{"id":"ASB-A-339532378","details":"In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app when its result will be used in another due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-339532378","CVE-2025-22422"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/6894ba3da6da99eb0ef63d95bf1b19080d302eda"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/1c0ab9c696d736da0176aa00f7effa31c905430e"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-04-01"}]}],"versions":["15-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"id":"ASB-A-339532378-0ca23f81","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"file":"core/java/android/hardware/biometrics/BiometricPrompt.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["147524687863591423861922620005194013747","129717098065904380555197117562367574281","70004750835757778301920980091817553255","152846493034047750365629007933945317181","255938540774519373564298548378804189397","338253862639500299196452552651344100348","176012018323537988302039330811879880558","1242596820432673028967143689283327608","201343619321101841766687522221679730466"]}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java","function":"showDialog"},"deprecated":false,"digest":{"function_hash":"245954559699050951182250890957648136317","length":1139},"id":"ASB-A-339532378-5245d848","signature_type":"Function"},{"target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"setComponentNameForConfirmDeviceCredentialActivity"},"deprecated":false,"digest":{"function_hash":"195411247792697651424532565076924804056","length":93},"id":"ASB-A-339532378-8a082987","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a"},{"digest":{"function_hash":"13904012027498894187306748820950093878","length":553},"id":"ASB-A-339532378-919641ca","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"requiresTestOrInternalPermission"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"288084473829641679178032811301672155523","length":1184},"id":"ASB-A-339532378-b23f0eec","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"function":"writeToParcel","file":"core/java/android/hardware/biometrics/PromptInfo.java"}},{"id":"ASB-A-339532378-b25c2e6f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"PromptInfo"},"deprecated":false,"digest":{"function_hash":"19078332798046447110024432940186933275","length":1354}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthDialog.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["290535239967467526603137661615007752113","109450674435909472747484583062378561976","241616152355243219581591729139710726333"]},"id":"ASB-A-339532378-b93b4588","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":432,"function_hash":"86044742168334812259802620092759685839"},"id":"ASB-A-339532378-c2a062b2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"function":"isOwnerInForeground","file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"},"deprecated":false,"digest":{"line_hashes":["316311015427826778719982258594003142330","133864529660473628889742949013090395892","37699664208387374915680514025861861855","151655086691316995508620417133598215816","156694698987190921518319855981704290494","245914788490924213560283229459746195602","104498270064595982798320666225101665827","220887503484546862631496172120613316524","290192701949436906578758583449481851247","212319758465115133031471361209683593170","214675721499318226784492026720204328414","125128485432806176609092071262063184050","58137926508154035730692163050047828546","332961553840748061123660452161036351163","77494783855601800331377093751813872644","217424702709995653088635649838471939599","133217066758006622360518135838689564972","334382811407362780498116825916871408711","194377974981534961941992076506883065261","86503847032900825209425584387209433826","111488451954294407563748023901873414531","335391923332883398951730313256478179123","201813785989310512801353197422550506197","63023319149774050960125992398873200987","11805384366078932325418201622514784026","115842048727584634593751743252466340513","251053517511890515296468331944283045870","287023520256470428597995457945978503246","101590940874997532139658864975872838953","13830212213712721019581501139321924457"],"threshold":0.9},"id":"ASB-A-339532378-c49f6f39"},{"deprecated":false,"digest":{"line_hashes":["16662786884986172260223512343573528503","274772761522730508170974348833543986299","299250539738131039706114761420279183020","338790881762184786049398786361906386377"],"threshold":0.9},"id":"ASB-A-339532378-c6e0a045","match_only_versions":["15-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthContainerView.