{"id":"ASB-A-366403307","details":"In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-366403307","CVE-2025-0076"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/d6ad7f34eaf5f0452b93a650265ee432288c0978"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-09-01"}]}],"versions":["16-next"],"ecosystem_specific":{"spl":"2025-09-01","types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"deprecated":false,"digest":{"function_hash":"339010641319676284596917724000588051500","length":807},"id":"ASB-A-366403307-2b7f6a59"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["48271866020983402741317697191927262300","324720192200432593218778911273366139928","184274619356808351882945330993179679587","127201025683753278655545441715991278217","300253045995943859909040907196640039614","280832611599851557092847522639492618499","196290242042722160805466346397507596848","59779386922115477265695659846766275892","30596101698174053649423894352670996017","247701998955975149565204374510801855559","236258009288467572065414099264846251508"]},"id":"ASB-A-366403307-441527f8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"}},{"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"deprecated":false,"digest":{"line_hashes":["272154888241610003550890006148090413574","50331742103249212278432064195301275261","289129983721657027228421220049785405861","278508063703508476458772447971251926863","280695784732386592284871366412088916160","200929768696889264497157033762169044294","327143209346939640461697995229268842021","204951814737961851763192749677397359606","200405687505325832570341213920229487292","95126765697886247521411308199037378046"],"threshold":0.9},"id":"ASB-A-366403307-4fb2c7cb","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0"},{"deprecated":false,"digest":{"length":358,"function_hash":"153100650039487584088342375961007218414"},"id":"ASB-A-366403307-784de01b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"deprecated":false,"digest":{"line_hashes":["243125708234673827407269344508843347613","87324363108848266469144704522745173467","167811477205477820653194076682414448279","175257578454813697542332648837395173089","102505483718210097181282553982684333128","256324903959662513127810403439769396165","242218992384684158717428879574442610957","194747599152889748736500518830054257496","174280928911208833448572281684795544279","336450232233143877711590438963096457488","315500201450994050792319752153633098851","62820081207557501096082406881310321388","188362098062400418708726085127252472985"],"threshold":0.9},"id":"ASB-A-366403307-962a9efd","match_only_versions":["16-next"],"signature_type":"Line"},{"id":"ASB-A-366403307-b071614d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0","target":{"function":"onWalletCardsRetrieved","file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"deprecated":false,"digest":{"function_hash":"56916847383708864714240830285584848399","length":1061}},{"digest":{"line_hashes":["140596199919787614286830620172402916923","35323485728177646444664352266437140545","83699810367459881137262713309360686329"],"threshold":0.9},"id":"ASB-A-366403307-d0d6b7d3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b","https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-09-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094"],"severity":"High","spl":"2025-09-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-366403307-246069a5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"deprecated":false,"digest":{"length":358,"function_hash":"153100650039487584088342375961007218414"}},{"deprecated":false,"digest":{"line_hashes":["272154888241610003550890006148090413574","50331742103249212278432064195301275261","289129983721657027228421220049785405861","278508063703508476458772447971251926863","280695784732386592284871366412088916160","200929768696889264497157033762169044294","327143209346939640461697995229268842021","204951814737961851763192749677397359606","200405687505325832570341213920229487292","95126765697886247521411308199037378046"],"threshold":0.9},"id":"ASB-A-366403307-26238203","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"}},{"digest":{"line_hashes":["243125708234673827407269344508843347613","87324363108848266469144704522745173467","167811477205477820653194076682414448279","175257578454813697542332648837395173089","102505483718210097181282553982684333128","256324903959662513127810403439769396165","242218992384684158717428879574442610957","194747599152889748736500518830054257496","174280928911208833448572281684795544279","336450232233143877711590438963096457488","315500201450994050792319752153633098851","62820081207557501096082406881310321388","188362098062400418708726085127252472985"],"threshold":0.9},"id":"ASB-A-366403307-32c98e58","match_only_versions":["15"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"56916847383708864714240830285584848399","length":1061},"id":"ASB-A-366403307-9c51dd01","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094","target":{"function":"onWalletCardsRetrieved","file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"}},{"id":"ASB-A-366403307-fae48385","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["140596199919787614286830620172402916923","35323485728177646444664352266437140545","83699810367459881137262713309360686329"]}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-09-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2025-09-01","types":["ID"],"vanir_signatures":[{"target":{"function":"onWalletCardsRetrieved","file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"deprecated":false,"digest":{"length":794,"function_hash":"214865920675456868833784104343276876229"},"id":"ASB-A-366403307-20734e2b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"deprecated":false,"digest":{"line_hashes":["272154888241610003550890006148090413574","50331742103249212278432064195301275261","289129983721657027228421220049785405861","278508063703508476458772447971251926863","280695784732386592284871366412088916160","200929768696889264497157033762169044294","327143209346939640461697995229268842021","204951814737961851763192749677397359606","200405687505325832570341213920229487292","95126765697886247521411308199037378046"],"threshold":0.9},"id":"ASB-A-366403307-208c1fe5","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["140596199919787614286830620172402916923","35323485728177646444664352266437140545","83699810367459881137262713309360686329"]},"id":"ASB-A-366403307-8cd24e0c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["48271866020983402741317697191927262300","258154477222024538161942687079640623010","293474134540468567119316859037077150681","127201025683753278655545441715991278217","300253045995943859909040907196640039614","280832611599851557092847522639492618499","196290242042722160805466346397507596848","59779386922115477265695659846766275892","30596101698174053649423894352670996017","247701998955975149565204374510801855559","236258009288467572065414099264846251508"]},"id":"ASB-A-366403307-c97fc6bf","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"deprecated":false,"digest":{"function_hash":"153100650039487584088342375961007218414","length":358},"id":"ASB-A-366403307-e97b5aff","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68","https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-09-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2025-09-01","types":["ID"],"vanir_signatures":[{"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"deprecated":false,"digest":{"function_hash":"214865920675456868833784104343276876229","length":794},"id":"ASB-A-366403307-55b721f2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211"},{"deprecated":false,"digest":{"line_hashes":["272154888241610003550890006148090413574","50331742103249212278432064195301275261","289129983721657027228421220049785405861","278508063703508476458772447971251926863","280695784732386592284871366412088916160","200929768696889264497157033762169044294","327143209346939640461697995229268842021","204951814737961851763192749677397359606","200405687505325832570341213920229487292","95126765697886247521411308199037378046"],"threshold":0.9},"id":"ASB-A-366403307-8d8979e8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"},"deprecated":false,"digest":{"line_hashes":["140596199919787614286830620172402916923","35323485728177646444664352266437140545","83699810367459881137262713309360686329"],"threshold":0.9},"id":"ASB-A-366403307-9a81a609","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394","target":{"function":"QAWalletCardViewInfo","file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"deprecated":false,"digest":{"length":358,"function_hash":"153100650039487584088342375961007218414"},"id":"ASB-A-366403307-b5f2f687","signature_type":"Function"},{"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"deprecated":false,"digest":{"line_hashes":["48271866020983402741317697191927262300","258154477222024538161942687079640623010","293474134540468567119316859037077150681","127201025683753278655545441715991278217","300253045995943859909040907196640039614","280832611599851557092847522639492618499","196290242042722160805466346397507596848","59779386922115477265695659846766275892","30596101698174053649423894352670996017","247701998955975149565204374510801855559","236258009288467572065414099264846251508"],"threshold":0.9},"id":"ASB-A-366403307-e25de802","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394","https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"}}],"schema_version":"1.9.0"}