{"id":"ASB-A-452010556","details":"In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-452010556","CVE-2026-0061"],"modified":"2026-09-15T16:26:34.087665475Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/4518f78f8b34510a1329c60dc5e0b018f015a6e3"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"severity":"High","spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"core/java/android/window/SnapshotDrawerUtils.java"},"deprecated":false,"digest":{"line_hashes":["208536472408335385333295001693958171659","92921532584501547982983232518037797462","161752496325582586515317682944964764424","315678205046373786262785387319609067509","64228149780110296257553861832305208334","196556617660966524509401616103204201100","245862704243473066680785578318408587990","32357106102579850749877283717452206279","261274359568364679007874732694221050584","89959923726058016500765525838643169044","122345702955648808075386222577436047440","25633519463098651171654443785910403542","61081315963881908221174502598754814705","179401004312358943371861261667264222554","95677015135192826458335275221094906412","315054658759605726418748239813809096631","229342995031169460991768403786464000768","1406260197044388531441406414153842396","279155044334446074064075240561480828313","92483721308659551162614145917861137814","162314242146118470097922393736338517318","39111417932296375385525683379893771194"],"threshold":0.9},"id":"ASB-A-452010556-02ec5f17"},{"deprecated":false,"digest":{"function_hash":"74417643193888580087294752461585692940","length":1077},"id":"ASB-A-452010556-20bc9873","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"sendAppVisibilityToClients"}},{"digest":{"length":423,"function_hash":"233835140382943319521149036762947111739"},"id":"ASB-A-452010556-247f915c","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"WindowStateAnimator","file":"services/core/java/com/android/server/wm/WindowStateAnimator.java"},"deprecated":false},{"target":{"file":"core/java/android/view/ViewRootImpl.java"},"deprecated":false,"digest":{"line_hashes":["280635458621433388693517937334005060230","162528167769117407903578241676998504780","290011794766245030940860611165838769373","140424577218656209414106365078343333008","35900913684904431855516015899552070732","193381165109962501164358224317203864217","95870253939295292396907679847553648321","25151428725006650398755218181948236808","87650072818640098887823115373187564436","327256124223818411549955265838230231832","211862364804083708206695421895453354111","214848032902671922304059156670556790045","155399750901203065799420209049631826212","70617508994565217323134670733672045015","330018301120624978824298753889716617238","175159009456718798931377646371590754872","317771468529482879554509169351065093281","181037068568566142123866580528229334179","225647784353666071263019691125474490509","241045819410380802237629896961716468444","5991829730852748495124994390027069150","16347419994698975658133025271198226095","334950355770221274279141538853028846096","273464574610629873576898576137330992007","157075124990970450683069689876080339815","103286282941530789839000297617083140710","106125698860029591042240307128859909859","148436244041268620751755476510232216140","166351732457938400029649768736903354822","158640195420488270906595961140708871485","71923454418953888855144483537047468170","313091689929875953515132506712782286232","15008762765740809063881394710683505504","244656317248174326185609540630880535627","320915906684615023575403315521063879127","30286625818807754769474029095727294173","221209740219484994484173085762484109456","18858390344136544078892462213480923893","39880488366250582505660662563415556464","265832560031401909451473248280650528411","19513317371088151741387224072652064351","260902376422399539648716687426604643202","211092428831345854034939888736954206095","204644419289004980864402532972957513017","121495442638265606309184449328611447526","245453348520593957905791138186266440439","42837952922722756898929247226537290701"],"threshold":0.9},"id":"ASB-A-452010556-296ee3ef","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed"},{"target":{"file":"services/core/java/com/android/server/wm/WindowManagerService.java","function":"addWindowInner"},"deprecated":false,"digest":{"function_hash":"294869877026315846660662683679642153379","length":3795},"id":"ASB-A-452010556-345fc549","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"performShowLocked","file":"services/core/java/com/android/server/wm/WindowState.java"},"deprecated":false,"digest":{"length":1330,"function_hash":"190529080102488794836235344695406134494"},"id":"ASB-A-452010556-3f96883e"},{"deprecated":false,"digest":{"function_hash":"168182897507115103219437882724656682691","length":11937},"id":"ASB-A-452010556-44d82a0d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowManagerService.java","function":"relayoutWindow"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"libs/WindowManager/Shell/src/com/android/wm/shell/startingsurface/TaskSnapshotWindow.