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"function":"getComponentNameForConfirmDeviceCredentialActivity","file":"core/java/android/hardware/biometrics/PromptInfo.java"},"deprecated":false,"digest":{"function_hash":"6427437045314555225829918202276146073","length":80},"id":"ASB-A-339532378-ccf9fbf9","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java"},"deprecated":false,"digest":{"line_hashes":["222924909509013212835050932226557986100","208916627078376937546345104880424168025","299577835027255713402126757933543294251","157312373158062774163059650961836007359","329593554991212412795905335115393731773","332725066694203328530166883229714958562","258435618432651398915549922202168835096","248918820765574023428562923487448198497","305340877544667162244334040258735940391","22617651305319426365638487206419784796","251076949345097345251058025876362688459","102540731048216888119899351810585018630","211993579811139969872449087056258217980","277089988998836419090633768205873876675","149025025776701368583706014326526650950","232275030296092908372760384016006184914","158623659816499154777817322460609029624","69658368272428251356443407712894207842","221189465342037177644194872937957266308","178650326624068723093558305872807750458","122533371312212313367933086901346573498","14025642072627712653215384816076613042","218394827291614770195376707958786151202","76562639222370279930309799955447161393","241802247516934137462663028990520826016","336211199805398680138517052783006547502","218813463849730091179659024979976993858","106969368589754888030543267806415690882","240338846547172055453850010821441037852","194575927154464620674526175965203625390","249684969087808776376571297518807822135"],"threshold":0.9},"id":"ASB-A-339532378-e651145c"},{"target":{"function":"onTaskStackChanged","file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"},"deprecated":false,"digest":{"function_hash":"21877760011467056614181048846313007366","length":130},"id":"ASB-A-339532378-f79a63f0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/58d536c5733173c09f8d6e531d6230f838f64d1a"],"severity":"High","spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-339532378.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-04-01"}]}],"versions":["15-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b"],"severity":"High","spl":"2025-04-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b","target":{"function":"newInstance","file":"src/com/android/settings/password/BiometricFragment.java"},"deprecated":false,"digest":{"length":243,"function_hash":"286972445545211193216944745402914106210"},"id":"ASB-A-339532378-02865189","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java","function":"showBiometricPrompt"},"deprecated":false,"digest":{"length":501,"function_hash":"34280703308763505191806470357934144046"},"id":"ASB-A-339532378-0e4521d3","signature_type":"Function"},{"digest":{"line_hashes":["47896703651626902280454828186725763590","76951462188717936231112119743495001960","146980190423460343504454688995850973586","217120689376946272442527366733014902094","108300493962106550220579955627621656876","264389530625051813191338583849141879594","285552957212872370043373959155655975041","223871996873881961004049797476705851749","236705234711453985753506979548508008547"],"threshold":0.9},"id":"ASB-A-339532378-700d699f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"},"deprecated":false},{"target":{"file":"src/com/android/settings/password/BiometricFragment.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["56988542565923540515914897084734512774","164846179071923827401094453685094762917","179955053679579069299974725795334734634","322260419061621698436959810053598226416","163553327305414945030288886807184878100","184883397740477747956350854255074783553","124077981393171571566514473705272383164","210415068751340283068454131226223629073","204749693022796054471025409707093368752","81541343748215523742704135083720244609","139514941006614628967395269506426915023","187200411898395697500297824831097028510","317323666951130949930280543479820766357","134525654446312110976835024735458442145","176478373937549012871006515070275527118","210433110614817564307635795460850770534","112055256766023614693534153747943585845","100957411046816443800063922629167705562","264576205214898118841964229134055671388","332413159547934220780295584287591007174","28925555746665208944602864136059594445","94437728117359607748560507575907497998","93632341938445720643359694560875080849","250600632479834967574243475818626213839","145061204329957628425044469503897754178"]},"id":"ASB-A-339532378-cb3cb52a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b"},{"digest":{"function_hash":"233030647194746958109691740783133398235","length":1360},"id":"ASB-A-339532378-dc6b84dc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b","target":{"file":"src/com/android/settings/password/BiometricFragment.java","function":"onCreate"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/3d357eedb80fd93d6ae2e1c41a20c40fe0c1670b","target":{"function":"onCreate","file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"},"deprecated":false,"digest":{"function_hash":"93189397042202878851090165398963299855","length":5593},"id":"ASB-A-339532378-de627db6"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-339532378.