{"id":"ASB-A-397216537","details":"In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text in a permission popup due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-397216537","CVE-2025-32323"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/35a75b2455084a2c77663682780d7b64fb60c161"}],"affected":[{"package":{"name":"platform/packages/apps/DocumentsUI","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-09-01"}]}],"versions":["16-next"],"ecosystem_specific":{"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["37876277042882961774571832764351283716","269458287287563012433905513959353935107","104214980192024939577819818891578066066","237475930497240201939556655798515482635","255332656328781610514668830818884769674","137139273315319569512436360191619240345","30094808026787124630296350887046792166","162757685645516588871294181607580211833","251759438643673393520861235509435845431"]},"id":"ASB-A-397216537-1ac068b6","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3","target":{"file":"src/com/android/documentsui/base/Shared.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3","target":{"function":"getCallingAppName","file":"src/com/android/documentsui/dirlist/DirectoryFragment.java"},"deprecated":false,"digest":{"function_hash":"194650644673830432688761763122559843523","length":63},"id":"ASB-A-397216537-4e6a8688"},{"digest":{"threshold":0.9,"line_hashes":["191796742205120856426560608536963393886","248392357307326825488608007907906247569","253664579616272120019020293042089869825","119640721929178758864171116543777235448","88614894248070539149749001153057611333","192236331321682913283373241993408442795"]},"id":"ASB-A-397216537-50da8fbf","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3","target":{"file":"src/com/android/documentsui/dirlist/DirectoryFragment.java"},"deprecated":false},{"digest":{"function_hash":"178697288976910297250387690471494008398","length":41},"id":"ASB-A-397216537-51ee83b1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3","target":{"file":"tests/common/com/android/documentsui/dirlist/TestEnvironment.java","function":"getCallingAppName"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3","target":{"file":"src/com/android/documentsui/dirlist/DocumentsAdapter.java"},"deprecated":false,"digest":{"line_hashes":["135733718630255411048675363695623840220","318836206997742897580377676149031540748","131622419250986092245848435957312969760","230235986588592318493714804292173863471"],"threshold":0.9},"id":"ASB-A-397216537-69a92f25","signature_type":"Line"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3","target":{"file":"tests/common/com/android/documentsui/dirlist/TestEnvironment.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["171545660746234868457838934132160564399","16620385211362110162349410932687275954","155380109869855992816550928114507728332","151033081719793388373943812935464634995","222863958647210402686620657406730865541"]},"id":"ASB-A-397216537-e62ea1a5"},{"target":{"file":"src/com/android/documentsui/base/Shared.java","function":"getCallingAppName"},"deprecated":false,"digest":{"function_hash":"34987950939639189483444613650854068396","length":465},"id":"ASB-A-397216537-f617e44a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"}],"fixes":["https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/c8ef2db3bb4645704384226976e59583b9e8d3d3"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-397216537.json"}},{"package":{"name":"platform/packages/apps/DocumentsUI","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-09-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"],"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"digest":{"function_hash":"194650644673830432688761763122559843523","length":63},"id":"ASB-A-397216537-1c59e327","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32","target":{"file":"src/com/android/documentsui/dirlist/DirectoryFragment.java","function":"getCallingAppName"},"deprecated":false},{"target":{"file":"src/com/android/documentsui/dirlist/DocumentsAdapter.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["135733718630255411048675363695623840220","318836206997742897580377676149031540748","131622419250986092245848435957312969760","230235986588592318493714804292173863471"]},"id":"ASB-A-397216537-4cdccad9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"},{"source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32","target":{"function":"getCallingAppName","file":"tests/common/com/android/documentsui/dirlist/TestEnvironment.java"},"deprecated":false,"digest":{"function_hash":"178697288976910297250387690471494008398","length":41},"id":"ASB-A-397216537-84ec682c","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/com/android/documentsui/dirlist/DirectoryFragment.java"},"deprecated":false,"digest":{"line_hashes":["191796742205120856426560608536963393886","248392357307326825488608007907906247569","253664579616272120019020293042089869825","119640721929178758864171116543777235448","88614894248070539149749001153057611333","192236331321682913283373241993408442795"],"threshold":0.9},"id":"ASB-A-397216537-a68cfa3b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32","target":{"file":"src/com/android/documentsui/base/Shared.java","function":"getCallingAppName"},"deprecated":false,"digest":{"length":465,"function_hash":"34987950939639189483444613650854068396"},"id":"ASB-A-397216537-ae3f90ae"},{"source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32","target":{"file":"tests/common/com/android/documentsui/dirlist/TestEnvironment.java"},"deprecated":false,"digest":{"line_hashes":["171545660746234868457838934132160564399","16620385211362110162349410932687275954","155380109869855992816550928114507728332","151033081719793388373943812935464634995","222863958647210402686620657406730865541"],"threshold":0.9},"id":"ASB-A-397216537-daddfdb0","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/4fe6c0b5fd87b83f3097e330a93eb28dbc9f7d32","target":{"file":"src/com/android/documentsui/base/Shared.