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["49442533533595852153176553593007803968","9673562386502278983845950468954828539","205971922240660952360015674526685962315","245276645794459304337190320961993258974","150015790779092224384509034532968393018","327208999174065086197275988124637486105","82837957841548846207639607288734641647","129833833214878254943256302185369946640","170171800303344378098573966710077932340","300531730997161794660948746987378166185","235808364208021452663558114694092781258","228213997607467418943499335557035908841","220633780593900801784199396005516999945","107561062142398334047235774890710382692","15164453684942270659399639009068987442","285182671055983426954919587996928809782","222239007016012512259711426895878972944","223284298015815281911764903207055038330","245711705137800799084951446069154802392","84788689897926549687718804218695836956","120344006254067486562226277414729724955","274484498884978001221323183594834603923","19533003575424514951040837312519177956","125045131184527240295051858573642944881","225329237076503072855305515891562205396","328008853499034516907243112111264143430","51924351755952526575361761291465029127","134830213826836562753472914977882236862","57556791957179299285619788344311494264","174309977770679347413263579232991522473","31045910057181171438129486082692791453","29423682051717890947076249319550457265","196379433459528869359585898124878795986","331190054247093594002573618617708973011","283817860567163751241497690023432830483","86427125076598184756280723187438449074","286839175131599770483948570512344212798","250514654723008793361962185271807245522","289631674827069945041736710327837025364","220877895704276528255757381959374721628","190709419785564894800468424010722632555","25036038655135835930598776082672738905","289576438897952843018545446278178177947","335310715073996753124463091590083552090","102515252595899897253799959506026745426","269486685812309974258983585221565447116","82798854790618286281453085780093825715","339860136730551370150923379704882272697","172337100482398832716910433581909165516","64488601192964787279856574816359317971","38821198175918169537270946844660976613","209315731593121994268766737788773497752","153440597234849663453257403177849649444","266408077164671399476681953241754697205","312267248786536111892595391514203064506","292624039442606415956804547036885804631","326290011285450121942793739377714260777","258268333381536066362574626576969365876","55374184056890124673535974048643766928","253347372088726094724738419867405071936","214302553514794209730121069936186783691","259831047324623114959818787524588566484","66428244109836507893117949447600097607","221416231731231365494521378325383455486","241823434307532246988528040140739611881","52971753199174292895342585392143201952","253236423531366531524129444515577159301","259844554743398525960758811804305128121","49383751680876573358147113527446406025","192926202915258891276702743622728315084","206209365975012391341763997256299443379","190993223643896386120178908555953871492","299171613908227873079301547862910745743","260738483514476425316089161130647241940","151251536624477562880887529938693828646","159629865385491677606740286143366626555","124183243405299087334690392210729395103","239346472267149679878510204593147917217","206289071807806525402145375280324271289","120322104921551224056920995032753986464","286179994403265170197879432628299758197","60672896871329387523732049485625094547"]},"id":"ASB-A-452010556-4525ec9b","match_only_versions":["17-next"]},{"target":{"file":"services/core/java/com/android/server/wm/WindowManagerService.java"},"deprecated":false,"digest":{"line_hashes":["185478933049252576176852078803257425169","46756815176555032517423718359188285399","254309522530080391328680238301627611417","32006405646904515504105966848934850600","289854109053482787870431807861305133213","148962303938283668682487747551417450965","333227554977937827832588349654565703576","135174414571546661149463386236487787485","298403954011760986543588758974215797393","197114452137556128484335842902002837577","284016640588968801476178838436780467998","254846682561550691395530779644803713400","138115679692715625326968591290019605833","165887594080548385487214939959200210239","82798536272855574683592044997450344448","273166389903918808124660395984758703302","271602089896997578898041760688698530298","302643467532909533579183436452390752211","217309496524694244732137700643011243559","1410429180334408190564621889269327089","127473829799221349206183287996241494252","275206165575645579557524803783468572603","211298484564935134227003057435656994406","9390850373047511925595748263277881054","210349809752133576954778839653037881119","229029922739396567241708562090695438819","263978265997621931300647508172860859431","37625632526109881618740106297545169753","111570416340462057672634634679311194874","98874304031784546846782718758413894222","108165551333859031777064288181467849713","