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-04-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java","function":"onTaskStackChanged"},"deprecated":false,"digest":{"function_hash":"21877760011467056614181048846313007366","length":130},"id":"ASB-A-339532378-2993081e"},{"deprecated":false,"digest":{"line_hashes":["147524687863591423861922620005194013747","129717098065904380555197117562367574281","70004750835757778301920980091817553255","152846493034047750365629007933945317181","255938540774519373564298548378804189397","338253862639500299196452552651344100348","176012018323537988302039330811879880558","1242596820432673028967143689283327608","201343619321101841766687522221679730466"],"threshold":0.9},"id":"ASB-A-339532378-3656e34b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"file":"core/java/android/hardware/biometrics/BiometricPrompt.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"function":"showDialog","file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"},"deprecated":false,"digest":{"length":1139,"function_hash":"245954559699050951182250890957648136317"},"id":"ASB-A-339532378-3bde0140","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":1354,"function_hash":"19078332798046447110024432940186933275"},"id":"ASB-A-339532378-3d580185","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"PromptInfo"}},{"id":"ASB-A-339532378-523894a0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"getComponentNameForConfirmDeviceCredentialActivity"},"deprecated":false,"digest":{"function_hash":"6427437045314555225829918202276146073","length":80}},{"deprecated":false,"digest":{"line_hashes":["16662786884986172260223512343573528503","274772761522730508170974348833543986299","299250539738131039706114761420279183020","338790881762184786049398786361906386377"],"threshold":0.9},"id":"ASB-A-339532378-7794e41b","match_only_versions":["15"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthContainerView.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"function":"isOwnerInForeground","file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"},"deprecated":false,"digest":{"function_hash":"86044742168334812259802620092759685839","length":432},"id":"ASB-A-339532378-9d2bb82d","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-339532378-abc85e8f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthDialog.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["290535239967467526603137661615007752113","109450674435909472747484583062378561976","241616152355243219581591729139710726333"]}},{"deprecated":false,"digest":{"function_hash":"288084473829641679178032811301672155523","length":1184},"id":"ASB-A-339532378-adc4d686","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"function":"writeToParcel","file":"core/java/android/hardware/biometrics/PromptInfo.java"}},{"target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"requiresTestOrInternalPermission"},"deprecated":false,"digest":{"length":553,"function_hash":"13904012027498894187306748820950093878"},"id":"ASB-A-339532378-c8fcecbf","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d"},{"digest":{"function_hash":"195411247792697651424532565076924804056","length":93},"id":"ASB-A-339532378-c9a56dd1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"setComponentNameForConfirmDeviceCredentialActivity"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"},"deprecated":false,"digest":{"line_hashes":["316311015427826778719982258594003142330","133864529660473628889742949013090395892","37699664208387374915680514025861861855","151655086691316995508620417133598215816","156694698987190921518319855981704290494","245914788490924213560283229459746195602","104498270064595982798320666225101665827","220887503484546862631496172120613316524","290192701949436906578758583449481851247","212319758465115133031471361209683593170","214675721499318226784492026720204328414","125128485432806176609092071262063184050","58137926508154035730692163050047828546","332961553840748061123660452161036351163","77494783855601800331377093751813872644","217424702709995653088635649838471939599","133217066758006622360518135838689564972","334382811407362780498116825916871408711","194377974981534961941992076506883065261","86503847032900825209425584387209433826","111488451954294407563748023901873414531","335391923332883398951730313256478179123","201813785989310512801353197422550506197","63023319149774050960125992398873200987","11805384366078932325418201622514784026","115842048727584634593751743252466340513","251053517511890515296468331944283045870","287023520256470428597995457945978503246","101590940874997532139658864975872838953","13830212213712721019581501139321924457"],"threshold":0.9},"id":"ASB-A-339532378-ca7a3327","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java"},"deprecated":false,"digest":{"line_hashes":["222924909509013212835050932226557986100","208916627078376937546345104880424168025","299577835027255713402126757933543294251","157312373158062774163059650961836007359","329593554991212412795905335115393731773","332725066694203328530166883229714958562","258435618432651398915549922202168835096","248918820765574023428562923487448198497