{"id":"ASB-A-392614656","details":"In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-392614656","CVE-2026-0012"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2026-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/ef2a8e20316405ce6b704e800b1808c3aaf5ee43"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2026-03-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f275f865d49559a6bb3ef9cecf0ab1dd7a7a0bc3","https://android.googlesource.com/platform/frameworks/base/+/e93d4b015c283e55cb08d68a499aab41f03e1272"],"severity":"High","spl":"2026-03-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f275f865d49559a6bb3ef9cecf0ab1dd7a7a0bc3","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"},"deprecated":false,"digest":{"line_hashes":["114073869964296632157670569846676702422","138036685855942454692411830274339593226","67012193583568258957577653494082010695","33822579946737582753612445129738211212","165196539129020205162904621788016353979","312948042545973441953087998528932458620","137241084698408732810802534606494397599"],"threshold":0.9},"id":"ASB-A-392614656-0647f1b0"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e93d4b015c283e55cb08d68a499aab41f03e1272","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java","function":"setHideSensitive"},"deprecated":false,"digest":{"function_hash":"117689141328632545875697874019980723196","length":982},"id":"ASB-A-392614656-9b1e022e","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["151932585259494840766923844266771410858","283927817851978125243590851241301788138","264541952904611360498810476359673248735","273409044583803062562242237504551767652"],"threshold":0.9},"id":"ASB-A-392614656-f46bb596","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e93d4b015c283e55cb08d68a499aab41f03e1272","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"}},{"target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java","function":"setHideSensitive"},"deprecated":false,"digest":{"function_hash":"11127489024241662912245881992082036758","length":910},"id":"ASB-A-392614656-fa624535","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f275f865d49559a6bb3ef9cecf0ab1dd7a7a0bc3"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-392614656.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-03-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/323542be0bb081ba81568c49c73e4e307345d6e6"],"severity":"High","spl":"2026-03-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/323542be0bb081ba81568c49c73e4e307345d6e6","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"},"deprecated":false,"digest":{"line_hashes":["114073869964296632157670569846676702422","138036685855942454692411830274339593226","67012193583568258957577653494082010695","262397376547428500919071137322870358533","231175195535880071964175474672825256947","234301822308282951973179078116800446634","57658155187489598595004896077018161357","180755274449494196288971641692851866844"],"threshold":0.9},"id":"ASB-A-392614656-67437da3","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/323542be0bb081ba81568c49c73e4e307345d6e6","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java","function":"setHideSensitive"},"deprecated":false,"digest":{"length":968,"function_hash":"16250083509385765468384873263066633786"},"id":"ASB-A-392614656-ba65f736"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-392614656.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-03-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c552db42595bc5d472d29a60e09566e59877c33b","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java","function":"setHideSensitive"},"deprecated":false,"digest":{"function_hash":"117689141328632545875697874019980723196","length":982},"id":"ASB-A-392614656-7952b111","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c552db42595bc5d472d29a60e09566e59877c33b","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"},"deprecated":false,"digest":{"line_hashes":["151932585259494840766923844266771410858","283927817851978125243590851241301788138","264541952904611360498810476359673248735","273409044583803062562242237504551767652"],"threshold":0.9},"id":"ASB-A-392614656-e41b5ded","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c552db42595bc5d472d29a60e09566e59877c33b"],"severity":"High","spl":"2026-03-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-392614656.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-03-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2026-03-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"length":773,"function_hash":"116751853752255457879965662367562212215"},"id":"ASB-A-392614656-ef9e6de7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e6db8cd89c62c658aa2da5f2493fb3b90f6fd9d6","target":{"function":"setHideSensitive","file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e6db8cd89c62c658aa2da5f2493fb3b90f6fd9d6","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/notification/row/ExpandableNotificationRow.java"},"deprecated":false,"digest":{"line_hashes":["114073869964296632157670569846676702422","138036685855942454692411830274339593226","67012193583568258957577653494082010695","33822579946737582753612445129738211212","231717195237696745366136764691926124068","105575591288388116249479318408086726908","180755274449494196288971641692851866844"],"threshold":0.9},"id":"ASB-A-392614656-f2e42b6a"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e6db8cd89c62c658aa2da5f2493fb3b90f6fd9d6"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-392614656.json"}}],"schema_version":"1.9.0"}