695605-71a5ae54","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c18c614aec9e5345caab70446f058d8706185776"},{"target":{"file":"core/java/android/app/Notification.java","function":"readFromParcelImpl"},"deprecated":false,"digest":{"function_hash":"133138947982092948745081603002689932531","length":2952},"id":"ASB-A-305695605-74ddcb8d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4426de38dd5d622151d54aaa02b8b28c7df5458b"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["217569653428253888377934247361600022720","269651365938442221133397656436743104033","159816505086171761349588932724368103182"]},"id":"ASB-A-305695605-782bdf3b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4426de38dd5d622151d54aaa02b8b28c7df5458b","target":{"file":"core/java/android/os/Parcel.java"}},{"digest":{"function_hash":"146181651785688831254299342885968775657","length":2316},"id":"ASB-A-305695605-aa92dd47","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a926ac791b2cab8617d6ad99058f28c91711fdf0","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueNotification"},"deprecated":false},{"id":"ASB-A-305695605-acdf4f47","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a926ac791b2cab8617d6ad99058f28c91711fdf0","target":{"function":"writeToParcel","file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"function_hash":"17883526523134810924399465619027618858","length":826}},{"deprecated":false,"digest":{"line_hashes":["145969204005403247343128558110505983943","294320562267527479256390246468451499694","46352046891062839545962441510636082082","338315872246793091006298944868260321820","112683941803382674870492951133797437835","22332223261852840860197565792053634432","172035238677203020011334853132338182300","324956352065465417167641875139561509882","205344256239738129181615981240345695716","110169516747373647529884885674300378950","255718386547644450002035047524898196199","113065822082097891499765007377770618386","112268192354013397081901167324420950343","174095439708149686855226190180824253184","233925948084900923739546022682138796239","235134516144962219711515230160446790031","195707976539367947698718464036158149309","154112737500363664459787275800868917325","246056880148212382304550842493550825269","160445573859149293281380843862554650508","229492140059438301976531181363352067556","327677794884343591997831918431001399956","203207498388986483111996525989518116963","303668316180961137864529789200859951114","214369354197083473509374438535770290701","227373435366408411281535527329636467290","41162980693554173971486372203334681493","161092486943460315369916205008282209783","10950207200503628500964098112077672593","80481894383095939656070945796113319056","86264184539420973339975396351457353426","240195784336034502893674782328722244618","328164474993763335489213689814462418081","3032363384483432645571174436856995404","263365275268315447379762643068370051280"],"threshold":0.9},"id":"ASB-A-305695605-b4a51946","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a926ac791b2cab8617d6ad99058f28c91711fdf0","target":{"file":"core/java/android/app/Notification.java"}},{"digest":{"function_hash":"110436706009621614139366826752074202002","length":3733},"id":"ASB-A-305695605-db52ed41","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/95615e047f9713229442fab54297e1cecbf3d228","target":{"function":"writeToParcelImpl","file":"core/java/android/app/Notification.java"},"deprecated":false},{"target":{"file":"core/java/android/app/Notification.java","function":"readFromParcelImpl"},"deprecated":false,"digest":{"length":3096,"function_hash":"230074801480832055870739176298515918112"},"id":"ASB-A-305695605-e49713e7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a926ac791b2cab8617d6ad99058f28c91711fdf0"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/4426de38dd5d622151d54aaa02b8b28c7df5458b","target":{"file":"core/java/android/app/Notification.java","function":"writeToParcelImpl"},"deprecated":false,"digest":{"function_hash":"30435087596524544859606342521125849098","length":3502},"id":"ASB-A-305695605-f8ae8382","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4426de38dd5d622151d54aaa02b8b28c7df5458b","target":{"function":"clearAllowlistToken","file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"function_hash":"180749008132528469307511879236790890177","length":111},"id":"ASB-A-305695605-fc41f66d"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/95615e047f9713229442fab54297e1cecbf3d228","target":{"file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["69481137798665107074013257162383742529","103309347055679745827913593020981267972","97504365066633981639567443125357266237","108428987535454902274312189421723009211","184997597711344408204051618709064372785","65728427290074296667329995805239318036","72624348964400468024833804139539910412","44205602737278819779192993276991873201","131527410252206645268030393748987763403","208602939981354529407374047449755081670","33298326771181305471713859372497294957","81284354174493916126721739207703320559","50109880204125189335668680350602543356","290181636240408361645367317411498096148","24968137621027695317613598739084530677","258411700649745957129263807662679619726","96598809169293796161624322866213762754","329507459464501653308538901919045482832"]},"id":"ASB-A-305695605-fe96b110","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4426de38dd5d622151d54aaa02b8b28c7df5458b","https://android.googlesource.com/platform/frameworks/base/+/95615e047f9713229442fab54297e1cecbf3d228","https://android.googlesource.com/platform/frameworks/base/+/c18c614aec9e5345caab70446f058d8706185776","https://android.googlesource.com/platform/frameworks/base/+/a926ac791b2cab8617d6ad99058f28c91711fdf0"],"severity":"High","spl":"2025-02-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305695605.