","305340877544667162244334040258735940391","22617651305319426365638487206419784796","251076949345097345251058025876362688459","102540731048216888119899351810585018630","211993579811139969872449087056258217980","277089988998836419090633768205873876675","149025025776701368583706014326526650950","232275030296092908372760384016006184914","158623659816499154777817322460609029624","69658368272428251356443407712894207842","221189465342037177644194872937957266308","178650326624068723093558305872807750458","122533371312212313367933086901346573498","14025642072627712653215384816076613042","218394827291614770195376707958786151202","76562639222370279930309799955447161393","241802247516934137462663028990520826016","336211199805398680138517052783006547502","218813463849730091179659024979976993858","106969368589754888030543267806415690882","240338846547172055453850010821441037852","194575927154464620674526175965203625390","249684969087808776376571297518807822135"],"threshold":0.9},"id":"ASB-A-339532378-cfcc40a1","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/688505ff3625461d913cd2b3131db9d129d8c44d"],"severity":"High","spl":"2025-04-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-339532378.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-04-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2025-04-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6","target":{"file":"src/com/android/settings/password/BiometricFragment.java","function":"newInstance"},"deprecated":false,"digest":{"function_hash":"286972445545211193216944745402914106210","length":243},"id":"ASB-A-339532378-64df166a","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"34280703308763505191806470357934144046","length":501},"id":"ASB-A-339532378-82243efe","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java","function":"showBiometricPrompt"},"deprecated":false},{"target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java","function":"onCreate"},"deprecated":false,"digest":{"length":5005,"function_hash":"100832819719226973578256693487517424724"},"id":"ASB-A-339532378-af40529a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6"},{"deprecated":false,"digest":{"function_hash":"89224342493305428609415072870634162783","length":1081},"id":"ASB-A-339532378-d661660e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6","target":{"file":"src/com/android/settings/password/BiometricFragment.java","function":"onCreate"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["198369131591339542045373684347121390788","307572215994453746162440241287011883704","69182617143756243845685334135162987521","55876357189725406582876460185454081901","108300493962106550220579955627621656876","264389530625051813191338583849141879594","285552957212872370043373959155655975041","223871996873881961004049797476705851749","236705234711453985753506979548508008547"]},"id":"ASB-A-339532378-d75d19ec"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6","target":{"file":"src/com/android/settings/password/BiometricFragment.java"},"deprecated":false,"digest":{"line_hashes":["318747212200144329004783896385561316959","245841845836205544216805477549570646626","339667131492855703348062891804222649644","163553327305414945030288886807184878100","184883397740477747956350854255074783553","124077981393171571566514473705272383164","210415068751340283068454131226223629073","204749693022796054471025409707093368752","81541343748215523742704135083720244609","139514941006614628967395269506426915023","187200411898395697500297824831097028510","317323666951130949930280543479820766357","134525654446312110976835024735458442145","176478373937549012871006515070275527118","210433110614817564307635795460850770534","112055256766023614693534153747943585845","100957411046816443800063922629167705562","264576205214898118841964229134055671388","332413159547934220780295584287591007174","28925555746665208944602864136059594445","94437728117359607748560507575907497998","93632341938445720643359694560875080849","250600632479834967574243475818626213839","145061204329957628425044469503897754178"],"threshold":0.9},"id":"ASB-A-339532378-e9c0021f","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f9186b35eee220a91009b4cb68722635760c1bd6"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-339532378.