{"id":"ASB-A-366403307","details":"In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-366403307","CVE-2025-0076"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2025-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/d6ad7f34eaf5f0452b93a650265ee432288c0978"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-09-01"}]}],"versions":["16-next"],"ecosystem_specific":{"spl":"2025-09-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0","https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b"],"types":["ID"],"severity":"High","vanir_signatures":[{"deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"signature_version":"v1","id":"ASB-A-366403307-2b7f6a59","source":"https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b","digest":{"length":807,"function_hash":"339010641319676284596917724000588051500"},"signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["48271866020983402741317697191927262300","324720192200432593218778911273366139928","184274619356808351882945330993179679587","127201025683753278655545441715991278217","300253045995943859909040907196640039614","280832611599851557092847522639492618499","196290242042722160805466346397507596848","59779386922115477265695659846766275892","30596101698174053649423894352670996017","247701998955975149565204374510801855559","236258009288467572065414099264846251508"]},"deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"id":"ASB-A-366403307-441527f8","source":"https://android.googlesource.com/platform/frameworks/base/+/b24d52e9e610dd0cd3e8e81c2286fd37d0abe98b","signature_version":"v1","signature_type":"Line"},{"id":"ASB-A-366403307-4fb2c7cb","digest":{"threshold":0.9,"line_hashes":["272154888241610003550890006148090413574","50331742103249212278432064195301275261","289129983721657027228421220049785405861","278508063703508476458772447971251926863","280695784732386592284871366412088916160","200929768696889264497157033762169044294","327143209346939640461697995229268842021","204951814737961851763192749677397359606","200405687505325832570341213920229487292","95126765697886247521411308199037378046"]},"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0","signature_version":"v1","signature_type":"Line"},{"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"signature_version":"v1","id":"ASB-A-366403307-784de01b","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0","digest":{"length":358,"function_hash":"153100650039487584088342375961007218414"},"signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["140596199919787614286830620172402916923","35323485728177646444664352266437140545","83699810367459881137262713309360686329"]},"signature_version":"v1","id":"ASB-A-366403307-d0d6b7d3","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/eb5a9b8a829dace87d592c0d1c0b29f2dfc49fc0","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"},"signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-09-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2025-09-01","types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094"],"severity":"High","vanir_signatures":[{"signature_version":"v1","id":"ASB-A-366403307-246069a5","digest":{"length":358,"function_hash":"153100650039487584088342375961007218414"},"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["272154888241610003550890006148090413574","50331742103249212278432064195301275261","289129983721657027228421220049785405861","278508063703508476458772447971251926863","280695784732386592284871366412088916160","200929768696889264497157033762169044294","327143209346939640461697995229268842021","204951814737961851763192749677397359606","200405687505325832570341213920229487292","95126765697886247521411308199037378046"]},"deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"id":"ASB-A-366403307-26238203","source":"https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094","signature_version":"v1","signature_type":"Line"},{"id":"ASB-A-366403307-32c98e58","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"match_only_versions":["15"],"digest":{"threshold":0.9,"line_hashes":["243125708234673827407269344508843347613","87324363108848266469144704522745173467","167811477205477820653194076682414448279","175257578454813697542332648837395173089","102505483718210097181282553982684333128","256324903959662513127810403439769396165","242218992384684158717428879574442610957","194747599152889748736500518830054257496","174280928911208833448572281684795544279","336450232233143877711590438963096457488","315500201450994050792319752153633098851","62820081207557501096082406881310321388","188362098062400418708726085127252472985"]},"signature_version":"v1","signature_type":"Line"},{"id":"ASB-A-366403307-9c51dd01","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094","target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"match_only_versions":["15"],"digest":{"length":1061,"function_hash":"56916847383708864714240830285584848399"},"signature_version":"v1","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["140596199919787614286830620172402916923","35323485728177646444664352266437140545","83699810367459881137262713309360686329"]},"signature_version":"v1","id":"ASB-A-366403307-fae48385","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/398d07d391470c7d09399b64081bee6bc5f26094","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"},"signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-09-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2025-09-