{"id":"ASB-A-435188844","details":"In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-435188844","CVE-2025-48600"],"modified":"2026-06-03T15:06:08.149995907Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d1ec2efc0b8941a0585712d5b4cec95fd9f12f17","https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b","https://android.googlesource.com/platform/frameworks/base/+/57eaa465cabb9a74cc57cbb16657c36ad9fc2d58"],"spl":"2026-06-01","vanir_signatures":[{"digest":{"length":2106,"function_hash":"122749625844804206727342454752676686296"},"target":{"function":"getInstalledApplications","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-0151069d"},{"digest":{"length":1984,"function_hash":"5647340085746230413610397063328464262"},"target":{"function":"queryIntentServicesInternal","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b","signature_type":"Function","signature_version":"v1","deprecated":false,"id":"ASB-A-435188844-625ae55b"},{"digest":{"threshold":0.9,"line_hashes":["227316091039036741688165405033312270495","168041188259495589488515740846403180969","296082808144919494521700876815600945391","99142030560691458793086281728954589051","139900786063038530169935772350342113882","108281999829929096221549010765423657699","200989171371557913724393867628334998461"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/57eaa465cabb9a74cc57cbb16657c36ad9fc2d58","signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-435188844-81793f07"},{"digest":{"threshold":0.9,"line_hashes":["4294957759969163647030007171520665213","306741063813963352960024090521032319801","321143770395008550573402163604596675100","159971660088949769821375506581406084819","36913861435273227248918589552137622929","36963201016912102583229836077585078143","55766225966301963280177765834222273378","41950295011078535475049143437751156035","41380579415712750401924041556804812701","85770552592431473164032735928327496872","219997553884769946559652061920708055675","198234216519597277862920543544592306576","1487286327549188928671549598742772044"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/d1ec2efc0b8941a0585712d5b4cec95fd9f12f17","signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-435188844-944e4bea"},{"digest":{"length":1211,"function_hash":"249151320877369229577323512686903901657"},"target":{"function":"resolveContentProvider","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/d1ec2efc0b8941a0585712d5b4cec95fd9f12f17","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-c2834459"},{"digest":{"length":570,"function_hash":"8306612149884868563026530448652594284"},"source":"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b","target":{"function":"hasCrossUserPermission","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-d6d4cfa5"},{"digest":{"length":197,"function_hash":"155955387924007233392608071178537083333"},"target":{"function":"getComponentEnabledSetting","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-e70dc1ed"},{"digest":{"length":1313,"function_hash":"218154990225916159172293927134632331536"},"target":{"function":"resolveContentProvider","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/57eaa465cabb9a74cc57cbb16657c36ad9fc2d58","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-f1ff118f"},{"digest":{"threshold":0.9,"line_hashes":["15870670946479014925001504625572540566","266496136111753541690104297175217800057","256033668868439213716330198766041779588","72923278655251581498243308851500364391","98905019191585788313594137073002121425","267145194869585725088647465490166871692","178824460229124039209746682262284872734","32888512578613526980746288787537898207","149303953833791877644512825266718304072","73876162608022179835938230523821631111","10191450910670444366152688014456025508","111365901445882203949516727381253004922","154716211210760544107959204467901304495","16390171742763364730724830698676653437","147946162775492104294407966842086961863","145693316129868691273772613216711399073","35882275691100037462877197287475299546","222528837614798955560984759610539387666","281153006355958011749245036745581092893","91837217503181450060727752121693815721","97832320229534722407012942704610568251","154573272478387978490097957500149675549","211002399056754244271423834466983655530"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b","signature_type":"Line","signature_version":"v1","deprecated":false,"id":"ASB-A-435188844-f422a1f5"}],"types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-435188844.