{"id":"ASB-A-370958259","details":"In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-370958259","CVE-2025-0080"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/5916a3de10fa9ca6a9b31f489be1838c0a1613f4"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-03-01"}]}],"versions":["15-next"],"ecosystem_specific":{"severity":"High","spl":"2025-03-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/b1612955cb7fb2f69f1e04d437bb7fabd411ff7c","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"onCreate"},"deprecated":false,"digest":{"length":1595,"function_hash":"237969592052963635730934805885314022583"},"id":"ASB-A-370958259-1d677971","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b1612955cb7fb2f69f1e04d437bb7fabd411ff7c","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"},"deprecated":false,"digest":{"line_hashes":["106852290312809516895377641684996428641","100619307944333955550393411756035339383","253671319467356316573877843325206305148","194305148853903854519207401895473405000","164618263518515534571435835108085346840","117242953883748989660592205141705532966","322276312425168391457092955602260976032","82791985082628779718638862041003667333"],"threshold":0.9},"id":"ASB-A-370958259-4462f2ea","signature_type":"Line"},{"id":"ASB-A-370958259-923c4fc6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b1612955cb7fb2f69f1e04d437bb7fabd411ff7c","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveFragment.java","function":"onCreateDialog"},"deprecated":false,"digest":{"function_hash":"323308802861785688109354783023765293940","length":537}},{"deprecated":false,"digest":{"line_hashes":["34647006730598393968881487632720217521","220837909846715867234019510086613959071","112944296168326975797965234027075705758","268955711874604927044415729134364870134","104335380940393650208967793504429997267","227051776264705071281256115035437909817","74088909021720321535169830157439491633","188813712324366316321383523893347649282","155842730872581119733874838446406534715","200236479055803650491839492661848229957"],"threshold":0.9},"id":"ASB-A-370958259-f8c1abb4","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b1612955cb7fb2f69f1e04d437bb7fabd411ff7c","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveFragment.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b1612955cb7fb2f69f1e04d437bb7fabd411ff7c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-370958259.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-03-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2025-03-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/799842233276351680f47420d8754f381dcbf86f","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveFragment.java","function":"onCreateDialog"},"deprecated":false,"digest":{"length":537,"function_hash":"323308802861785688109354783023765293940"},"id":"ASB-A-370958259-5dfba42e","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"237969592052963635730934805885314022583","length":1595},"id":"ASB-A-370958259-9a79cbb0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/799842233276351680f47420d8754f381dcbf86f","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"onCreate"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/799842233276351680f47420d8754f381dcbf86f","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveFragment.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["34647006730598393968881487632720217521","220837909846715867234019510086613959071","112944296168326975797965234027075705758","268955711874604927044415729134364870134","104335380940393650208967793504429997267","227051776264705071281256115035437909817","74088909021720321535169830157439491633","188813712324366316321383523893347649282","155842730872581119733874838446406534715","200236479055803650491839492661848229957"]},"id":"ASB-A-370958259-d3acbd8d","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["106852290312809516895377641684996428641","100619307944333955550393411756035339383","253671319467356316573877843325206305148","194305148853903854519207401895473405000","164618263518515534571435835108085346840","117242953883748989660592205141705532966","322276312425168391457092955602260976032","82791985082628779718638862041003667333"]},"id":"ASB-A-370958259-f40f7008","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/799842233276351680f47420d8754f381dcbf86f","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/799842233276351680f47420d8754f381dcbf86f"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-370958259.json"}}],"schema_version":"1.9.0"}