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["117381096027824942318502849749025878871","269458287287563012433905513959353935107","104214980192024939577819818891578066066","237475930497240201939556655798515482635","255332656328781610514668830818884769674","137139273315319569512436360191619240345","30094808026787124630296350887046792166","162757685645516588871294181607580211833","251759438643673393520861235509435845431"]},"id":"ASB-A-397216537-ffd8b5f4"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-397216537.json"}},{"package":{"name":"platform/packages/apps/DocumentsUI","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2025-09-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72","target":{"file":"src/com/android/documentsui/dirlist/DirectoryFragment.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["191796742205120856426560608536963393886","248392357307326825488608007907906247569","253664579616272120019020293042089869825","119640721929178758864171116543777235448","88614894248070539149749001153057611333","192236331321682913283373241993408442795"]},"id":"ASB-A-397216537-1cad1c6c","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72","target":{"file":"src/com/android/documentsui/dirlist/DocumentsAdapter.java"},"deprecated":false,"digest":{"line_hashes":["135733718630255411048675363695623840220","318836206997742897580377676149031540748","131622419250986092245848435957312969760","230235986588592318493714804292173863471"],"threshold":0.9},"id":"ASB-A-397216537-2d39c0b1","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72","target":{"file":"src/com/android/documentsui/dirlist/DirectoryFragment.java","function":"getCallingAppName"},"deprecated":false,"digest":{"function_hash":"194650644673830432688761763122559843523","length":63},"id":"ASB-A-397216537-2f64c38c","signature_type":"Function"},{"digest":{"function_hash":"178697288976910297250387690471494008398","length":41},"id":"ASB-A-397216537-3898f5df","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72","target":{"file":"tests/common/com/android/documentsui/dirlist/TestEnvironment.java","function":"getCallingAppName"},"deprecated":false},{"target":{"file":"src/com/android/documentsui/base/Shared.java"},"deprecated":false,"digest":{"line_hashes":["37876277042882961774571832764351283716","269458287287563012433905513959353935107","104214980192024939577819818891578066066","237475930497240201939556655798515482635","255332656328781610514668830818884769674","137139273315319569512436360191619240345","30094808026787124630296350887046792166","162757685645516588871294181607580211833","251759438643673393520861235509435845431"],"threshold":0.9},"id":"ASB-A-397216537-94c79dcc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"},{"digest":{"function_hash":"34987950939639189483444613650854068396","length":465},"id":"ASB-A-397216537-9db69ac6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72","target":{"file":"src/com/android/documentsui/base/Shared.java","function":"getCallingAppName"},"deprecated":false},{"id":"ASB-A-397216537-d01373ee","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72","target":{"file":"tests/common/com/android/documentsui/dirlist/TestEnvironment.java"},"deprecated":false,"digest":{"line_hashes":["171545660746234868457838934132160564399","16620385211362110162349410932687275954","155380109869855992816550928114507728332","151033081719793388373943812935464634995","222863958647210402686620657406730865541"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/a74695f75d269a0caf2885d52833489eb97e2f72"],"severity":"High","spl":"2025-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-397216537.json"}},{"package":{"name":"platform/packages/apps/DocumentsUI","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-09-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"],"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6","target":{"file":"src/com/android/documentsui/dirlist/DirectoryFragment.java","function":"getCallingAppName"},"deprecated":false,"digest":{"function_hash":"194650644673830432688761763122559843523","length":63},"id":"ASB-A-397216537-0225bd83"},{"source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6","target":{"file":"src/com/android/documentsui/dirlist/DocumentsAdapter.java"},"deprecated":false,"digest":{"line_hashes":["135733718630255411048675363695623840220","318836206997742897580377676149031540748","131622419250986092245848435957312969760","230235986588592318493714804292173863471"],"threshold":0.9},"id":"ASB-A-397216537-053292d0","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6","target