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-02-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"200039775730620155494068589088137131726","length":1952},"id":"ASB-A-305695605-2028551e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9","target":{"function":"run","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9","target":{"function":"writeToParcelImpl","file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"function_hash":"30435087596524544859606342521125849098","length":3502},"id":"ASB-A-305695605-22bd858a","signature_type":"Function","signature_version":"v1"},{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueNotificationInternal"},"deprecated":false,"digest":{"length":4981,"function_hash":"5988297701827109094384359690925466948"},"id":"ASB-A-305695605-3efe2622","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9"},{"id":"ASB-A-305695605-4681c216","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"sanitizeSbn"},"deprecated":false,"digest":{"function_hash":"291950908606924116575328434520514402879","length":520}},{"digest":{"function_hash":"94453099382949415790310205510235257610","length":520},"id":"ASB-A-305695605-5811e6a1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9","target":{"function":"writeToParcel","file":"core/java/android/app/Notification.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9","target":{"file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"line_hashes":["85037658006666256495711568534100022052","229467666211182724747560469273789664372","312629494909736697262904865419933379102","57540953946479815774157697504629096070","35629803844786884332820055447328405592","180491327751502236251619364560797776437","79808247432479523913040605700431768594","20299620725445409408833127988562088817","64547690939005957189596208538801541174","253985167373914951458642757738822739463","232986520336712046533104678489583146598","126655521145519087379944810453797589990","3021525402731901004738233799552241882","192677339505610684826841627563292080084","11286959412873713746562178024082969331","301878307518982347559928197425542054903","253565197664029825539229197874061655590","199145265358552081880196827516054633078","50200154260191364582709129873039878002","281045360337969134192550432942769612693","321636917718518938470445409394647757083"],"threshold":0.9},"id":"ASB-A-305695605-62c9c52a","signature_type":"Line","signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["250136620497067812193013624573308398344","92445012336746446864978427129583727191","31679272014392987905608963848351515594","190561075705856580243426880157557036701","275597437203247144000582828455856274254","225088212306405106504876675233163674695","24541974382778463874229154943078455305","99021740852699714452073248053855021919","61519873143357472728918841335867274058","183856406065227123892773425565102501940","85679316129049360054569676662694906448","263712046540845692615234212072612049388","61347533821342020906406794122384357386","308655303700155290277991503163595166951","173115987420253814188646070078400139838"]},"id":"ASB-A-305695605-a0848d60","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["217569653428253888377934247361600022720","269651365938442221133397656436743104033","159816505086171761349588932724368103182"],"threshold":0.9},"id":"ASB-A-305695605-a39c66eb","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9","target":{"file":"core/java/android/os/Parcel.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9","target":{"function":"readFromParcelImpl","file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"length":2952,"function_hash":"133138947982092948745081603002689932531"},"id":"ASB-A-305695605-e8836660","signature_type":"Function"},{"id":"ASB-A-305695605-ea879ed5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9","target":{"file":"core/java/android/app/Notification.java","function":"clearAllowlistToken"},"deprecated":false,"digest":{"length":111,"function_hash":"180749008132528469307511879236790890177"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/492865ebcad4480562cb4f07c4b4e079af75fdf9"],"severity":"High","spl":"2025-02-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305695605.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-02-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2025-02-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d107bcde72620926566613c5efa7f0c4ce9f63c","target":{"file":"core/java/android/app/Notification.java","function":"writeToParcelImpl"},"deprecated":false,"digest":{"length":3502,"function_hash":"30435087596524544859606342521125849098"},"id":"ASB-A-305695605-05ec2d4a"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5d107bcde72620926566613c5efa7f0c4ce9f63c","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["250136620497067812193013624573308398344","92445012336746446864978427129583727191","31679272014392987905608963848351515594","190561075705856580243426880157557036701","171548852846172734744435483104381182718","222376968769515075791879262325112236898","15274997982046198563146298409434740710","294096154273122677522205917725905343301","61519873143357472728918841335867274058","183856406065227123892773425565102501940","85679316129049360054569676662694906448","263712046540845692615234212072612049388","61347533821342020906406794122384357386","308655303700155290277991503163595166951","173115987420253814188646070078400139838"],"threshold":0.9},"id":"ASB-A-305695605-5304e636","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-305695605-53de41e0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d107bcde72620926566613c5efa7f0c4ce9f63c","target":{"function":"readFromParcelImpl","file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"function_hash":"133138947982092948745081603002689932531","length":2952}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d107bcde72620926566613c5efa7f0c4ce9f63c","target":{"file":"core/java/android/os/Parcel.