{"id":"ASB-A-386216637","details":"In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent filters in NLS due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-386216637","CVE-2025-26442"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-05-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-05-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/63f8849244d1817be2729f522a75424c219e9ecb"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-05-01"}]}],"versions":["15-next"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f5ed187ffb6f5a25ac1c06a1e8b023b0c7d8d4b8","target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"function_hash":"201052967371839016757650445127637822922","length":2852},"id":"ASB-A-386216637-5e8ae903"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f5ed187ffb6f5a25ac1c06a1e8b023b0c7d8d4b8","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"line_hashes":["99317466554337902381903058953979315408","272068431502793550073243861092226968176","122075035307930729958284077632807933728","251886321207292761453264900913820391148","121880616167169192506640568389270494908","180633663937280128438131101296955190046","80324343318334328622582007078937391827","328124076996209129070053438241923050025"],"threshold":0.9},"id":"ASB-A-386216637-b1ec3dde","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f5ed187ffb6f5a25ac1c06a1e8b023b0c7d8d4b8"],"severity":"High","spl":"2025-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-386216637.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-05-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2025-05-01","types":["ID"],"vanir_signatures":[{"target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"length":2852,"function_hash":"201052967371839016757650445127637822922"},"id":"ASB-A-386216637-2862d368","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/19c9b3d4e30ad6477103c46b3cdb2732215f8a12"},{"digest":{"threshold":0.9,"line_hashes":["99317466554337902381903058953979315408","272068431502793550073243861092226968176","122075035307930729958284077632807933728","251886321207292761453264900913820391148","121880616167169192506640568389270494908","180633663937280128438131101296955190046","80324343318334328622582007078937391827","328124076996209129070053438241923050025"]},"id":"ASB-A-386216637-6e1a6438","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/19c9b3d4e30ad6477103c46b3cdb2732215f8a12","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/19c9b3d4e30ad6477103c46b3cdb2732215f8a12"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-386216637.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-05-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2025-05-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-386216637-bd70abbd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/b0fce927bff15296f93a5bb08e9f005f4d905103","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["99317466554337902381903058953979315408","272068431502793550073243861092226968176","122075035307930729958284077632807933728","251886321207292761453264900913820391148","121880616167169192506640568389270494908","180633663937280128438131101296955190046","80324343318334328622582007078937391827","328124076996209129070053438241923050025"]}},{"target":{"function":"onCreate","file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"function_hash":"201052967371839016757650445127637822922","length":2852},"id":"ASB-A-386216637-c1444250","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/b0fce927bff15296f93a5bb08e9f005f4d905103"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/b0fce927bff15296f93a5bb08e9f005f4d905103"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-386216637.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-05-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2025-05-01","types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/b0fce927bff15296f93a5bb08e9f005f4d905103","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java","function":"onCreate"},"deprecated":false,"digest":{"length":2852,"function_hash":"201052967371839016757650445127637822922"},"id":"ASB-A-386216637-d5a8fe0e"},{"id":"ASB-A-386216637-f33262f9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/b0fce927bff15296f93a5bb08e9f005f4d905103","target":{"file":"src/com/android/settings/notification/NotificationAccessConfirmationActivity.java"},"deprecated":false,"digest":{"line_hashes":["99317466554337902381903058953979315408","272068431502793550073243861092226968176","122075035307930729958284077632807933728","251886321207292761453264900913820391148","121880616167169192506640568389270494908","180633663937280128438131101296955190046","80324343318334328622582007078937391827","328124076996209129070053438241923050025"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/b0fce927bff15296f93a5bb08e9f005f4d905103"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-386216637.json"}}],"schema_version":"1.9.0"}