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-06-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218","https://android.googlesource.com/platform/frameworks/base/+/517492cb0b1b2fb664de1689548dbfe4a8a3cec1","https://android.googlesource.com/platform/frameworks/base/+/c732cc437484fb8665c93d587143869c0a11c9d5"],"spl":"2026-06-01","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["15870670946479014925001504625572540566","266496136111753541690104297175217800057","256033668868439213716330198766041779588","72923278655251581498243308851500364391","98905019191585788313594137073002121425","267145194869585725088647465490166871692","178824460229124039209746682262284872734","32888512578613526980746288787537898207","264875104936512111300848035006535202788","271655580764290341023650166012204054618","29740387121134890746022108021521388352","232740267204609464100447218023341939531","544833157332720308311909603872673442","126765616413512870019687800692235248867","197867991546047462033292404306628545077","25690728072073030173148040545132618370","290442913872884727345794975608903147363","310151990810170675759313300378787045167","145693316129868691273772613216711399073","35882275691100037462877197287475299546","222528837614798955560984759610539387666","281153006355958011749245036745581092893","91837217503181450060727752121693815721","97832320229534722407012942704610568251","154573272478387978490097957500149675549","211002399056754244271423834466983655530"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218","signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-435188844-056f931b"},{"digest":{"length":449,"function_hash":"102896054550205968779892655968754707601"},"target":{"function":"hasCrossUserPermission","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-53a70c54"},{"digest":{"length":1211,"function_hash":"249151320877369229577323512686903901657"},"target":{"function":"resolveContentProvider","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/517492cb0b1b2fb664de1689548dbfe4a8a3cec1","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-7847882e"},{"digest":{"length":1984,"function_hash":"5647340085746230413610397063328464262"},"target":{"function":"queryIntentServicesInternal","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-8d0f46d7"},{"digest":{"length":1313,"function_hash":"218154990225916159172293927134632331536"},"target":{"function":"resolveContentProvider","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/c732cc437484fb8665c93d587143869c0a11c9d5","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-921fafb8"},{"digest":{"length":197,"function_hash":"155955387924007233392608071178537083333"},"target":{"function":"getComponentEnabledSetting","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-c84778ee"},{"digest":{"threshold":0.9,"line_hashes":["227316091039036741688165405033312270495","168041188259495589488515740846403180969","296082808144919494521700876815600945391","99142030560691458793086281728954589051","139900786063038530169935772350342113882","108281999829929096221549010765423657699","200989171371557913724393867628334998461"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/c732cc437484fb8665c93d587143869c0a11c9d5","signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-435188844-cde410b3"},{"digest":{"length":2106,"function_hash":"122749625844804206727342454752676686296"},"target":{"function":"getInstalledApplications","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-d91e9187"},{"digest":{"threshold":0.9,"line_hashes":["4294957759969163647030007171520665213","306741063813963352960024090521032319801","321143770395008550573402163604596675100","159971660088949769821375506581406084819","36913861435273227248918589552137622929","36963201016912102583229836077585078143","55766225966301963280177765834222273378","41950295011078535475049143437751156035","41380579415712750401924041556804812701","85770552592431473164032735928327496872","219997553884769946559652061920708055675","198234216519597277862920543544592306576","1487286327549188928671549598742772044"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/517492cb0b1b2fb664de1689548dbfe4a8a3cec1","signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-435188844-f7d56699"}],"types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-435188844.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/90eff8175258a5ef2ad2007585f1f920bcfee0d3"],"spl":"2026-06-01","vanir_signatures":[{"digest":{"length":1313,"function_hash":"218154990225916159172293927134632331536"},"target":{"function":"resolveContentProvider","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/90eff8175258a5ef2ad2007585f1f920bcfee0d3","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-00a004ee"},{"digest":{"threshold":0.9,"line_hashes":["227316091039036741688165405033312270495","168041188259495589488515740846403180969","296082808144919494521700876815600945391","99142030560691458793086281728954589051","139900786063038530169935772350342113882","108281999829929096221549010765423657699","200989171371557913724393867628334998461"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/90eff8175258a5ef2ad2007585f1f920bcfee0d3","signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-435188844-2354fcbb"}],"types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-435188844.