{"id":"ASB-A-377888957","details":"In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to  incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-377888957","CVE-2025-48567"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2026-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/237fb89f532504aeef0c3ee2038aad89a8a66180"}],"affected":[{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2026-03-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"digest":{"length":213,"function_hash":"226996707547433235965785472795624441252"},"id":"ASB-A-377888957-05d41381","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isUidAllowedAccessToDataOrObbPathForFuse"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd","target":{"function":"extractRelativePathWithDisplayName","file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"length":516,"function_hash":"328776005334908736275543593973879020239"},"id":"ASB-A-377888957-0ba775ac"},{"target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"isDataOrObbPath"},"deprecated":false,"digest":{"length":204,"function_hash":"92307367214643950899603413162914992496"},"id":"ASB-A-377888957-1a68c403","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd"},{"digest":{"function_hash":"249665731093422669319818969142505135567","length":563},"id":"ASB-A-377888957-2cc167e6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"onFileLookupForFuse"},"deprecated":false},{"id":"ASB-A-377888957-3bbe54e1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"line_hashes":["134631226112286153484670460781430282611","89815533011824103329115306093033562383","257818496789157237561223134067021313370","197925221066518878033764733674534026675","6138842530206976936300084642398284716","209337476459286661755185109859942583083","311981221252840178152454485780936656934","234599106246153954331461502915158441863","192464560504849610202804272826433035627","234105433387135062527867796944769985851","257219336668657842162850345608383879987","326660047069205675266907240875515725546","70040175552653072796495333610581565940","245352575624778057833178135623449323480","246386086987323437044502751628058075607","165375476042793538010425895285774727336","764814457686874386476215849419489293","26564863035096130412203098652145699338","7984601092988551274489120689617782795","227680483399587877396693384856384439838","106409285204876307118629787082210609480","162201346877770839031371629678396081773","320639867904938325402006363032619936006","303087223366269123206953225211176670620"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"134060006942020820079166328762911276985","length":226},"id":"ASB-A-377888957-426314f9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd","target":{"function":"isPrivatePackagePathNotAccessibleByCaller","file":"src/com/android/providers/media/MediaProvider.java"}},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ac3a6dc8db818a74357af1dfa2acfa911648827c","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["173206721113253927365700131701305519062","96677863779759406821934507698891994795","217365107932644967334653583789338403522","7151433796071928884824599395815276383","78791798906279708308750508261262589134","153470501477847501230096233885626336528","30237668928426802982795815534994308100","82018194030535987554556698946449194007","159412126813309424330500482424878503099","41402961171287579849934641659139363311","289687709461305282474901472734985936504","171788775347058813939977131637371805635","258229670595994740577130944013208492492","276915466610561367434355349498259303014","17868852999213018675502220584756778566","294046186754859283633317689621016143482","78353760001383825331055911620291906486","44215024272372494443035931445115371798","21984294643547783324754679393295592990","132957219469021444897569438745347485763","79244339253714502349611243392769900454","66720982552654615389360111553529818430","339652390986422250184571403096310669801","92120459762919446994684560255772253704","151208300888016572072216369998602590409","32643535801093529626958464395234163616","101008661967773831733170902370887784484","185709782856752458176489203882960839389","316987461974666684201809714523501254168","16106118188716020810353708808829455361","90493409769181207269054694978358321729","51987754084611526887109802415952595867","35576384925651203357581874715347865057","236455967876322173453664027728001258555","70958477338536973107162777667911260326","292089509111028762067088320639799216075","182022595529471066684785689789299366193","69730615146276407651092307724542876263","273454783085467765635999772771029466243","234622683251338214237295149042364572241","67139361722389860045240930350434366260","59250491801463729868811104966137903627"]},"id":"ASB-A-377888957-4861a5e3","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd","target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"extractPathOwnerPackageName"},"deprecated":false,"digest":{"length":243,"function_hash":"14279649764430237712843283548798417177"},"id":"ASB-A-377888957-51fa1c12","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"line_hashes":["277719061120923855720894824315412904825","294276262836747963732032934653878299683","70840243827195656271213267058830171869","191441497703151659409703273328032493911","221394803707328647321340509365467153832","107741032214056123359766846177322763474","215319409632613374333202781714283057603","289906919696628400957618572375286939927","231864520467113