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-04-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"},"deprecated":false,"digest":{"line_hashes":["151655086691316995508620417133598215816","214554262846968823091188291967199510467","99753109436074398241992036822562477508","186190212679313701681360984908886291114","101170234680119821372575195085923365826","331219661011553895241033622962588257496","3383791976666833696659681581511082272","266628596824009534373758835882198914077","318739438652346065297108729860240180033","77494783855601800331377093751813872644","217424702709995653088635649838471939599","133217066758006622360518135838689564972","43137734371876995664430352286284736290","225100895119041388448998527209270397070","76106207254534043230906710267073662223","235141809665264812933110224013090870869","84303894234717418342334306945881313179","123925302090746379191782544807942091133","91213881280923453870718650965284150595","301134061245308633049097412457116977372","197118572857864153512696185094087675140","335626042333370389415744578182381781813","338882751503882601984815235756026123525","194115050831467786788159664471235411773","160298002427688306154063412079010706450","52538635504512433591189127964390514154","126977496652054893345739791138541493832","128797082458499271042020098054893634524","136780456979842963386861962177147895762","264752505981536528125529507969505299293","319966246098604444678556003215846270865"],"threshold":0.9},"id":"ASB-A-339532378-1197b7c3"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"writeToParcel"},"deprecated":false,"digest":{"function_hash":"188396603861998329266429728440816824131","length":806},"id":"ASB-A-339532378-3799b0e0","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"42683110230021379418225731688281990055","length":889},"id":"ASB-A-339532378-3d56a9f1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java","function":"cancelIfOwnerIsNotInForeground"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthContainerView.java"},"deprecated":false,"digest":{"line_hashes":["99952568197426683895513375891900519909","327234016139211573395444186728615979976","270247477998253403659025402417571585337","174063682829384946834135850089760831646"],"threshold":0.9},"id":"ASB-A-339532378-51db1e35","signature_type":"Line","signature_version":"v1"},{"target":{"function":"containsTestConfigurations","file":"core/java/android/hardware/biometrics/PromptInfo.java"},"deprecated":false,"digest":{"length":297,"function_hash":"131578668132683230273746664848470654555"},"id":"ASB-A-339532378-cec5319c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"PromptInfo"},"deprecated":false,"digest":{"function_hash":"114225774273086015072046385152476897817","length":865},"id":"ASB-A-339532378-d2e5f806","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-339532378-d787b7c7","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthDialog.java"},"deprecated":false,"digest":{"line_hashes":["338656732825934877055475492724120360336","192410361246774981455434104661848987491","42359730159251206005622082559908228064"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["105680887194346282139859111058495707036","250277604085277924011006325358446045306","27792544708540002708726217948030487324","161091977118680808893535967302273068839","70160788166047168563267359521483303445","6546532027749504274936064849223516473","206571713650256929238863346510451547486","174749931805183932442961591909491213863","277786617964644221620821911974842864912","254364686248422333544914277479723179324","77108622976583689751097107161407079668","197153245619284721500561688051899796889","327095106668220280744725072383304971162","317397726980051898591119561428435673276","84410722318159773695612981727837265965","119258988697698457769296765622298402469","128514843377418579975774493366193377166","4281137349180116964713745818331651284","4279922823913944971200936009911777961","155494328573959842728559453571940542973","97860610033155345596026926749486984090"],"threshold":0.9},"id":"ASB-A-339532378-ea0c0f76","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/231bda45217f271753891c6256a08a8ea17e5993"],"severity":"High","spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-339532378.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-04-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"length":555,"function_hash":"106223732028557127186590958248574394284"},"id":"ASB-A-339532378-9245628d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2b7c1f1105aaf72059f99d557b383532ff4596cd","target":{"file":"src/com/android/settings/password/BiometricFragment.java","function":"onCreate"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2b7c1f1105aaf72059f99d557b383532ff4596cd","target":{"file":"src/com/android/settings/password/BiometricFragment.java"},"deprecated":false,"digest":{"line_hashes":["68854127986283626443970362776639542279","262970330495673307332161988500030610488","168025285441996511492692748716502038914","107320227676802385996018539044776897322"],"threshold":0.9},"id":"ASB-A-339532378-c6f3d448"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/2b7c1f1105aaf72059f99d557b383532ff4596cd"],"severity":"High","spl":"2025-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-339532378.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-04-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2025-04-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"length":910,"function_hash":"292893181079758970551702204541270770956"},"id":"ASB-A-339532378-524639ee","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"PromptInfo"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthDialog.