{"id":"ASB-A-326926596","details":"In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-326926596","CVE-2025-32329"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2025-12-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"id":"ASB-A-326926596-0cbfe076","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"function":"initialAuthenticationLayout","file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"deprecated":false,"digest":{"length":798,"function_hash":"56176386317686736946649217063705566830"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java"},"deprecated":false,"digest":{"line_hashes":["233001280945690766024866032804020106263","299280155137900456369389346906834625687","253670570635601349012097703140517091330","6763710524091997994082961324208427908","287455098598448921071329745868061349234","227805279402260074562908927996850584221","30116608954614319447183709923452508562","36371748056050285340289618795231278841","147157243943221651853800518330012291856","116013423297009835675761786228615335497","282334189601084331727543333066433232872","309855511319383992738640197427288476813","257575552362915492264443229615036330102","137364990574650661356629752006353102068","7346143077645295169490143337655292533","271203066595628114305843115488139558909","246313342684578862837160232182440545029","286744740604751949071305350356414253060","79209834993743233989565171484452365304","256992858442147664412152207376856907832","128684448498299491058223853214834730128","91477332951031294087869336262530769873","262407970360489148064772787139793786883","227529702526648491498747353364192306840","315705055866936701374609147536543227212","224849018509674106895395965745940104149","134008103952047155517677989125449306039","208363551722438043749201696435822980457","238878178207896271984965833527827184793","246153676559498975996525891840438850912","319314867881549470635797636500735414577"],"threshold":0.9},"id":"ASB-A-326926596-1808480d"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"function":"SaveUi","file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"deprecated":false,"digest":{"function_hash":"38359472700061354235414716544997536502","length":7279},"id":"ASB-A-326926596-1e44ee4d","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"DialogFillUi"},"deprecated":false,"digest":{"length":1468,"function_hash":"58588869078857813296908308804826833385"},"id":"ASB-A-326926596-26511c2d","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"deprecated":false,"digest":{"line_hashes":["214829691709375686425688750163675762444","31173660224107888955468676996662291970","75717993223470930286438961849158473008","303972587534416303383394155165688117343","259449713830477777317285782905283199576","117229051275493355373779713481641589010","127284537694877960079216639377672371216","299252079355722630865613843433637167635","264330761225222907849056040899046276371","265301051241449904846147560721618625883","15165947783158235074656931996515737571"],"threshold":0.9},"id":"ASB-A-326926596-3cb86a1d","signature_type":"Line","signature_version":"v1"},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"createDatasetItems"},"deprecated":false,"digest":{"function_hash":"82837857977102568369555572329393044920","length":1699},"id":"ASB-A-326926596-4353f25f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7"},{"target":{"file":"services/autofill/java/com/android/server/autofill/Session.java","function":"getServiceIcon"},"deprecated":false,"digest":{"function_hash":"57289658741123446022184100211094355310","length":290},"id":"ASB-A-326926596-462be10c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7"},{"target":{"function":"getServiceLabel","file":"services/autofill/java/com/android/server/autofill/Session.java"},"deprecated":false,"digest":{"length":290,"function_hash":"57289658741123446022184100211094355310"},"id":"ASB-A-326926596-66d61923","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java","function":"FillUi"},"deprecated":false,"digest":{"function_hash":"337276213812603930001841971103435567683","length":6914},"id":"ASB-A-326926596-82ecfc79"},{"digest":{"function_hash":"232925101570296434580965003579058750578","length":520},"id":"ASB-A-326926596-886ee113","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"setHeader"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"function":"dump","file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java"},"deprecated":false,"digest":{"function_hash":"275360925765748613756556327536913270530","length":2553},"id":"ASB-A-326926596-894a7e5b","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["147970609522738711682570941621357862514","99688209858480151987959042898705195723","159528535452217599658308375414822941606","226494725607023412914596331337564914285","129231880453292375756121266455606840347","259545855947006792562166870978494910102","211966466024317453947413305491351570506","299955936703988313777666839291065749734","138670454602168716927049345311235552388","259039622594416815211422634790083140238","291601608691826183706509385019023236983","239196817897099031902353265860786865338","39730096403312739749054541694199342419","176563944769267069899858614194414818962","125827276761289425613209756329496419863","239196817897099031902353265860786865338","39730096403312739749054541694199342419","176563944769267069899858614194414818962","252639957790865787812438357176888523414","227529702526648491498747353364192306840","315705055866936701374609147536543227212","224849018509674106895395965745940104149","134008103952047155517677989125449306039"],"threshold":0.9},"id":"ASB-A-326926596-8c2dd10d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["195550187764114165661677033491385867525","298497138299562978700772105186371160186","156681404185485594211687436684168302104","60637664312035269760776169815005113432","220855508336303408398916928186082455251","329619481055895590037036631590622970823","240481412043703972796096684412755948793","216793313798955561512914603505750478780","142548056876858934317447270565251659585","303175247934198869648397341081908772561","250169775779716262098479289038361735106","118836924277658266060750236114637557467","204286604721725778250531106701901155250","200979458900658699994251331348558277928","324514966097401313249705843429493881194","5974945123024092751966245155268981445","207635776789743471905519417928232511528"]},"id":"ASB-A-326926596-d2179c75"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7","target":{"file":"services/autofill/java/com/android/server/autofill/Session.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["268352417521028367845542076301610446755","239924179753459631721185019549570366933","98889634726560196287370948075464876438","178289728046244122145941446463267876599","274157703640419043228222739474027404333","66660066677846037961325816338297534785","54076257002702924454182198608258883419","335958806433036555948979627022064975558","41045878133738289792592106977067306250","115113670473088224954500224237874146587","82321371675401198119989668316979288526","214382261250007213528048088883786706276","13312323333809348206037951157692816031","186635348450611877814792078694135061174","274694428001707897135556115432386156432","87982586563280194210829105479109417817"]},"id":"ASB-A-326926596-ee6cea3c"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e030442861f4dd0e03d67b65f0940b488007f0d7"],"severity":"High","spl":"2025-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-326926596.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-12-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2025-12-01","types":["EoP"],"vanir_signatures":[{"digest":{"length":290,"function_hash":"57289658741123446022184100211094355310"},"id":"ASB-A-326926596-04dbc899","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"function":"getServiceIcon","file":"services/autofill/java/com/android/server/autofill/Session.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java","function":"FillUi"},"deprecated":false,"digest":{"function_hash":"337276213812603930001841971103435567683","length":6914},"id":"ASB-A-326926596-0bbdbd29","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java"},"deprecated":false,"digest":{"line_hashes":["233001280945690766024866032804020106263","299280155137900456369389346906834625687","253670570635601349012097703140517091330","6763710524091997994082961324208427908","287455098598448921071329745868061349234","227805279402260074562908927996850584221","30116608954614319447183709923452508562","147157243943221651853800518330012291856","116013423297009835675761786228615335497","282334189601084331727543333066433232872","245334054565899627947978281131108584265","309855511319383992738640197427288476813","257575552362915492264443229615036330102","137364990574650661356629752006353102068","7346143077645295169490143337655292533","271203066595628114305843115488139558909","246313342684578862837160232182440545029","286744740604751949071305350356414253060","79209834993743233989565171484452365304","256992858442147664412152207376856907832","128684448498299491058223853214834730128","91477332951031294087869336262530769873","262407970360489148064772787139793786883","227529702526648491498747353364192306840","315705055866936701374609147536543227212","224849018509674106895395965745940104149","134008103952047155517677989125449306039","208363551722438043749201696435822980457","238878178207896271984965833527827184793","246153676559498975996525891840438850912","319314867881549470635797636500735414577"],"threshold":0.9},"id":"ASB-A-326926596-27bf9ac6","signature_type":"Line"},{"id":"ASB-A-326926596-34ce40b8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["147970609522738711682570941621357862514","99688209858480151987959042898705195723","159528535452217599658308375414822941606","226494725607023412914596331337564914285","129231880453292375756121266455606840347","259545855947006792562166870978494910102","211966466024317453947413305491351570506","299955936703988313777666839291065749734","138670454602168716927049345311235552388","259039622594416815211422634790083140238","291601608691826183706509385019023236983","239196817897099031902353265860786865338","39730096403312739749054541694199342419","176563944769267069899858614194414818962","125827276761289425613209756329496419863","239196817897099031902353265860786865338","39730096403312739749054541694199342419","176563944769267069899858614194414818962","252639957790865787812438357176888523414","227529702526648491498747353364192306840","315705055866936701374609147536543227212","224849018509674106895395965745940104149","134008103952047155517677989125449306039"]}},{"deprecated":false,"digest":{"function_hash":"232925101570296434580965003579058750578","length":520},"id":"ASB-A-326926596-40874f1e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"setHeader"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"createDatasetItems"},"deprecated":false,"digest":{"function_hash":"82837857977102568369555572329393044920","length":1699},"id":"ASB-A-326926596-7429780b","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java","function":"dump"},"deprecated":false,"