68271808188444839934434182650490510005","9021276939097382078026546827532187192","252049728701268148822032499077141604448","150381662025986017910646042164404108908","283563478472227569338075249052379150763","97280941797944976449617612259061471215","333057240843428954362705756811264671712","95451478706597608191043625976683817356","225859997943724785861959105865354156543","166331029728754080163101214966769889256","338744667216291713061329529324410730001","271184071338512566624270354001986191488","294152069364950756322230594064942423528","286271889150785755064305274499152345648","225048767282036074872898989293427643977","87041162058873608049595507397890933694","337479405993965850693335251465539798545","233832859311156775506309828939082986994","149278605671306416624532647485005952400","33028000583284283648174846562569725908","96441143094464190991372662504071882985","197666727365417304425377769048947705808","223969783721625969413907189069174423116","250841852232931731943220852058135194053","35732734061889961763733159769389821497","97450810596125629975758331305963158923","285386003143024643952353981146441719539","94222926264683892297076170556341158539","192697649127814772732552804986489873134","152424893264709737632971073116004314003","290464739488108381225827197680076419528","309857541327069468441147202437344270953","232711249438917105214930260683983774673","201186919478033156420905120430971568076","60502389714004882539820685545250292267","10420960022382988774159963899633802995","266567186671247452778401110687729488993","334349485885003579253890505444479619934","93864151758249150259446964940591695638","240810502343954141142523887462805282795","151343910445966843759646882927553160091","107463209172865853886497631319962732685","289059228918820222110200779682199249310","174164969914689595012307526137574824471","87374977565979387499549434071129086187","178645730874014461916545525037661531720","9065337333517913397529730037328144558","291185487188670616087359721149523029011","244584912921046038844409023615719018332","28756176909580467764815422695469943119","223281154372272608779498516009164483662","258434483013852221729210690285385520006","71897366905454992888207656628548899079","135684599194104391441523486721310679645","139379026328123251350841576607453384405","45195973559189353979472274115709586219","242530936058733939405154535897660773948"],"threshold":0.9},"id":"ASB-A-452010556-467ec2fe","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed"},{"target":{"file":"core/java/android/service/wallpaper/WallpaperService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["297671904695547420512849551846318293825","50879167566555447788276218536114216917","134196040906869933439117754265034542813","268539493093940733621037681217847149222","226169842462743008654312303130520673000","44910379140285235299100702402093867311","28775168840027622509529867691897922968","64751920296152958203482927897480581688","230180357287550840934976828594544049861","73396642621665002210382040922842497133","221099663724783564449995272561050021715","109184604989078564951621207972286982960","337207836395485830517745868703695519223","98668843852407332292428186635833897953","60275489848247818984300786976663106102","200778023234659998772990707367643604953","216580866180454368669936732787451388950","285561779628429496295974689454689884862","283908232369040961365292607668455359066","309549361624050234888878739725385174737","197402721424295116503708323344144604134","101401840349429564814862586143245539519","161046923961665746012968475045500665147","238680923879998024054444154576605894266","187438088546703981785742474621684747684","203639462306984652635177913934742701562","143979978186026877375698229779855143371","238536382958329532111940269717189387385","82308426503167714584124269896844043720","151737511046502285343645191040062807914","175326534687487351529868950085162360019","192429513324739439686531751295691865469","183456925972992552516420375925438392825","115809048521231525854121716558797615256","323661259736711748134440933191396542489","101461446068276079303110227086362795811","282627234336294809907086740370157449531","92714591009550727388810558901471523540","212488827292133460851188961288409213493","40233392971565921222532172384238790582","195062071042142361829609369598113740107","103112478456799968048087417399077439319","1560502823676470938944272452533294695"]},"id":"ASB-A-452010556-4ecb9812","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/Session.java","function":"relayout2"},"deprecated":false,"digest":{"function_hash":"76343064624509323194949497897266436385","length":303},"id":"ASB-A-452010556-4ffd06f7","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"224060946801312147741537730107567892183","length":270},"id":"ASB-A-452010556-55304b74","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/Session.java","function":"relayoutAsync2"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"createSurfaceLocked","file":"services/core/java