{"id":"ASB-A-340480881","details":"In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-340480881","CVE-2024-43095"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Permission/+/ea7b26fe98c142d0a87d61c3a1c82335ea29c6d2"}],"affected":[{"package":{"name":"platform/packages/modules/Permission","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-01-01"}]}],"versions":["15-next"],"ecosystem_specific":{"spl":"2025-01-01","types":["EoP"],"vanir_signatures":[{"match_only_versions":["15-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Permission/+/46abb4e1fd365a88efdfe3f2b1f87da4d255b41b","target":{"file":"PermissionController/src/com/android/permissioncontroller/permission/utils/SafetyNetLogger.java"},"deprecated":false,"digest":{"line_hashes":["259962140351988930054488859607270289429","34485054331938225524340970259094432032","236453479590493319390251154950242347972","334852091210630587248185033358495230145"],"threshold":0.9},"id":"ASB-A-340480881-7bbe63dd"},{"id":"ASB-A-340480881-d7a46498","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Permission/+/46abb4e1fd365a88efdfe3f2b1f87da4d255b41b","target":{"file":"PermissionController/src/com/android/permissioncontroller/permission/ui/handheld/ReviewPermissionsFragment.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["309210055386791724508798064020443375701","76297417241953971349473152942420791120","32424068908752210583928908098415548096","190082113443108366700365308189806546719","164801660500259555085004869897945552185","22257253614608400341120835946906982351","84133947884435720570489621599358657566","25328240408979178066630196199757707142"]}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Permission/+/46abb4e1fd365a88efdfe3f2b1f87da4d255b41b"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-340480881.json"}},{"package":{"name":"platform/packages/modules/Permission","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-01-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"fixes":["https://android.googlesource.com/platform/packages/modules/Permission/+/6843ffaa44ed01868c9b67bfc1c13bac4c2bd71a"],"severity":"High","spl":"2025-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-340480881.json"}},{"package":{"name":"platform/packages/modules/Permission","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-01-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Permission/+/2bf7a6ef16585b120dfeee6e4f701be62525ee12"],"severity":"High","spl":"2025-01-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-340480881.json"}},{"package":{"name":"platform/packages/modules/Permission","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-01-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Permission/+/111cac570a0f596cdca1b1d512dfbef17751e1a5"],"severity":"High","spl":"2025-01-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-340480881.json"}},{"package":{"name":"platform/packages/modules/Permission","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-01-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["309210055386791724508798064020443375701","201534202829582251158760473503637969511","311663495964368043091592960826039410387","197746044962682403595156662193900869618","241014318001215970451323854968838978145","22257253614608400341120835946906982351","84133947884435720570489621599358657566","25328240408979178066630196199757707142"]},"id":"ASB-A-340480881-14e99405","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Permission/+/06e7a4b6dced97632ef42670539d71cb6c68785a","target":{"file":"PermissionController/src/com/android/permissioncontroller/permission/ui/handheld/ReviewPermissionsFragment.java"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Permission/+/06e7a4b6dced97632ef42670539d71cb6c68785a"],"severity":"High","spl":"2025-01-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-340480881.json"}},{"package":{"name":"platform/packages/modules/Permission","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-01-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2025-01-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["309210055386791724508798064020443375701","201534202829582251158760473503637969511","311663495964368043091592960826039410387","197746044962682403595156662193900869618","241014318001215970451323854968838978145","22257253614608400341120835946906982351","84133947884435720570489621599358657566","25328240408979178066630196199757707142"],"threshold":0.9},"id":"ASB-A-340480881-55e8170a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Permission/+/89aedebdb811ada35a283455a1779026fd84772e","target":{"file":"PermissionController/src/com/android/permissioncontroller/permission/ui/handheld/ReviewPermissionsFragment.java"},"deprecated":false},{"match_only_versions":["14"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Permission/+/89aedebdb811ada35a283455a1779026fd84772e","target":{"file":"PermissionController/src/com/android/permissioncontroller/permission/utils/SafetyNetLogger.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["259962140351988930054488859607270289429","34485054331938225524340970259094432032","236453479590493319390251154950242347972","334852091210630587248185033358495230145"]},"id":"ASB-A-340480881-933a897c"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Permission/+/89aedebdb811ada35a283455a1779026fd84772e"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-340480881.json"}}],"schema_version":"1.9.0"}