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["217569653428253888377934247361600022720","269651365938442221133397656436743104033","159816505086171761349588932724368103182"]},"id":"ASB-A-305695605-7319ec2e"},{"deprecated":false,"digest":{"function_hash":"275372314725821542637644716462634945986","length":71},"id":"ASB-A-305695605-7c6564eb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d107bcde72620926566613c5efa7f0c4ce9f63c","target":{"function":"setAllowlistToken","file":"core/java/android/app/Notification.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d107bcde72620926566613c5efa7f0c4ce9f63c","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"run"},"deprecated":false,"digest":{"length":1952,"function_hash":"200039775730620155494068589088137131726"},"id":"ASB-A-305695605-9b1a0f70"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5d107bcde72620926566613c5efa7f0c4ce9f63c","target":{"function":"enqueueNotificationInternal","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"function_hash":"5988297701827109094384359690925466948","length":4981},"id":"ASB-A-305695605-a69d815f","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d107bcde72620926566613c5efa7f0c4ce9f63c","target":{"file":"core/java/android/app/Notification.java","function":"writeToParcel"},"deprecated":false,"digest":{"length":520,"function_hash":"94453099382949415790310205510235257610"},"id":"ASB-A-305695605-e4fcbe0f","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/5d107bcde72620926566613c5efa7f0c4ce9f63c","target":{"file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"line_hashes":["85037658006666256495711568534100022052","229467666211182724747560469273789664372","312629494909736697262904865419933379102","57540953946479815774157697504629096070","35629803844786884332820055447328405592","180491327751502236251619364560797776437","79808247432479523913040605700431768594","20299620725445409408833127988562088817","64547690939005957189596208538801541174","253985167373914951458642757738822739463","232986520336712046533104678489583146598","126655521145519087379944810453797589990","19328514911481988449621301501520510512","264348577362792108663720183346652756510","258169763999396838387685599658587282028","208883902105813895585599267926983689348","271312454085563944599205919785273639862"],"threshold":0.9},"id":"ASB-A-305695605-f0742c91","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5d107bcde72620926566613c5efa7f0c4ce9f63c"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305695605.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-02-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2025-02-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["145969204005403247343128558110505983943","294320562267527479256390246468451499694","46352046891062839545962441510636082082","338315872246793091006298944868260321820","112683941803382674870492951133797437835","22332223261852840860197565792053634432","172035238677203020011334853132338182300","324956352065465417167641875139561509882","205344256239738129181615981240345695716","110169516747373647529884885674300378950","255718386547644450002035047524898196199","113065822082097891499765007377770618386","112268192354013397081901167324420950343","174095439708149686855226190180824253184","233925948084900923739546022682138796239","235134516144962219711515230160446790031","195707976539367947698718464036158149309","154112737500363664459787275800868917325","246056880148212382304550842493550825269","160445573859149293281380843862554650508","229492140059438301976531181363352067556","327677794884343591997831918431001399956","203207498388986483111996525989518116963","303668316180961137864529789200859951114","214369354197083473509374438535770290701","227373435366408411281535527329636467290","41162980693554173971486372203334681493","161092486943460315369916205008282209783","10950207200503628500964098112077672593","80481894383095939656070945796113319056","86264184539420973339975396351457353426","240195784336034502893674782328722244618","328164474993763335489213689814462418081","3032363384483432645571174436856995404","263365275268315447379762643068370051280"]},"id":"ASB-A-305695605-26f9a6b3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/877a8de71a9c9c6eb560f137df1a20eb30e8ab69"},{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueNotification"},"deprecated":false,"digest":{"function_hash":"211539496305406185229186837972031241479","length":2274},"id":"ASB-A-305695605-33570f76","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/877a8de71a9c9c6eb560f137df1a20eb30e8ab69"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/877a8de71a9c9c6eb560f137df1a20eb30e8ab69","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueNotificationInternal"},"deprecated":false,"digest":{"function_hash":"165534515434574009031172926239069060503","length":5364},"id":"ASB-A-305695605-35b3869e","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/