/com/android/server/wm/WindowStateAnimator.java"},"deprecated":false,"digest":{"length":2548,"function_hash":"12439647822053156049952466632682354937"},"id":"ASB-A-452010556-55eaa980","match_only_versions":["17-next"]},{"match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowStateAnimator.java","function":"hide"},"deprecated":false,"digest":{"length":617,"function_hash":"78780377778886898288163211195803188699"},"id":"ASB-A-452010556-5bc3be22"},{"deprecated":false,"digest":{"function_hash":"112339389463829872067814569704926931232","length":423},"id":"ASB-A-452010556-638dcbb6","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"apct-tests/perftests/windowmanager/src/android/wm/RelayoutPerfTest.java","function":"RelayoutRunner"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"executeDrawHandlers"},"deprecated":false,"digest":{"function_hash":"210512339428859064495155072493363893308","length":793},"id":"ASB-A-452010556-68317674","match_only_versions":["17-next"]},{"source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"core/java/android/view/ViewRootImpl.java","function":"canRelayoutAsync"},"deprecated":false,"digest":{"function_hash":"259494850086037824422439391238898543174","length":1382},"id":"ASB-A-452010556-7e7115ce","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":326,"function_hash":"184629768917100676530842628889070386086"},"id":"ASB-A-452010556-87da5d89","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"apct-tests/perftests/windowmanager/src/android/wm/RelayoutPerfTest.java","function":"runBenchmark"}},{"target":{"file":"core/java/android/view/WindowlessWindowManager.java","function":"relayoutAsync"},"deprecated":false,"digest":{"function_hash":"27039739204442239518002310468749294764","length":244},"id":"ASB-A-452010556-8ced0b2f","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed"},{"digest":{"function_hash":"323040584942767616586797895200559901987","length":328},"id":"ASB-A-452010556-95102229","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"setViewVisibility"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"core/java/android/view/WindowlessWindowManager.java","function":"relayout2"},"deprecated":false,"digest":{"function_hash":"239066434021974608520351696965179859044","length":260},"id":"ASB-A-452010556-96d423b7","match_only_versions":["17-next"]},{"digest":{"length":1028,"function_hash":"109524242538516390912890363777801392123"},"id":"ASB-A-452010556-9bbd084d","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"initializeSurface","file":"core/java/android/service/wallpaper/WallpaperService.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["280424570501394923531545687135333994361","291167666719110302688450694655178178843","243806603201580763377695323477989140389","166222719958822415945666183480478307956","70276143883771019278327881335497854076"],"threshold":0.9},"id":"ASB-A-452010556-9ea971ac","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"core/java/android/view/WindowManager.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"apct-tests/perftests/windowmanager/src/android/wm/RelayoutPerfTest.java"},"deprecated":false,"digest":{"line_hashes":["234350429741885408686014665845332870431","241209709020853210535156580153747045146","298531193843785762558071670854224995082","42251261730896621771433284503783992566","316949569794257597619909983334127974095","254229295833432907398740713030752915973","278301821236634455223031144428150739428","281502706799807890832391910945889018063","116371382474131582639278342870319793763","57792426064408747417435530202087975565","66075218002167347733861134654936919130","144883764722389636077643944591205866165","199121322240313424790599530978577833228"],"threshold":0.9},"id":"ASB-A-452010556-9edd412f","match_only_versions":["17-next"],"signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"updateSurface","file":"core/java/android/service/wallpaper/WallpaperService.java"},"deprecated":false,"digest":{"function_hash":"224720298846207806947506053426445509326","length":9746},"id":"ASB-A-452010556-9ef4f8a6","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"showSurfaceOnCreation"},"deprecated":false,"digest":{"function_hash":"208385913612603192778945344504402698421","length":62},"id":"ASB-A-452010556-9f7fd455","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":1378,"function_hash":"71670508452942983864424673295237248520"},"id":"ASB-A-452010556-a014d67a","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"show","file":"services/core/java/com/android/server/wm/WindowState.java"}},{"match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"createSurfaceControl","file":"services/core/java/com/android/server/wm/WindowManagerService.java"},"deprecated":false,"digest":{"length":599,"function_hash":"158520403094176640427307389385857145987"},"id":"ASB-A-452010556-ad735a93"},{"id":"ASB-A-452010556-b6324102","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"relayoutWindow","file":"core/java/android/view/ViewRootImpl.java"},"deprecated":false,"digest":{"function_hash":"116892847692836128110043684323651901825","length":7135}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"core/java/android/view/WindowlessWindowManager.java"},"deprecated":false,"digest":{"line_hashes":["316810330842222858176582944522218877355","202640473296800933586033781598010929279","50156060404399588832106275021220797486","204295111266182931335815733649830377549","257486210096281204474096055907114455717","223333401544666476940118848501882654985","209578373977215573573136526006153042849","267789117927324030841582903474167935061","50907855093429463551390196883479099862","123735263712207008490986267374717711149","165654253423555241204532342681610673940","213643890106082460454498739190134899863","101785217407290344378087701970579847500","277779310222745831743599128763497190469","139038233156152956123665344419282736086","19151579780536144176132110672814056745","268035560573854481383481059072382587328","310340318673021231668075504800311929704","313716115642514534460310399122646135953","41546974131384961788064022265759793384","309893911787259485606611026250165860925","75201001733004504834373586496934197991","177860606839091433213927703641287978928","106073255539546171402376860978713803695","323976827434603759287097812458357599327","43484062269067613121060064103323409869"],"threshold":0.9},"id":"ASB-A-452010556-be9f40fb","match_only_versions":["17-next"],"signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowStateAnimator.java"},"deprecated":false,"digest":{"line_hashes":["148868701325180983390734921103533481659","287613951006946167877108158454725538001","84602040318208514504544692596251417983","73746205000392494152073612489299967508","93184137151550102377920027572594516953","92500136356365603629755823275506751793","74517792303242987532532881073124482506","155647467119368944459349509994901850537","74859492438726777141868276264026724397","337537239908556722773357291072120058941","111610224158884893786666877073315746535","74848578241942700505918281843101076203","115583570113331426819955978635259125176","63369292966190389845753311060867897798","211286263751543384247303110083407087217","255379631252541915582809287935858307207","204134338975134436826528832733720922121","39077999682106659624518190318959540555","67683618499416016627706386852331958759","257706122021773074349911414296465313964","13773623459088096085040017128373288444","269345767346288937296300449006729771142","271826470657858508921506608865535707557","100114316646366570234257099197414505187","24759028094822886682912472601768566243","309772682246948756117787277948105920139","122263981898973974501990141443355948444","16346484520083740112132825794010130826","2364860583046473652064237329985909693","30450777344068195575787584504659205463","253295545978954929906755010157600936864","272848390341590380250929411433509076095","311158160168691846305861688994656928338","216804492987204624456085398460468734670","262716950774661145192880377821990341558","311497366309867642860982150537889223488","217361124291514228910895752365644982922","157925693309430682213135975860162803006","270488710550707155019415684581644962998","57529954734208254576754725234553775012","143116424492881529730170594584225026813","9242180987031471900920051213647363582","118003949162939033604738197870231613565","237088471775160273426222896164841882178","122217898292006493653431879017050593365","103468734336560549689949687859650438936","64655893912098079513156711702861506187","122936989889229852926653770990600542537","223946172413333765975628994511042567393","185780588160674279795851338314176337395","121024037207725693056646585516376582017","278688235570416716555681503034075101992","56193635739365765452944186686948669998","1047122236239956674588888692218511303","235879994676106639524404338484176936159","336117804986041185188346694954730249042","253741207562621807979801601713131762226","63788580713883642495534794937856004763","35838480059737301131435262567980978954","69159845438852339280248633636562570353","208518341673365053392434112418635285339","124893032826139217307100246335777137109","221062983306981010116208014407091995545","171082891850617074481013309875306097351","10863275427490121699954082335312653707","127160745286323285795594012220835179672","265930741220238110610498614961805146715","148075247808382574587928505425436247971","191950697627992114517339138236454072683","120252658619035270743570426414778975351","35473465076297396019769362714935785419","283630944212761404944521990211193136584","142601980854914059100418878492788369487","127373758654162534802197270652764425658","29155510183671454633549526303801687485","145026289423885308503920288072224476198","277519491143764446137887940128263321710","311358903959162414211603075712967308944","61608865776325386128216037703270867518","101758252246459862209525905849739221610","274740214535475569431589492083042114615","158092326395220887320821491048827635412","70192471198335839014588