digest":{"function_hash":"275360925765748613756556327536913270530","length":2553},"id":"ASB-A-326926596-7b0cc5c9","signature_type":"Function"},{"digest":{"length":290,"function_hash":"57289658741123446022184100211094355310"},"id":"ASB-A-326926596-afdffc0f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/Session.java","function":"getServiceLabel"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"deprecated":false,"digest":{"line_hashes":["214829691709375686425688750163675762444","31173660224107888955468676996662291970","75717993223470930286438961849158473008","303972587534416303383394155165688117343","259449713830477777317285782905283199576","117229051275493355373779713481641589010","127284537694877960079216639377672371216","299252079355722630865613843433637167635","264330761225222907849056040899046276371","265301051241449904846147560721618625883","15165947783158235074656931996515737571"],"threshold":0.9},"id":"ASB-A-326926596-cb76f1ba"},{"id":"ASB-A-326926596-d7a4c447","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"DialogFillUi"},"deprecated":false,"digest":{"function_hash":"58588869078857813296908308804826833385","length":1468}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["195550187764114165661677033491385867525","298497138299562978700772105186371160186","156681404185485594211687436684168302104","60637664312035269760776169815005113432","220855508336303408398916928186082455251","329619481055895590037036631590622970823","240481412043703972796096684412755948793","231346208401394666704078315980602216517","324514966097401313249705843429493881194","5974945123024092751966245155268981445","207635776789743471905519417928232511528"]},"id":"ASB-A-326926596-f220d03c","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-326926596-f2733c97","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"file":"services/autofill/java/com/android/server/autofill/Session.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["268352417521028367845542076301610446755","239924179753459631721185019549570366933","98889634726560196287370948075464876438","178289728046244122145941446463267876599","274157703640419043228222739474027404333","66660066677846037961325816338297534785","54076257002702924454182198608258883419","335958806433036555948979627022064975558","41045878133738289792592106977067306250","115113670473088224954500224237874146587","82321371675401198119989668316979288526","214382261250007213528048088883786706276","13312323333809348206037951157692816031","186635348450611877814792078694135061174","274694428001707897135556115432386156432","87982586563280194210829105479109417817"]}},{"deprecated":false,"digest":{"length":7279,"function_hash":"38359472700061354235414716544997536502"},"id":"ASB-A-326926596-f82038ff","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"function":"SaveUi","file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"}},{"deprecated":false,"digest":{"length":798,"function_hash":"56176386317686736946649217063705566830"},"id":"ASB-A-326926596-fb5e28ce","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa","target":{"function":"initialAuthenticationLayout","file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c59352425ff3387e5897f3fd40b717b3b1cfd0fa"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-326926596.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-12-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["214829691709375686425688750163675762444","31173660224107888955468676996662291970","75717993223470930286438961849158473008","303972587534416303383394155165688117343","259449713830477777317285782905283199576","117229051275493355373779713481641589010","127284537694877960079216639377672371216","299252079355722630865613843433637167635","264330761225222907849056040899046276371","265301051241449904846147560721618625883","15165947783158235074656931996515737571"],"threshold":0.9},"id":"ASB-A-326926596-268dbb0b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48","target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"}},{"target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"createDatasetItems"},"deprecated":false,"digest":{"function_hash":"82837857977102568369555572329393044920","length":1699},"id":"ASB-A-326926596-3312f04f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"setHeader"},"deprecated":false,"digest":{"length":520,"function_hash":"232925101570296434580965003579058750578"},"id":"ASB-A-326926596-36d595f4","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48","target":{"function":"initialAuthenticationLayout","file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"deprecated":false,"digest":{"function_hash":"56176386317686736946649217063705566830","length":798},"id":"ASB-A-326926596-37e111e1","signature_type":"Function"},{"digest":{"length":2456,"function_hash":"146899155616903025975604170962739959823"},"id":"ASB-A-326926596-3d800b7f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48","target":{"function":"dump","file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java"},"deprecated":false},{"id":"ASB-A-326926596-8f0805d0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48","target":{"function":"SaveUi","file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"deprecated":false,"digest":{"length":6728,"function_hash":"208798393521612387387459446144260401344"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48","target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"deprecated":false,"digest":{"line_hashes":["202803058704813849885025393395228740199","156681404185485594211687436684168302104