877a8de71a9c9c6eb560f137df1a20eb30e8ab69","target":{"file":"core/java/android/app/Notification.java","function":"readFromParcelImpl"},"deprecated":false,"digest":{"function_hash":"230074801480832055870739176298515918112","length":3096},"id":"ASB-A-305695605-6424a2a3","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["4239352080506796364012341555375346599","259514331455699559860620189835439610930","200673563640902453984151171187823703553","311881478900009317805164949768338493130","134275867851966421511622761663367345021","141098950789437346116520750356391273785","204784355936621741491798019382964446799","155775272626075191149481357687509880441","150895249402632748771485092275444393095","141528962745187553077628537406914435002","40160984067100276873494107316351446132","202344743471678016447081558362725950088","29638063145035675738406670412049558590","303980781066571020454779623696903963722","28997514064015404369234373358635249559","35745172226078815074027196644771535407","323011097991548551274795296896944811267"]},"id":"ASB-A-305695605-8f7b12e5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/877a8de71a9c9c6eb560f137df1a20eb30e8ab69","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/877a8de71a9c9c6eb560f137df1a20eb30e8ab69","target":{"function":"writeToParcelImpl","file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"length":3629,"function_hash":"3997262546824667319292908059513015111"},"id":"ASB-A-305695605-9cc58381"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/faba96efff401d77243a3f257fb12512a8efe379","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["332249987708208355826775349116006719512","88101045458231375917755699395328517489","225283257802790122009137159824352952734","173115987420253814188646070078400139838"],"threshold":0.9},"id":"ASB-A-305695605-aa8d87b7","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"26520916355225437071170647996920158244","length":2176},"id":"ASB-A-305695605-beb062d1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/faba96efff401d77243a3f257fb12512a8efe379","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueNotification"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/877a8de71a9c9c6eb560f137df1a20eb30e8ab69","target":{"file":"core/java/android/app/Notification.java","function":"writeToParcel"},"deprecated":false,"digest":{"length":826,"function_hash":"17883526523134810924399465619027618858"},"id":"ASB-A-305695605-c5e0c4b0","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/faba96efff401d77243a3f257fb12512a8efe379","https://android.googlesource.com/platform/frameworks/base/+/877a8de71a9c9c6eb560f137df1a20eb30e8ab69","https://android.googlesource.com/platform/frameworks/base/+/31686e52218632a7b84e3d005094c74200050c16"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305695605.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-02-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"file":"core/java/android/os/Parcel.java"},"deprecated":false,"digest":{"line_hashes":["217569653428253888377934247361600022720","269651365938442221133397656436743104033","159816505086171761349588932724368103182"],"threshold":0.9},"id":"ASB-A-305695605-01122b04","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["293233107007767137203096809675212067464","92445012336746446864978427129583727191","31679272014392987905608963848351515594","190561075705856580243426880157557036701","275597437203247144000582828455856274254","225088212306405106504876675233163674695","24541974382778463874229154943078455305","99021740852699714452073248053855021919","61519873143357472728918841335867274058","183856406065227123892773425565102501940","85679316129049360054569676662694906448","263712046540845692615234212072612049388","61347533821342020906406794122384357386","308655303700155290277991503163595166951","173115987420253814188646070078400139838"]},"id":"ASB-A-305695605-09fc4078","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a","target":{"file":"core/java/android/app/Notification.java","function":"readFromParcelImpl"},"deprecated":false,"digest":{"function_hash":"133138947982092948745081603002689932531","length":2952},"id":"ASB-A-305695605-4b47ce0d","signature_type":"Function"},{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueNotificationInternal"},"deprecated":false,"digest":{"function_hash":"86168517221964858455829221119892033573","length":5049},"id":"ASB-A-305695605-7af833dd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a"},{"target":{"file":"core/java/android/app/Notification.java","function":"writeToParcelImpl"},"deprecated":false,"digest":{"length":3502,"function_hash":"30435087596524544859606342521125849098"},"id":"ASB-A-305695605-a16e897a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a","target":{"file":"core/java/android/app/Notification.java","function":"writeToParcel"},"deprecated":false,"digest":{"function_hash":"94453099382949415790310205510235257610","length":520},"id":"ASB-A-305695605-b0dabccd","signature_type":"Function"},{"id":"ASB-A-305695605-c1dec1a2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a","target":{"function":"clearAllowlistToken","file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"function_hash":"180749008132528469307511879236790890177","length":111}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a","target":{"file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"line_hashes":["85037658006666256495711568534100022052","229467666211182724747560469273789664372","312629494909736697262904865419933379102","57540953946479815774157697504629096070","35629803