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-06-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f3e6526b770761bfe1b51abdc32e86ee2558ec72"],"spl":"2026-06-01","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["227316091039036741688165405033312270495","168041188259495589488515740846403180969","296082808144919494521700876815600945391","99142030560691458793086281728954589051","139900786063038530169935772350342113882","108281999829929096221549010765423657699","200989171371557913724393867628334998461"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f3e6526b770761bfe1b51abdc32e86ee2558ec72","signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-435188844-70e7b7bc"},{"digest":{"length":1313,"function_hash":"218154990225916159172293927134632331536"},"target":{"function":"resolveContentProvider","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f3e6526b770761bfe1b51abdc32e86ee2558ec72","signature_type":"Function","signature_version":"v1","deprecated":false,"id":"ASB-A-435188844-f4ed263d"}],"types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-435188844.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-06-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647","https://android.googlesource.com/platform/frameworks/base/+/97e34e5a6bfa57236995550c5d1d12f979c29ab6","https://android.googlesource.com/platform/frameworks/base/+/ef604aa614d6de762954f80b64d9fdbba43a04e5"],"spl":"2026-06-01","vanir_signatures":[{"digest":{"length":197,"function_hash":"155955387924007233392608071178537083333"},"source":"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647","target":{"function":"getComponentEnabledSetting","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-22629813"},{"digest":{"threshold":0.9,"line_hashes":["292900562621289740165420360404681557470","254099383506272289078753119801457610562","8382420818903945909209296020667851894","159971660088949769821375506581406084819","36913861435273227248918589552137622929","36963201016912102583229836077585078143","55766225966301963280177765834222273378","41950295011078535475049143437751156035","41380579415712750401924041556804812701","85770552592431473164032735928327496872","219997553884769946559652061920708055675","198234216519597277862920543544592306576","1487286327549188928671549598742772044"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/97e34e5a6bfa57236995550c5d1d12f979c29ab6","signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-435188844-497cb12a"},{"digest":{"length":1313,"function_hash":"218154990225916159172293927134632331536"},"target":{"function":"resolveContentProvider","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/ef604aa614d6de762954f80b64d9fdbba43a04e5","signature_type":"Function","signature_version":"v1","deprecated":false,"id":"ASB-A-435188844-577a65c0"},{"digest":{"length":1878,"function_hash":"162419856787718227743110672559810970109"},"target":{"function":"getInstalledApplications","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-77045391"},{"digest":{"length":1888,"function_hash":"86954973004694357275985886223532729658"},"target":{"function":"queryIntentServicesInternal","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-a286a67f"},{"digest":{"length":1211,"function_hash":"249151320877369229577323512686903901657"},"target":{"function":"resolveContentProvider","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/97e34e5a6bfa57236995550c5d1d12f979c29ab6","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-a45054c6"},{"digest":{"threshold":0.9,"line_hashes":["57339914458931691710384622355105500640","96745049509738410035755485359915924349","256033668868439213716330198766041779588","72923278655251581498243308851500364391","98905019191585788313594137073002121425","267145194869585725088647465490166871692","178824460229124039209746682262284872734","32888512578613526980746288787537898207","264875104936512111300848035006535202788","271655580764290341023650166012204054618","29740387121134890746022108021521388352","232740267204609464100447218023341939531","544833157332720308311909603872673442","126765616413512870019687800692235248867","197867991546047462033292404306628545077","25690728072073030173148040545132618370","290442913872884727345794975608903147363","310151990810170675759313300378787045167","95997925121681771021803279627538258027","215555870435068607277313027158318557484","222528837614798955560984759610539387666","281153006355958011749245036745581092893","91837217503181450060727752121693815721","97832320229534722407012942704610568251","154573272478387978490097957500149675549","211002399056754244271423834466983655530"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647","signature_type":"Line","signature_version":"v1","deprecated":false,"id":"ASB-A-435188844-c15d81bf"},{"digest":{"length":449,"function_hash":"102896054550205968779892655968754707601"},"target":{"function":"hasCrossUserPermission","file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647","signature_version":"v1","signature_type":"Function","deprecated":false,"id":"ASB-A-435188844-d9b807a0"},{"digest":{"threshold":0.9,"line_hashes":["227316091039036741688165405033312270495","168041188259495589488515740846403180969","296082808144919494521700876815600945391","99142030560691458793086281728954589051","139900786063038530169935772350342113882","108281999829929096221549010765423657699","200989171371557913724393867628334998461"]},"target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/ef604aa614d6de762954f80b64d9fdbba43a04e5","signature_version":"v1","signature_type":"Line","deprecated":false,"id":"ASB-A-435188844-ec547ff1"}],"types":["ID"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-435188844.json"}}],"schema_version":"1.7.5"}