{"id":"ASB-A-382775095","details":"In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-382775095","CVE-2025-0078"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/native/+/c32d4defe0f4e5cad86437d6672de7a76caf1a79"}],"affected":[{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-03-01"}]}],"versions":["15-next"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"length":1631,"function_hash":"103054758997303530909674299488431052806"},"id":"ASB-A-382775095-820644a0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/90b14eab96ef0de6f91375a2d55768798ce11059","target":{"file":"cmds/servicemanager/main.cpp","function":"main"},"deprecated":false},{"id":"ASB-A-382775095-e7c70f69","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/90b14eab96ef0de6f91375a2d55768798ce11059","target":{"file":"cmds/servicemanager/main.cpp"},"deprecated":false,"digest":{"line_hashes":["337286965434251483831955774888882175871","313999500694981596962968914895666274670","41442552728851546643087969104938208301","239001468851271657634345280584581928601"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/native/+/90b14eab96ef0de6f91375a2d55768798ce11059"],"severity":"High","spl":"2025-03-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-382775095.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-03-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06","target":{"file":"cmds/servicemanager/main.cpp"},"deprecated":false,"digest":{"line_hashes":["5021685984790554028578586044454569582","158063599821068648845358961348018589092","1644809115128101204043221543353588375","239001468851271657634345280584581928601"],"threshold":0.9},"id":"ASB-A-382775095-b4c8b016"},{"source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06","target":{"file":"cmds/servicemanager/main.cpp","function":"main"},"deprecated":false,"digest":{"function_hash":"255594495738122695466899620609061562274","length":979},"id":"ASB-A-382775095-ba47c4f3","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"],"severity":"High","spl":"2025-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-382775095.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-03-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","spl":"2025-03-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06","target":{"function":"main","file":"cmds/servicemanager/main.cpp"},"deprecated":false,"digest":{"function_hash":"255594495738122695466899620609061562274","length":979},"id":"ASB-A-382775095-5d35d6a0"},{"digest":{"threshold":0.9,"line_hashes":["5021685984790554028578586044454569582","158063599821068648845358961348018589092","1644809115128101204043221543353588375","239001468851271657634345280584581928601"]},"id":"ASB-A-382775095-b31eb96f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06","target":{"file":"cmds/servicemanager/main.cpp"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-382775095.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-03-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2025-03-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/native/+/f7e88ce3ad00852c92ec23997bb78b0a9b358d65","target":{"file":"cmds/servicemanager/main.cpp"},"deprecated":false,"digest":{"line_hashes":["337286965434251483831955774888882175871","313999500694981596962968914895666274670","41442552728851546643087969104938208301","239001468851271657634345280584581928601"],"threshold":0.9},"id":"ASB-A-382775095-708244dd","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-382775095-ccbbbdd8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/f7e88ce3ad00852c92ec23997bb78b0a9b358d65","target":{"file":"cmds/servicemanager/main.cpp","function":"main"},"deprecated":false,"digest":{"function_hash":"331552110268812508616993286843637271200","length":1436}}],"fixes":["https://android.googlesource.com/platform/frameworks/native/+/f7e88ce3ad00852c92ec23997bb78b0a9b358d65"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-382775095.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-03-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06","target":{"file":"cmds/servicemanager/main.cpp","function":"main"},"deprecated":false,"digest":{"function_hash":"255594495738122695466899620609061562274","length":979},"id":"ASB-A-382775095-447a6095","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-382775095-6a9977f9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06","target":{"file":"cmds/servicemanager/main.cpp"},"deprecated":false,"digest":{"line_hashes":["5021685984790554028578586044454569582","158063599821068648845358961348018589092","1644809115128101204043221543353588375","239001468851271657634345280584581928601"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"],"severity":"High","spl":"2025-03-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-382775095.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-03-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"],"severity":"High","spl":"2025-03-01","types":["EoP"],"vanir_signatures":[{"digest":{"function_hash":"255594495738122695466899620609061562274","length":979},"id":"ASB-A-382775095-1abf1cc4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06","target":{"file":"cmds/servicemanager/main.cpp","function":"main"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06","target":{"file":"cmds/servicemanager/main.cpp"},"deprecated":false,"digest":{"line_hashes":["5021685984790554028578586044454569582","158063599821068648845358961348018589092","1644809115128101204043221543353588375","239001468851271657634345280584581928601"],"threshold":0.9},"id":"ASB-A-382775095-c74797f7"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-382775095.json"}}],"schema_version":"1.9.0"}