844786884332820055447328405592","180491327751502236251619364560797776437","79808247432479523913040605700431768594","20299620725445409408833127988562088817","64547690939005957189596208538801541174","253985167373914951458642757738822739463","232986520336712046533104678489583146598","126655521145519087379944810453797589990","3021525402731901004738233799552241882","192677339505610684826841627563292080084","11286959412873713746562178024082969331","301878307518982347559928197425542054903","253565197664029825539229197874061655590","199145265358552081880196827516054633078","50200154260191364582709129873039878002","281045360337969134192550432942769612693","321636917718518938470445409394647757083"],"threshold":0.9},"id":"ASB-A-305695605-c3f5f6b1","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"sanitizeSbn"},"deprecated":false,"digest":{"function_hash":"291950908606924116575328434520514402879","length":520},"id":"ASB-A-305695605-e2ca20c6","signature_type":"Function"},{"digest":{"function_hash":"69597840519967109850570711800993850199","length":2104},"id":"ASB-A-305695605-f0ff8ca0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a","target":{"function":"run","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/61274fc61fb33a0ae9525188d969cb56503c124a"],"severity":"High","spl":"2025-02-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305695605.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-02-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"id":"ASB-A-305695605-0405e455","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9","target":{"function":"enqueueNotification","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"function_hash":"317261662508468934123900644704931709725","length":2076}},{"digest":{"length":5133,"function_hash":"228198131834667036570801007320261118942"},"id":"ASB-A-305695605-17a5a04c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"enqueueNotificationInternal"},"deprecated":false},{"id":"ASB-A-305695605-19a31e14","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9","target":{"function":"sanitizeSbn","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"length":520,"function_hash":"291950908606924116575328434520514402879"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9","target":{"file":"core/java/android/app/Notification.java","function":"writeToParcel"},"deprecated":false,"digest":{"function_hash":"94453099382949415790310205510235257610","length":520},"id":"ASB-A-305695605-3959a25f"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9","target":{"function":"readFromParcelImpl","file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"length":2952,"function_hash":"133138947982092948745081603002689932531"},"id":"ASB-A-305695605-687a1de4"},{"digest":{"function_hash":"30435087596524544859606342521125849098","length":3502},"id":"ASB-A-305695605-75a145e4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9","target":{"function":"writeToParcelImpl","file":"core/java/android/app/Notification.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["216615426221578021906685354785455014650","92445012336746446864978427129583727191","31679272014392987905608963848351515594","190561075705856580243426880157557036701","275597437203247144000582828455856274254","225088212306405106504876675233163674695","24541974382778463874229154943078455305","99021740852699714452073248053855021919","61519873143357472728918841335867274058","127981140675581855563935422029084197087","40160984067100276873494107316351446132","332249987708208355826775349116006719512","88101045458231375917755699395328517489","225283257802790122009137159824352952734","173115987420253814188646070078400139838"]},"id":"ASB-A-305695605-ae399fdd"},{"deprecated":false,"digest":{"line_hashes":["85037658006666256495711568534100022052","229467666211182724747560469273789664372","312629494909736697262904865419933379102","57540953946479815774157697504629096070","35629803844786884332820055447328405592","180491327751502236251619364560797776437","79808247432479523913040605700431768594","20299620725445409408833127988562088817","64547690939005957189596208538801541174","253985167373914951458642757738822739463","232986520336712046533104678489583146598","126655521145519087379944810453797589990","3021525402731901004738233799552241882","192677339505610684826841627563292080084","11286959412873713746562178024082969331","301878307518982347559928197425542054903","253565197664029825539229197874061655590","199145265358552081880196827516054633078","50200154260191364582709129873039878002","281045360337969134192550432942769612693","321636917718518938470445409394647757083"],"threshold":0.9},"id":"ASB-A-305695605-c4f17b5c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9","target":{"file":"core/java/android/app/Notification.java"}},{"deprecated":false,"digest":{"line_hashes":["217569653428253888377934247361600022720","269651365938442221133397656436743104033","159816505086171761349588932724368103182"],"threshold":0.9},"id":"ASB-A-305695605-e25f7808","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9","target":{"file":"core/java/android/os/Parcel.java"}},{"target":{"function":"clearAllowlistToken","file":"core/java/android/app/Notification.java"},"deprecated":false,"digest":{"function_hash":"180749008132528469307511879236790890177","length":111},"id":"ASB-A-305695605-ed46a8dd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/697c31d74c775da1ae0caa57839b4d2ddb83eba9"],"severity":"High","spl":"2025-02-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305695605.json"}}],"schema_version":"1.9.0"}