368905126806849","219161868306643263872497287218158249030","321473256011015700699065265789617383188","1941043056113021823389377382409405092","244575524103995163451332459709575244923","111599123590785990603640310546571644565","124659180261956160205864936648762500543","132665609482205713933362827823905210005","166313764765467228342166908909185164931","111966696394032798463194909969092509989","190677063394131069876174430813509810613","273170300504408232642153133138201212515","126140182056901936495839924423043881411","326248226589423703270409255693377101016","320464200943154132067995873238125526904","101564030324177548251722236651884736918","28641151621459730088062380512369879955","22183695679371846435647768270757444393","178928978674936328524960236212486372360","185377736136574457664502503892276073628","24735120622117840078672933565006882237","242770620422287930930327897494551306887","40105975335058550740629379808796766084","220863645611815169724173335133036024015","216667765639271061013528504906828771510","271838454836651019696142591319717686893","18390437123554107827952778395457522860","82035835352037609688966260186339557591","12990382255423670754541461943108359432","321895813278234112831319559421588158259","45814636348998675410411238204873701323","178078984985593832108934316405074804283","338292596719609749339526108041353043978","118228387931441196364473165851182771143","208036323343119000737918303370574772931","33882850242796396330708372288461348912","93708000295174100685118987534030135669","238551804792136693651160342175029589557","190591493029267465860058886286723741556","106626715018564677227703046364000760608","163908967469193945257406222053685498820"],"threshold":0.9},"id":"ASB-A-452010556-c2aa0809","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["239525553670914867113304279534600177151","274607819252412355875752527191232835015","76226274840501517243450674544864782192","95791281839787443788756083765233418829","183979470873951845181269980110438600694","158412068092175249276895300723264412426","268478900238068333784473781629220985932","35260495169962388007867214143259790219","11126000078411018652632601098410251485","225145657283662189016981519282461445957","226872649739373373382857788384262585897","99693019684705800001194506162253998323","259405907789233422796187689667988881105","243342626970002483505095398207457110439","168802897433917938155086626552531402692","225775694364482651725426158682064347603","236200644286659263676475673099196234375","29598621148919168288955467262390108205","224214028686182552477227540409952484021","172200784258630034432146945995698089504","241356606831133824254800509423895912052","257744294380902298033764917116472540022","73327412952021697408563018857527038624","106652839591407881250287060322991069976","302346002587945278282044388449621124078","242370429737751345352884589839323828208","143197918907232611707402772616218540260","52360074216182614704031170568775520313","111090477236128053111174385865157573077","240292977250416709045951822714763132670","98317749963674525638198087419045214225","326797904544279928870782501617803434393","274672234045950718262899431884799270300"]},"id":"ASB-A-452010556-cdecc33d","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/Session.java"}},{"target":{"function":"destroySurface","file":"services/core/java/com/android/server/wm/WindowStateAnimator.java"},"deprecated":false,"digest":{"function_hash":"224179469086863942894758270490998332460","length":767},"id":"ASB-A-452010556-d827e02e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"relayoutAsync","file":"services/core/java/com/android/server/wm/Session.java"},"deprecated":false,"digest":{"function_hash":"229778237847431585403112808439824054262","length":223},"id":"ASB-A-452010556-d87f6e24","match_only_versions":["17-next"]},{"deprecated":false,"digest":{"length":793,"function_hash":"36458934618186977799625706393867834043"},"id":"ASB-A-452010556-db695b6b","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"checkPolicyVisibilityChange"}},{"match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"showRobustly","file":"services/core/java/com/android/server/wm/WindowStateAnimator.java"},"deprecated":false,"digest":{"function_hash":"106442540238726354636340021881826688590","length":616},"id":"ASB-A-452010556-e0d6f2b1"},{"deprecated":false,"digest":{"line_hashes":["232538315207238797093922206853217666531","163349527389480116554948649078804171063","15604627145322788848711930863776297118","53864628443719484326443386268471633107","207029584451509779763905262023841329450","335856830703754744470623322113894195973","165191405461588014100202757032332076041","188791177002321579423544294963826106039","73854981304018516756466501658563448908","104503434339822812441114665131938075027","320480137567982343415049828208536945940","2272135506174357379861977475373247717","89781460750998022263140194914587854600","175271546628757396970075894133957273562","288410651977012936907572577702472545769","130887