","60637664312035269760776169815005113432","83419763691286668002434097066507888400","14795436758084438848802528301711224","267572380463742154569171891627222688177","231225187996353771389632669293544754112","110666001288784253692508788231137284584","110793581962218508177753359608160527948","126084369161226454611782888021927007008","221783274660102062601435397657555486203","120430312024355289347056782212703760495","324514966097401313249705843429493881194","5974945123024092751966245155268981445","207635776789743471905519417928232511528"],"threshold":0.9},"id":"ASB-A-326926596-c81c3128"},{"digest":{"line_hashes":["233001280945690766024866032804020106263","299280155137900456369389346906834625687","253670570635601349012097703140517091330","6763710524091997994082961324208427908","287455098598448921071329745868061349234","227805279402260074562908927996850584221","30116608954614319447183709923452508562","36371748056050285340289618795231278841","107302515774269940261729695955013239669","260652724757114145761900937580365783588","295348855014700694472100199874250373832","309855511319383992738640197427288476813","257575552362915492264443229615036330102","137364990574650661356629752006353102068","7346143077645295169490143337655292533","271203066595628114305843115488139558909","246313342684578862837160232182440545029","286744740604751949071305350356414253060","79209834993743233989565171484452365304","256992858442147664412152207376856907832","128684448498299491058223853214834730128","91477332951031294087869336262530769873","262407970360489148064772787139793786883","227529702526648491498747353364192306840","315705055866936701374609147536543227212","224849018509674106895395965745940104149","134008103952047155517677989125449306039","69312753798116405490642905263392662986","152499101737448620750513050421023204315","4274847791164019094876233726764237380","7675197094534217813054740109641222647"],"threshold":0.9},"id":"ASB-A-326926596-d8da1d19","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48","target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"DialogFillUi"},"deprecated":false,"digest":{"function_hash":"134537761509883752126979205773406954332","length":1377},"id":"ASB-A-326926596-d8fa937a","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48","target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java","function":"FillUi"},"deprecated":false,"digest":{"length":6643,"function_hash":"200343085571453493443924269324549155542"},"id":"ASB-A-326926596-f3d64edd"},{"digest":{"line_hashes":["147970609522738711682570941621357862514","99688209858480151987959042898705195723","159528535452217599658308375414822941606","226494725607023412914596331337564914285","129231880453292375756121266455606840347","259545855947006792562166870978494910102","211966466024317453947413305491351570506","299955936703988313777666839291065749734","138670454602168716927049345311235552388","259039622594416815211422634790083140238","135076460282510417074273764112187183250","239196817897099031902353265860786865338","39730096403312739749054541694199342419","176563944769267069899858614194414818962","125827276761289425613209756329496419863","239196817897099031902353265860786865338","39730096403312739749054541694199342419","176563944769267069899858614194414818962","252639957790865787812438357176888523414","227529702526648491498747353364192306840","315705055866936701374609147536543227212","224849018509674106895395965745940104149","134008103952047155517677989125449306039"],"threshold":0.9},"id":"ASB-A-326926596-f903cb6e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/16d1ab277484a7163ca1115bcbac5d94228a4a48"],"severity":"High","spl":"2025-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-326926596.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-12-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"275360925765748613756556327536913270530","length":2553},"id":"ASB-A-326926596-25d1337e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java","function":"dump"}},{"id":"ASB-A-326926596-292354be","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java","function":"initialAuthenticationLayout"},"deprecated":false,"digest":{"length":798,"function_hash":"56176386317686736946649217063705566830"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"function":"getServiceIcon","file":"services/autofill/java/com/android/server/autofill/Session.java"},"deprecated":false,"digest":{"length":290,"function_hash":"57289658741123446022184100211094355310"},"id":"ASB-A-326926596-2ffb46cf","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java","function":"SaveUi"},"deprecated":false,"digest":{"function_hash":"150207493351967929142311001508100449928","length":7100},"id":"ASB-A-326926596-561cfc5c"},{"digest":{"length":6687,"function_hash":"304172605651726255145089741382456807706"},"id":"ASB-A-326926596-6a696a4a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java","function":"FillUi"},"deprecated":false},{"target":{"function":"createDatasetItems","file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"deprecated":false,"digest":{"length":1699,"function_hash":"82837857977102568369555572329393044920"},"id":"ASB-A-326926596-6c1062de","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"file":"services/autofill/java/com/android/server/autofill/Session.java","function":"getServiceLabel"},"deprecated":false,"digest":{"length":290,"function_hash":"57289658741123446022184100211094355310"},"id":"ASB-A-326926596-8ce24acc","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"function":"DialogFillUi","file