":{"function":"getCallingAppName","file":"src/com/android/documentsui/base/Shared.java"},"deprecated":false,"digest":{"function_hash":"34987950939639189483444613650854068396","length":465},"id":"ASB-A-397216537-2a639903","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6","target":{"file":"src/com/android/documentsui/dirlist/DirectoryFragment.java"},"deprecated":false,"digest":{"line_hashes":["191796742205120856426560608536963393886","248392357307326825488608007907906247569","253664579616272120019020293042089869825","119640721929178758864171116543777235448","88614894248070539149749001153057611333","192236331321682913283373241993408442795"],"threshold":0.9},"id":"ASB-A-397216537-2c02dbc3","signature_type":"Line"},{"id":"ASB-A-397216537-45a3fb18","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6","target":{"file":"tests/common/com/android/documentsui/dirlist/TestEnvironment.java","function":"getCallingAppName"},"deprecated":false,"digest":{"function_hash":"178697288976910297250387690471494008398","length":41}},{"target":{"file":"tests/common/com/android/documentsui/dirlist/TestEnvironment.java"},"deprecated":false,"digest":{"line_hashes":["171545660746234868457838934132160564399","16620385211362110162349410932687275954","155380109869855992816550928114507728332","151033081719793388373943812935464634995","222863958647210402686620657406730865541"],"threshold":0.9},"id":"ASB-A-397216537-a8749d78","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6"},{"digest":{"threshold":0.9,"line_hashes":["117381096027824942318502849749025878871","269458287287563012433905513959353935107","104214980192024939577819818891578066066","237475930497240201939556655798515482635","255332656328781610514668830818884769674","137139273315319569512436360191619240345","30094808026787124630296350887046792166","162757685645516588871294181607580211833","251759438643673393520861235509435845431"]},"id":"ASB-A-397216537-a87a27b4","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/560abd69ceb80de7ea1b2188015b2106e27363e6","target":{"file":"src/com/android/documentsui/base/Shared.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-397216537.json"}},{"package":{"name":"platform/packages/apps/DocumentsUI","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-09-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421","target":{"file":"src/com/android/documentsui/dirlist/DocumentsAdapter.java"},"deprecated":false,"digest":{"line_hashes":["135733718630255411048675363695623840220","318836206997742897580377676149031540748","131622419250986092245848435957312969760","230235986588592318493714804292173863471"],"threshold":0.9},"id":"ASB-A-397216537-05b48beb"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421","target":{"file":"src/com/android/documentsui/dirlist/DirectoryFragment.java","function":"getCallingAppName"},"deprecated":false,"digest":{"length":63,"function_hash":"194650644673830432688761763122559843523"},"id":"ASB-A-397216537-2090736d","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421","target":{"file":"src/com/android/documentsui/base/Shared.java","function":"getCallingAppName"},"deprecated":false,"digest":{"function_hash":"34987950939639189483444613650854068396","length":465},"id":"ASB-A-397216537-47036df4"},{"target":{"file":"src/com/android/documentsui/base/Shared.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["117381096027824942318502849749025878871","269458287287563012433905513959353935107","104214980192024939577819818891578066066","237475930497240201939556655798515482635","255332656328781610514668830818884769674","137139273315319569512436360191619240345","30094808026787124630296350887046792166","162757685645516588871294181607580211833","251759438643673393520861235509435845431"]},"id":"ASB-A-397216537-864e3cfc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"},{"id":"ASB-A-397216537-895d0a5a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421","target":{"function":"getCallingAppName","file":"tests/common/com/android/documentsui/dirlist/TestEnvironment.java"},"deprecated":false,"digest":{"function_hash":"178697288976910297250387690471494008398","length":41}},{"id":"ASB-A-397216537-b419be83","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421","target":{"file":"src/com/android/documentsui/dirlist/DirectoryFragment.java"},"deprecated":false,"digest":{"line_hashes":["191796742205120856426560608536963393886","248392357307326825488608007907906247569","253664579616272120019020293042089869825","119640721929178758864171116543777235448","88614894248070539149749001153057611333","192236331321682913283373241993408442795"],"threshold":0.9}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421","target":{"file":"tests/common/com/android/documentsui/dirlist/TestEnvironment.java"},"deprecated":false,"digest":{"line_hashes":["171545660746234868457838934132160564399","16620385211362110162349410932687275954","155380109869855992816550928114507728332","151033081719793388373943812935464634995","222863958647210402686620657406730865541"],"threshold":0.9},"id":"ASB-A-397216537-cce5727f"}],"fixes":["https://android.googlesource.com/platform/packages/apps/DocumentsUI/+/05839b7a4937885b16b6ce8450042b8fceee9421"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-397216537.json"}}],"schema_version":"1.9.0"}