{"id":"ASB-A-313418699","details":"In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-313418699","CVE-2026-58943"],"modified":"2026-11-02T16:56:18.691760495Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java","function":"run"},"deprecated":false,"digest":{"function_hash":"194365308924960940794496665503731965163","length":1289},"id":"ASB-A-313418699-2907e34b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d3534b7d0f7fc61bcaeb0f47f0001d201a81707e"},{"digest":{"line_hashes":["231040450946816645150177675870623488963","133981481359775543714746967838171563200","51423928422532330003191418466314049116","176833134972182007356409370417212464392","105449182843398668722248605571737464017","171431870936241403939289297422323926192","18508963950461200741042946838025236871","326313859143273143133507057129275371392","50123458323918389635972703208695361651","219325016065893450305490402825637188830","319652244828281951889943310953128256312","32392067108528320633570600300771055991","181963379944312962558504600923436550736","152835222621716611578843931731114164929","187078125845248219950100068119928723184","316289188087037736258676582828955388861","214419799937458248601334964805801161044","185395813266936124766724370491844058931","295747577431459138783214723720080232905","326147484758573081732165241444333677847","31759940807133187746312226648005882376","180787186465057521516667641705173514318"],"threshold":0.9},"id":"ASB-A-313418699-e39b1cf9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d3534b7d0f7fc61bcaeb0f47f0001d201a81707e","target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/d3534b7d0f7fc61bcaeb0f47f0001d201a81707e"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"194365308924960940794496665503731965163","length":1289},"id":"ASB-A-313418699-1feaf06d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/8e8cdc27eb8faf6efefd9d9433738d738b38884e","target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java","function":"run"}},{"target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java"},"deprecated":false,"digest":{"line_hashes":["133981481359775543714746967838171563200","51423928422532330003191418466314049116","176833134972182007356409370417212464392","105449182843398668722248605571737464017","171431870936241403939289297422323926192","18508963950461200741042946838025236871","326313859143273143133507057129275371392","50123458323918389635972703208695361651","187078125845248219950100068119928723184","316289188087037736258676582828955388861","214419799937458248601334964805801161044","185395813266936124766724370491844058931","295747577431459138783214723720080232905","326147484758573081732165241444333677847","31759940807133187746312226648005882376","180787186465057521516667641705173514318"],"threshold":0.9},"id":"ASB-A-313418699-2d54d1f2","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/8e8cdc27eb8faf6efefd9d9433738d738b38884e"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/8e8cdc27eb8faf6efefd9d9433738d738b38884e"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/99b46cf4f495c5d9842a2016f960c7fb779e0e03"],"severity":"High","spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-313418699-10fc8a0d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/99b46cf4f495c5d9842a2016f960c7fb779e0e03","target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java","function":"run"},"deprecated":false,"digest":{"length":1289,"function_hash":"194365308924960940794496665503731965163"}},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/99b46cf4f495c5d9842a2016f960c7fb779e0e03","target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java"},"deprecated":false,"digest":{"line_hashes":["231040450946816645150177675870623488963","133981481359775543714746967838171563200","51423928422532330003191418466314049116","176833134972182007356409370417212464392","105449182843398668722248605571737464017","171431870936241403939289297422323926192","18508963950461200741042946838025236871","326313859143273143133507057129275371392","50123458323918389635972703208695361651","219325016065893450305490402825637188830","319652244828281951889943310953128256312","32392067108528320633570600300771055991","181963379944312962558504600923436550736","152835222621716611578843931731114164929","187078125845248219950100068119928723184","316289188087037736258676582828955388861","214419799937458248601334964805801161044","185395813266936124766724370491844058931","295747577431459138783214723720080232905","326147484758573081732165241444333677847","31759940807133187746312226648005882376","180787186465057521516667641705173514318"],"threshold":0.9},"id":"ASB-A-313418699-356c95ba","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"194365308924960940794496665503731965163","length":1289},"id":"ASB-A-313418699-96b955dc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d560eaf713bb3333f3f309203bd1d322c45b6cd8","target":{"function":"run","file":"src/com/android/settings/accounts/AddAccountSettings.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d560eaf713bb3333f3f309203bd1d322c45b6cd8","target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java"},"deprecated":false,"digest":{"line_hashes":["231040450946816645150177675870623488963","133981481359775543714746967838171563200","51423928422532330003191418466314049116","176833134972182007356409370417212464392","105449182843398668722248605571737464017","171431870936241403939289297422323926192","18508963950461200741042946838025236871","326313859143273143133507057129275371392","50123458323918389635972703208695361651","219325016065893450305490402825637188830","319652244828281951889943310953128256312","32392067108528320633570600300771055991","181963379944312962558504600923436550736","152835222621716611578843931731114164929","187078125845248219950100068119928723184","316289188087037736258676582828955388861","214419799937458248601334964805801161044","185395813266936124766724370491844058931","295747577431459138783214723720080232905","326147484758573081732165241444333677847","31759940807133187746312226648005882376","180787186465057521516667641705173514318"],"threshold":0.9},"id":"ASB-A-313418699-d42e8e26","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/d560eaf713bb3333f3f309203bd1d322c45b6cd8"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fa489f97abf9ef0448a63389763ab416ae1db2e2","target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java"},"deprecated":false,"digest":{"line_hashes":["231040450946816645150177675870623488963","133981481359775543714746967838171563200","51423928422532330003191418466314049116","176833134972182007356409370417212464392","105449182843398668722248605571737464017","171431870936241403939289297422323926192","18508963950461200741042946838025236871","326313859143273143133507057129275371392","50123458323918389635972703208695361651","219325016065893450305490402825637188830","319652244828281951889943310953128256312","32392067108528320633570600300771055991","181963379944312962558504600923436550736","152835222621716611578843931731114164929","187078125845248219950100068119928723184","316289188087037736258676582828955388861","214419799937458248601334964805801161044","185395813266936124766724370491844058931","295747577431459138783214723720080232905","326147484758573081732165241444333677847","31759940807133187746312226648005882376","180787186465057521516667641705173514318"],"threshold":0.9},"id":"ASB-A-313418699-1151d827"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fa489f97abf9ef0448a63389763ab416ae1db2e2","target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java","function":"run"},"deprecated":false,"digest":{"length":1289,"function_hash":"194365308924960940794496665503731965163"},"id":"ASB-A-313418699-a0d352a7","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/fa489f97abf9ef0448a63389763ab416ae1db2e2"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["133981481359775543714746967838171563200","51423928422532330003191418466314049116","176833134972182007356409370417212464392","105449182843398668722248605571737464017","171431870936241403939289297422323926192","18508963950461200741042946838025236871","326313859143273143133507057129275371392","50123458323918389635972703208695361651","187078125845248219950100068119928723184","316289188087037736258676582828955388861","214419799937458248601334964805801161044","185395813266936124766724370491844058931","295747577431459138783214723720080232905","326147484758573081732165241444333677847","31759940807133187746312226648005882376","180787186465057521516667641705173514318"],"threshold":0.9},"id":"ASB-A-313418699-d3982172","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/a5a3a263a13020826758f7bec708e54f0fcefe6c","target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java"}},{"id":"ASB-A-313418699-ed486d3d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/a5a3a263a13020826758f7bec708e54f0fcefe6c","target":{"file":"src/com/android/settings/accounts/AddAccountSettings.java","function":"run"},"deprecated":false,"digest":{"length":1289,"function_hash":"194365308924960940794496665503731965163"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/a5a3a263a13020826758f7bec708e54f0fcefe6c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-313418699.json"}}],"schema_version":"1.9.2"}