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"deprecated":false,"digest":{"length":1468,"function_hash":"58588869078857813296908308804826833385"},"id":"ASB-A-326926596-91363fc4","signature_type":"Function"},{"digest":{"line_hashes":["147970609522738711682570941621357862514","99688209858480151987959042898705195723","159528535452217599658308375414822941606","226494725607023412914596331337564914285","129231880453292375756121266455606840347","259545855947006792562166870978494910102","211966466024317453947413305491351570506","299955936703988313777666839291065749734","138670454602168716927049345311235552388","259039622594416815211422634790083140238","291601608691826183706509385019023236983","239196817897099031902353265860786865338","39730096403312739749054541694199342419","176563944769267069899858614194414818962","125827276761289425613209756329496419863","239196817897099031902353265860786865338","39730096403312739749054541694199342419","176563944769267069899858614194414818962","252639957790865787812438357176888523414","227529702526648491498747353364192306840","315705055866936701374609147536543227212","224849018509674106895395965745940104149","134008103952047155517677989125449306039"],"threshold":0.9},"id":"ASB-A-326926596-c61fc955","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"deprecated":false},{"id":"ASB-A-326926596-c7920e02","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"file":"services/autofill/java/com/android/server/autofill/Session.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["268352417521028367845542076301610446755","239924179753459631721185019549570366933","98889634726560196287370948075464876438","178289728046244122145941446463267876599","274157703640419043228222739474027404333","66660066677846037961325816338297534785","54076257002702924454182198608258883419","335958806433036555948979627022064975558","41045878133738289792592106977067306250","115113670473088224954500224237874146587","82321371675401198119989668316979288526","214382261250007213528048088883786706276","13312323333809348206037951157692816031","186635348450611877814792078694135061174","274694428001707897135556115432386156432","87982586563280194210829105479109417817"]}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"file":"services/autofill/java/com/android/server/autofill/Helper.java"},"deprecated":false,"digest":{"line_hashes":["195550187764114165661677033491385867525","298497138299562978700772105186371160186","156681404185485594211687436684168302104","60637664312035269760776169815005113432","147819285426515199510027339024730015005","84740748400026015542612593340404469318","240481412043703972796096684412755948793","231346208401394666704078315980602216517","324514966097401313249705843429493881194","5974945123024092751966245155268981445","207635776789743471905519417928232511528"],"threshold":0.9},"id":"ASB-A-326926596-d4e93955"},{"deprecated":false,"digest":{"line_hashes":["233001280945690766024866032804020106263","299280155137900456369389346906834625687","253670570635601349012097703140517091330","6763710524091997994082961324208427908","287455098598448921071329745868061349234","227805279402260074562908927996850584221","30116608954614319447183709923452508562","36371748056050285340289618795231278841","107302515774269940261729695955013239669","260652724757114145761900937580365783588","295348855014700694472100199874250373832","309855511319383992738640197427288476813","257575552362915492264443229615036330102","137364990574650661356629752006353102068","7346143077645295169490143337655292533","271203066595628114305843115488139558909","246313342684578862837160232182440545029","286744740604751949071305350356414253060","79209834993743233989565171484452365304","256992858442147664412152207376856907832","128684448498299491058223853214834730128","91477332951031294087869336262530769873","262407970360489148064772787139793786883","227529702526648491498747353364192306840","315705055866936701374609147536543227212","224849018509674106895395965745940104149","134008103952047155517677989125449306039","208363551722438043749201696435822980457","238878178207896271984965833527827184793","246153676559498975996525891840438850912","319314867881549470635797636500735414577"],"threshold":0.9},"id":"ASB-A-326926596-dbe4ad94","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"file":"services/autofill/java/com/android/server/autofill/ui/FillUi.java"}},{"id":"ASB-A-326926596-dc136aa7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"function":"setHeader","file":"services/autofill/java/com/android/server/autofill/ui/DialogFillUi.java"},"deprecated":false,"digest":{"length":520,"function_hash":"232925101570296434580965003579058750578"}},{"id":"ASB-A-326926596-dd2f4e01","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e","target":{"file":"services/autofill/java/com/android/server/autofill/ui/SaveUi.java"},"deprecated":false,"digest":{"line_hashes":["214829691709375686425688750163675762444","31173660224107888955468676996662291970","75717993223470930286438961849158473008","303972587534416303383394155165688117343","259449713830477777317285782905283199576","117229051275493355373779713481641589010","127284537694877960079216639377672371216","299252079355722630865613843433637167635","264330761225222907849056040899046276371","265301051241449904846147560721618625883","15165947783158235074656931996515737571"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/28c42ccc8c0074a1b7bd20592db936647c4fe97e"],"severity":"High","spl":"2025-12-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-326926596.json"}}],"schema_version":"1.9.0"}