675219606534456744277642","101174174742150765788737015576610438397","59035682705055059088983133217213735787","260707350419401750785342769482167009082","109316850836714322622303977450526042452","89490861335495855522613995177667255133","211894088415977047340953790660474240028","241091897821720987786033692835420824053","199875295475276069390867084182765738097","16060352485762379418340150163930337854","226849912900492804842013541784238374485","275076745764628580337259328215861024252","218623763184100564539095451435411405573","289906919696628400957618572375286939927","18025745311732292158425269737691486927","147775838700226381159279440288097661542","95246909943290472216763529824930062008","124795674189587345859616503830620390856","202077237700240578398699047628914619707","211157565416306637755979175177324928374","336261838120453986963419909204707790449","11931841036104149514767539626498570583","76467033808767936713409658378110127948","63926994233254031294870498992783478161","76640258726419043624872947953414850779","300804222294664550244550930434726947292"],"threshold":0.9},"id":"ASB-A-377888957-570e368f","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd","target":{"file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"line_hashes":["42908565557489203050520370581398917282","128316141155159100649622775336133295007","282731222483609719443282120070882277390","165898591103343431279425710275646447157","219680487362096660389734968694038981339","249073739354650957884364904141154759301","54539833989572580748702364764862275612","70265105652671737215227839028825929535","194409139928996373204224940512526594165","2499999390633867229282834822945098525","253009853879679073298953409291244003385","299090597716764448916915079831493139341","152609154947308658414638123540052009138","132572916478863627196232438168471086231","211019141526758352248157757202895836392","313215474695951991572961019964625810390"],"threshold":0.9},"id":"ASB-A-377888957-5978c7bb"},{"digest":{"length":1557,"function_hash":"198515721572817328364593744351461647072"},"id":"ASB-A-377888957-5a027739","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isDirAccessAllowedForFuse"},"deprecated":false},{"digest":{"function_hash":"202824315161223517404522119094524291030","length":271},"id":"ASB-A-377888957-5ac6ab8d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd","target":{"function":"normalizeAndFilterDefaultIgnorableCodepoints","file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false},{"id":"ASB-A-377888957-62687cfe","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"function":"onFileOpenForFuse","file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"length":2200,"function_hash":"278045937307668214596709921924408550446"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd","target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"isObbOrChildRelativePath"},"deprecated":false,"digest":{"function_hash":"44762415218847977234239716215750912759","length":214},"id":"ASB-A-377888957-71fffc13"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"function":"insertFileIfNecessaryForFuse","file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"length":1656,"function_hash":"231280261256325031510246668243932954432"},"id":"ASB-A-377888957-7ce64f21"},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"line_hashes":["222584072729735323109898840923751069068","41704313145309279069425671886692452637","65939650243463462522209391849643224540","117341219938160641483890167620966869020","128048320933042183831893733314396719068","172394471036302015516554510539378005816","87698304668436251034597930970843903176","292700920929803809937765813774551376287","10455094215873628548419497250396943403","192987069831422856292770553791605861373","51608580587611159626355048685623940193","10147980606942817149665655618576589991","16298271443780216982714039481591504387","247606750090053927141368920297746189498","217312471996894623925297856645972273914","74050927217361711611696943487525512847","9930089544817791024302595660407261805","263495380045659201226454466404201242841","109894684142278450001096080842419067842","82595427226006979354328584921143568437","170697138640752652382562359505888137919","81100697101505954786086398800711028153","296013419558806594279803459872362083905","264757887831491835516301956099583446670","232501581310166306068160390218971890395","132524863725903511421410689212441816332","260807375613150695339136617662987785275","117549453931908998512414891604487343050","137703718226107616670925311521652813478","136176808116978878461216904410119324149","286860166619217333271835436767588740114","71701847979128889883479979495604727147","248435173521457313137034391255992268452","286626487771195837064527485378392867914","317408471826694362668345323557812397810"],"threshold":0.9},"id":"ASB-A-377888957-80f4117e","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"getFilesInDirectoryForFuse"},"deprecated":false,"digest":{"function_hash":"154699165599370262517894916201972503227","length":1220},"id":"ASB-A-377888957-8a52ce9e","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-377888957-913ae90d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd","target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"extractOwnerPackageNameFromRelativePath"},"deprecated":false,"digest":{"function_hash":"249577001351822525288196595855405472197","length":252}},{"deprecated":false,"digest":{"function_hash":"180930561264265183