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["338656732825934877055475492724120360336","192410361246774981455434104661848987491","42359730159251206005622082559908228064"]},"id":"ASB-A-339532378-7263d7fc","signature_type":"Line"},{"digest":{"line_hashes":["105680887194346282139859111058495707036","250277604085277924011006325358446045306","27792544708540002708726217948030487324","161091977118680808893535967302273068839","70160788166047168563267359521483303445","6546532027749504274936064849223516473","206571713650256929238863346510451547486","174749931805183932442961591909491213863","277786617964644221620821911974842864912","254364686248422333544914277479723179324","77108622976583689751097107161407079668","197153245619284721500561688051899796889","327095106668220280744725072383304971162","317397726980051898591119561428435673276","84410722318159773695612981727837265965","119258988697698457769296765622298402469","128514843377418579975774493366193377166","4281137349180116964713745818331651284","4279922823913944971200936009911777961","155494328573959842728559453571940542973","97860610033155345596026926749486984090"],"threshold":0.9},"id":"ASB-A-339532378-9a800fb3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49","target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49","target":{"function":"cancelIfOwnerIsNotInForeground","file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"},"deprecated":false,"digest":{"function_hash":"138875293812050197306092834877387654493","length":851},"id":"ASB-A-339532378-a5f7be5f","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-339532378-b11026d9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthController.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["151655086691316995508620417133598215816","214554262846968823091188291967199510467","99753109436074398241992036822562477508","186190212679313701681360984908886291114","101170234680119821372575195085923365826","331219661011553895241033622962588257496","3383791976666833696659681581511082272","266628596824009534373758835882198914077","318739438652346065297108729860240180033","77494783855601800331377093751813872644","217424702709995653088635649838471939599","133217066758006622360518135838689564972","43137734371876995664430352286284736290","225100895119041388448998527209270397070","76106207254534043230906710267073662223","187366144862844467939360963966300558581","100006906141960008986133305599696486437","277194629422743246563619636886562855213","301134061245308633049097412457116977372","197118572857864153512696185094087675140","335626042333370389415744578182381781813","338882751503882601984815235756026123525","194115050831467786788159664471235411773","160298002427688306154063412079010706450","52538635504512433591189127964390514154","126977496652054893345739791138541493832","128797082458499271042020098054893634524","136780456979842963386861962177147895762","264752505981536528125529507969505299293","319966246098604444678556003215846270865"]}},{"deprecated":false,"digest":{"line_hashes":["99952568197426683895513375891900519909","327234016139211573395444186728615979976","22723860002200732846646679053766311331","340273357918616030196744118102784183854"],"threshold":0.9},"id":"ASB-A-339532378-d1d326c5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49","target":{"file":"packages/SystemUI/src/com/android/systemui/biometrics/AuthContainerView.java"}},{"deprecated":false,"digest":{"function_hash":"131578668132683230273746664848470654555","length":297},"id":"ASB-A-339532378-d26ab3e3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49","target":{"function":"containsTestConfigurations","file":"core/java/android/hardware/biometrics/PromptInfo.java"}},{"target":{"file":"core/java/android/hardware/biometrics/PromptInfo.java","function":"writeToParcel"},"deprecated":false,"digest":{"function_hash":"243147314190487979913948875168508033502","length":849},"id":"ASB-A-339532378-db3fa934","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0d67fca4ce091b93603b2c6e3ea5b98e8c0a3c49"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-339532378.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-04-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/63eda7f3a99520942643d49dcba765e70822db32"],"severity":"High","spl":"2025-04-01","types":["EoP"],"vanir_signatures":[{"digest":{"function_hash":"227584263058238575979254328616186261797","length":590},"id":"ASB-A-339532378-018a290e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/63eda7f3a99520942643d49dcba765e70822db32","target":{"function":"onCreate","file":"src/com/android/settings/password/BiometricFragment.java"},"deprecated":false},{"digest":{"line_hashes":["318546260623609815622346615481868170989","315032446197486206925587542903672937237","155247878120208066938704025778175636357","267923841323472490486957773897003953134"],"threshold":0.9},"id":"ASB-A-339532378-336cb361","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/63eda7f3a99520942643d49dcba765e70822db32","target":{"file":"src/com/android/settings/password/BiometricFragment.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-339532378.json"}}],"schema_version":"1.9.0"}