{"id":"ASB-A-430047417","details":"In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-430047417","CVE-2026-0021"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2026-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/48af8a13dd12ecbd0569c328a56d1a7b61a59ca3"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2026-03-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"spl":"2026-03-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["287522374173342379004190520511098448565","175534546121088110630736647175130161778","377102906258055979774208360732591941","269236783169751520630210896829537473538","138435437311815241576392094391464378779","81266923578977761805050889528417129521","174150244572001986185618242056333054277","223427958324231072462668765542242818489"],"threshold":0.9},"id":"ASB-A-430047417-315061fe","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/bd4d57ade07792f2a9160acbe480603b30e79917","target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/bd4d57ade07792f2a9160acbe480603b30e79917","target":{"file":"src/com/android/settings/applications/AppInfoBase.java","function":"hasInteractAcrossUsersFullPermission"},"deprecated":false,"digest":{"function_hash":"75749725220562090698061381139683912892","length":536},"id":"ASB-A-430047417-cbb2d544","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/bd4d57ade07792f2a9160acbe480603b30e79917"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430047417.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-03-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f9821f9f4f5661e64a35551dc301c67df75cc1d4","target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"deprecated":false,"digest":{"line_hashes":["287522374173342379004190520511098448565","175534546121088110630736647175130161778","377102906258055979774208360732591941","269236783169751520630210896829537473538","138435437311815241576392094391464378779","81266923578977761805050889528417129521","174150244572001986185618242056333054277","223427958324231072462668765542242818489"],"threshold":0.9},"id":"ASB-A-430047417-3c45771a"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f9821f9f4f5661e64a35551dc301c67df75cc1d4","target":{"function":"hasInteractAcrossUsersPermission","file":"src/com/android/settings/applications/AppInfoBase.java"},"deprecated":false,"digest":{"length":536,"function_hash":"75749725220562090698061381139683912892"},"id":"ASB-A-430047417-cf832787"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f9821f9f4f5661e64a35551dc301c67df75cc1d4"],"severity":"High","spl":"2026-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430047417.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-03-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/2860bd01810adb2d0f00fba8f327cdae3f20ab9d"],"severity":"High","spl":"2026-03-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-430047417-2f3918b5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2860bd01810adb2d0f00fba8f327cdae3f20ab9d","target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"deprecated":false,"digest":{"line_hashes":["287522374173342379004190520511098448565","175534546121088110630736647175130161778","377102906258055979774208360732591941","269236783169751520630210896829537473538","138435437311815241576392094391464378779","81266923578977761805050889528417129521","174150244572001986185618242056333054277","223427958324231072462668765542242818489"],"threshold":0.9}},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2860bd01810adb2d0f00fba8f327cdae3f20ab9d","target":{"function":"hasInteractAcrossUsersFullPermission","file":"src/com/android/settings/applications/AppInfoBase.java"},"deprecated":false,"digest":{"length":536,"function_hash":"75749725220562090698061381139683912892"},"id":"ASB-A-430047417-bbfcc6e2","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430047417.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-03-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fe9952ef71d7884a4ff6494f9c3caa151b455016","target":{"function":"hasInteractAcrossUsersFullPermission","file":"src/com/android/settings/applications/AppInfoBase.java"},"deprecated":false,"digest":{"function_hash":"75749725220562090698061381139683912892","length":536},"id":"ASB-A-430047417-12e94f6a"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fe9952ef71d7884a4ff6494f9c3caa151b455016","target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["287522374173342379004190520511098448565","175534546121088110630736647175130161778","377102906258055979774208360732591941","269236783169751520630210896829537473538","138435437311815241576392094391464378779","81266923578977761805050889528417129521","174150244572001986185618242056333054277","223427958324231072462668765542242818489"]},"id":"ASB-A-430047417-46b51ddc","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/fe9952ef71d7884a4ff6494f9c3caa151b455016"],"severity":"High","spl":"2026-03-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430047417.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-03-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-03-01","types":["EoP"],"vanir_signatures":[{"digest":{"function_hash":"75749725220562090698061381139683912892","length":536},"id":"ASB-A-430047417-4c82d8f2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/da0588bab34f72113fc11625abb14cffefcddc10","target":{"file":"src/com/android/settings/applications/AppInfoBase.java","function":"hasInteractAcrossUsersPermission"},"deprecated":false},{"target":{"file":"src/com/android/settings/applications/AppInfoBase.java"},"deprecated":false,"digest":{"line_hashes":["287522374173342379004190520511098448565","175534546121088110630736647175130161778","377102906258055979774208360732591941","269236783169751520630210896829537473538","138435437311815241576392094391464378779","81266923578977761805050889528417129521","174150244572001986185618242056333054277","223427958324231072462668765542242818489"],"threshold":0.9},"id":"ASB-A-430047417-ccca4078","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/da0588bab34f72113fc11625abb14cffefcddc10"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/da0588bab34f72113fc11625abb14cffefcddc10"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430047417.json"}}],"schema_version":"1.9.0"}