760470799271315958925","length":213},"id":"ASB-A-377888957-916feef6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd","target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"isDataOrObbRelativePath"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5dc5ccb4d111b58f4c872ce388c1a05c22aedf12","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"onFileOpenForFuse"},"deprecated":false,"digest":{"function_hash":"48383641148396323823115119688982097993","length":2134},"id":"ASB-A-377888957-9a48deaf","match_only_versions":["16-qpr2-next"]},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ac3a6dc8db818a74357af1dfa2acfa911648827c","target":{"function":"extractRelativePath","file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"function_hash":"42956777334726447747866057222591246297","length":576},"id":"ASB-A-377888957-abf470d1","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd","target":{"function":"extractRelativePath","file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"function_hash":"283246369171298742973751962117089810377","length":595},"id":"ASB-A-377888957-ace66b35","signature_type":"Function"},{"target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"shouldBypassFuseRestrictions"},"deprecated":false,"digest":{"function_hash":"130838961223192324853349544381631729222","length":866},"id":"ASB-A-377888957-b1044fdf","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd"},{"id":"ASB-A-377888957-c5ac3c04","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"function":"assertNoDefaultIgnorableCharactersInPath","file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"length":355,"function_hash":"47488645699180043015982744076818791335"}},{"digest":{"length":2813,"function_hash":"145397304366275538245543153972856109510"},"id":"ASB-A-377888957-df6a8d1b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"renameForFuse"},"deprecated":false},{"digest":{"length":1012,"function_hash":"117989335259030369357833102330557057919"},"id":"ASB-A-377888957-e70e87b4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"deleteFileForFuse"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5dc5ccb4d111b58f4c872ce388c1a05c22aedf12","https://android.googlesource.com/platform/packages/providers/MediaProvider/+/bf7e03f677c0b769001558d168351f6d069c08f8","https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ac3a6dc8db818a74357af1dfa2acfa911648827c","https://android.googlesource.com/platform/packages/providers/MediaProvider/+/7da1af11b82a99ff2d864a24ead451675dad1ebd"],"severity":"High","spl":"2026-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-377888957.json"}},{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-03-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-377888957-42d1cca0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/daa78b685ea8c79bb8f255e5e5b3cfed219fbe67","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["37980484410121775429104723648726030744","259230997437856627284876070410981522839","156347491582228073526965554601258343305","108817463509489971315003239018655772380","78791798906279708308750508261262589134","153470501477847501230096233885626336528","30237668928426802982795815534994308100","82018194030535987554556698946449194007","17542287665553718751784631785626160418","155332377000978335094080491740611356267","289687709461305282474901472734985936504","171788775347058813939977131637371805635","258229670595994740577130944013208492492","276915466610561367434355349498259303014","17868852999213018675502220584756778566"]}},{"target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isPrivatePackagePathNotAccessibleByCaller"},"deprecated":false,"digest":{"function_hash":"134060006942020820079166328762911276985","length":226},"id":"ASB-A-377888957-eaccb9d3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/daa78b685ea8c79bb8f255e5e5b3cfed219fbe67"},{"target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"extractRelativePath"},"deprecated":false,"digest":{"function_hash":"42956777334726447747866057222591246297","length":576},"id":"ASB-A-377888957-ef2ebd5e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/daa78b685ea8c79bb8f255e5e5b3cfed219fbe67"},{"deprecated":false,"digest":{"line_hashes":["162323806311705088903963780433977929902","170078801786692565586203197492392509185","151796894551534310984489466019835500286","21227431916113020029303057532108103788","219680487362096660389734968694038981339","249073739354650957884364904141154759301","54539833989572580748702364764862275612","70265105652671737215227839028825929535","194409139928996373204224940512526594165","2499999390633867229282834822945098525","253009853879679073298953409291244003385","299090597716764448916915079831493139341","152609154947308658414638123540052009138","132572916478863627196232438168471086231","211019141526758352248157757202895836392","313215474695951991572961019964625810390"],"threshold":0.9},"id":"ASB-A-377888957-f806ddc9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/daa78b685ea8c79bb8f255e5e5b3cfed219fbe67","target":{"file":"src/com/android/providers/media/MediaProvider.java"}}],"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/daa78b685ea8c79bb8f255e5e5b3cfed219fbe67"],"severity":"High","spl":"2026-03-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-377888957.json"}},{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-03-01"}]}],"versions":["16"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isPrivatePackagePathNotAccessibleByCaller"},"deprecated":false,"digest":{"function_hash":"134060006942020820079166328762911276985","length":226},"id":"ASB-A-377888957-192300b5","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c","target":{"function":"extractRelativePath","file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"function_hash":"42956777334726447747866057222591246297","length":576},"id":"ASB-A-377888957-22296a2c"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c","target":{"file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"line_hashes":["42908565557489203050520370581398917282","128316141155159100649622775336133295007","282731222483609719443282120070882277390","165898591103343431279425710275646447157","219680487362096660389734968694038981339","249073739354650957884364904141154759301","54539833989572580748702364764862275612","70265105652671737215227839028825929535","194409139928996373204224940512526594165","2499999390633867229282834822945098525","253009853879679073298953409291244003385","299090597716764448916915079831493139341","152609154947308658414638123540052009138","132572916478863627196232438168471086231","211019141526758352248157757202895836392","313215474695951991572961019964625810390"],"threshold":0.9},"id":"ASB-A-377888957-6282d3c4","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["37980484410121775429104723648726030744","259230997437856627284876070410981522839","156347491582228073526965554601258343305","108817463509489971315003239018655772380","173206721113253927365700131701305519062","96677863779759406821934507698891994795","217365107932644967334653583789338403522","7151433796071928884824599395815276383","78791798906279708308750508261262589134","153470501477847501230096233885626336528","30237668928426802982795815534994308100","82018194030535987554556698946449194007","159412126813309424330500482424878503099","41402961171287579849934641659139363311","289687709461305282474901472734985936504","171788775347058813939977131637371805635","258229670595994740577130944013208492492","276915466610561367434355349498259303014","17868852999213018675502220584756778566"]},"id":"ASB-A-377888957-b6d5c81c","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c","target":{"function":"shouldBypassFuseRestrictions","file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"function_hash":"130838961223192324853349544381631729222","length":866},"id":"ASB-A-377888957-de9776a1","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/2ce2b01a309edcd4e28460225dc5f2cc36d6597c"],"severity":"High","spl":"2026-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-377888957.json"}},{"package":{"name":"platform/packages/providers/MediaProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-03-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2026-03-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["37980484410121775429104723648726030744","259230997437856627284876070410981522839","156347491582228073526965554601258343305","108817463509489971315003239018655772380","78791798906279708308750508261262589134","153470501477847501230096233885626336528","30237668928426802982795815534994308100","82018194030535987554556698946449194007","17542287665553718751784631785626160418","155332377000978335094080491740611356267","289687709461305282474901472734985936504","171788775347058813939977131637371805635","258229670595994740577130944013208492492","276915466610561367434355349498259303014","17868852999213018675502220584756778566"],"threshold":0.9},"id":"ASB-A-377888957-08ca44cf","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c7e6933049fc5913a97bbcf8c28d5dd5546ba9dd","target":{"file":"src/com/android/providers/media/util/FileUtils.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c7e6933049fc5913a97bbcf8c28d5dd5546ba9dd","target":{"file":"src/com/android/providers/media/util/FileUtils.java","function":"extractRelativePath"},"deprecated":false,"digest":{"length":576,"function_hash":"42956777334726447747866057222591246297"},"id":"ASB-A-377888957-2fba4c12"},{"digest":{"length":226,"function_hash":"134060006942020820079166328762911276985"},"id":"ASB-A-377888957-37d685bd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c7e6933049fc5913a97bbcf8c28d5dd5546ba9dd","target":{"file":"src/com/android/providers/media/MediaProvider.java","function":"isPrivatePackagePathNotAccessibleByCaller"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c7e6933049fc5913a97bbcf8c28d5dd5546ba9dd","target":{"file":"src/com/android/providers/media/MediaProvider.java"},"deprecated":false,"digest":{"line_hashes":["162323806311705088903963780433977929902","170078801786692565586203197492392509185","151796894551534310984489466019835500286","177592477269303531484808321055982915010","57187313110114083304434293964721144394","238044774659507211425721579363074238927","54539833989572580748702364764862275612","70265105652671737215227839028825929535","194409139928996373204224940512526594165","2499999390633867229282834822945098525","253009853879679073298953409291244003385","299090597716764448916915079831493139341","152609154947308658414638123540052009138","132572916478863627196232438168471086231","211019141526758352248157757202895836392","313215474695951991572961019964625810390"],"threshold":0.9},"id":"ASB-A-377888957-d4a18422","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c7e6933049fc5913a97bbcf8c28d5dd5546ba9dd"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-377888957.json"}}],"schema_version":"1.9.0"}