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68","https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8"],"types":["ID"],"severity":"High","vanir_signatures":[{"deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"signature_version":"v1","id":"ASB-A-366403307-20734e2b","source":"https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8","digest":{"length":794,"function_hash":"214865920675456868833784104343276876229"},"signature_type":"Function"},{"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"signature_version":"v1","id":"ASB-A-366403307-208c1fe5","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68","digest":{"threshold":0.9,"line_hashes":["272154888241610003550890006148090413574","50331742103249212278432064195301275261","289129983721657027228421220049785405861","278508063703508476458772447971251926863","280695784732386592284871366412088916160","200929768696889264497157033762169044294","327143209346939640461697995229268842021","204951814737961851763192749677397359606","200405687505325832570341213920229487292","95126765697886247521411308199037378046"]},"signature_type":"Line"},{"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"},"signature_version":"v1","id":"ASB-A-366403307-8cd24e0c","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68","digest":{"threshold":0.9,"line_hashes":["140596199919787614286830620172402916923","35323485728177646444664352266437140545","83699810367459881137262713309360686329"]},"signature_type":"Line"},{"deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"signature_version":"v1","id":"ASB-A-366403307-c97fc6bf","source":"https://android.googlesource.com/platform/frameworks/base/+/2ff2dadc37ca7b828eb9e228f015589d9dc8aaa8","digest":{"threshold":0.9,"line_hashes":["48271866020983402741317697191927262300","258154477222024538161942687079640623010","293474134540468567119316859037077150681","127201025683753278655545441715991278217","300253045995943859909040907196640039614","280832611599851557092847522639492618499","196290242042722160805466346397507596848","59779386922115477265695659846766275892","30596101698174053649423894352670996017","247701998955975149565204374510801855559","236258009288467572065414099264846251508"]},"signature_type":"Line"},{"deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"signature_version":"v1","id":"ASB-A-366403307-e97b5aff","source":"https://android.googlesource.com/platform/frameworks/base/+/f1fcf4ad03fdf427b728f7fe6aa4de06cff1ec68","digest":{"length":358,"function_hash":"153100650039487584088342375961007218414"},"signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-09-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2025-09-01","types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394","https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211"],"severity":"High","vanir_signatures":[{"digest":{"length":794,"function_hash":"214865920675456868833784104343276876229"},"deprecated":false,"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java","function":"onWalletCardsRetrieved"},"id":"ASB-A-366403307-55b721f2","source":"https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211","signature_version":"v1","signature_type":"Function"},{"id":"ASB-A-366403307-8d8979e8","digest":{"threshold":0.9,"line_hashes":["272154888241610003550890006148090413574","50331742103249212278432064195301275261","289129983721657027228421220049785405861","278508063703508476458772447971251926863","280695784732386592284871366412088916160","200929768696889264497157033762169044294","327143209346939640461697995229268842021","204951814737961851763192749677397359606","200405687505325832570341213920229487292","95126765697886247521411308199037378046"]},"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java"},"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394","signature_version":"v1","signature_type":"Line"},{"target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletView.java"},"signature_version":"v1","id":"ASB-A-366403307-9a81a609","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394","digest":{"threshold":0.9,"line_hashes":["140596199919787614286830620172402916923","35323485728177646444664352266437140545","83699810367459881137262713309360686329"]},"signature_type":"Line"},{"digest":{"length":358,"function_hash":"153100650039487584088342375961007218414"},"signature_version":"v1","id":"ASB-A-366403307-b5f2f687","deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/4e81f0012281823750a540b4d172df5ad934a394","target":{"file":"packages/SystemUI/src/com/android/systemui/wallet/ui/WalletScreenController.java","function":"QAWalletCardViewInfo"},"signature_type":"Function"},{"id":"ASB-A-366403307-e25de802","digest":{"threshold":0.9,"line_hashes":["48271866020983402741317697191927262300","258154477222024538161942687079640623010","293474134540468567119316859037077150681","127201025683753278655545441715991278217","300253045995943859909040907196640039614","280832611599851557092847522639492618499","196290242042722160805466346397507596848","59779386922115477265695659846766275892","30596101698174053649423894352670996017","247701998955975149565204374510801855559","236258009288467572065414099264846251508"]},"target":{"file":"packages/SystemUI/src/com/android/systemui/qs/tiles/QuickAccessWalletTile.java"},"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/713430af77c93a4954ecfb7860367d8084189211","signature_version":"v1","signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-366403307.json"}}],"schema_version":"1.7.5"}