803400246427775125776221163596382","282564358779480070623229832929013287187","109245480837054816919374535430845117009","99591537734016753168547473657990217342","94397822274727237841724870818150580858","273775866562475387579584742994454576643","203909322426140432772460716763774854065","270129588059533645385111751031744944118","241925904320576947225960053856819012461","298417448785306479402218644759904788602","335032361566255698911858490829776267122","107405721693418843877168144422636241743","226234472868787724575761587997146519756","16218065508013703016784825653120533226","136801742098251481543733864693562347435","128861831918266631968060851779984152647","121363473236019227779001609927069582926","122122973892237361194816921590631556342","315425374639534706730988238581716917123","124488405829993655629465744367454148192","186692026661489936300200870859276971501","131459236473357485925885196638364005273","281146523767300000740257982345282971119","175005218538926631064919609962434412000","272106673724603052378910230338118074203","115834566630087469602968646422881254834","328892504117037399689158135809467032892","6961980978776842620065771239399781080","208427187459335111423401842701438582971","339635642323014274218698666225240630098"],"threshold":0.9},"id":"ASB-A-452010556-e4bcaef8","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowState.java"}},{"digest":{"function_hash":"222085870426206766527989758179032473514","length":407},"id":"ASB-A-452010556-e5c35072","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"function":"relayout","file":"services/core/java/com/android/server/wm/Session.java"},"deprecated":false},{"target":{"function":"create","file":"libs/WindowManager/Shell/src/com/android/wm/shell/startingsurface/TaskSnapshotWindow.java"},"deprecated":false,"digest":{"function_hash":"262590428372497768520790679642637825189","length":3326},"id":"ASB-A-452010556-eb161684","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed"},{"id":"ASB-A-452010556-ed5aa684","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"hide"},"deprecated":false,"digest":{"length":1290,"function_hash":"199469126482013413213262438941925447503"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"destroySurfaceUnchecked"},"deprecated":false,"digest":{"length":615,"function_hash":"120807513768343175765724173529104993889"},"id":"ASB-A-452010556-f76bc8b5","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed","target":{"file":"core/java/android/window/SnapshotDrawerUtils.java","function":"drawSizeMismatchSnapshot"},"deprecated":false,"digest":{"function_hash":"244195307949611502435498612104328889600","length":1024},"id":"ASB-A-452010556-f7b8d9b3","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-452010556-fb17d557","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/47589e30fe8bd9b8884758985bd23fb25b83a8fe","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"hide"},"deprecated":false,"digest":{"length":977,"function_hash":"159025997728744761787732655721851653361"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/47589e30fe8bd9b8884758985bd23fb25b83a8fe","https://android.googlesource.com/platform/frameworks/base/+/afe07297fa67cdd9c54b8b17fdd70d35f23c53ed"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-452010556.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-06-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/837d1ffa54b637de35558c87dae7d0c155721a43","target":{"function":"hide","file":"services/core/java/com/android/server/wm/WindowState.java"},"deprecated":false,"digest":{"length":861,"function_hash":"142158782823989243623119978438196278745"},"id":"ASB-A-452010556-0614470d"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/837d1ffa54b637de35558c87dae7d0c155721a43","target":{"file":"services/core/java/com/android/server/wm/WindowState.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["132273760158267097983055288787745018694","47474440456811787385441026627601259867","242470691432714548066435559718828354906","56253570038693443920346756364922371372","165124606163499328616044586147998878597","156262576093604747735016125120236669588","192755441024916862262803870834814989812","327426287910549702753734403691805186519","121307267217890474450687958466294167117","124008452490842615502247265697895910966","324428782986657472512410250713071903874","308282977652990622579472355143846589277"]},"id":"ASB-A-452010556-2e2f8729","signature_type":"Line"},{"match_only_versions":["15"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/837d1ffa54b637de35558c87dae7d0c155721a43","target":{"function":"checkPolicyVisibilityChange","file":"services/core/java/com/android/server/wm/WindowState.java"},"deprecated":false,"digest":{"length":678,"function_hash":"219547898696826789866437462920609420287"},"id":"ASB-A-452010556-542f0e18"},{"target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"show"},"deprecated":false,"digest":{"length":1073,"function_hash":"295990930738223302744833455286679802854"},"id":"ASB-A-452010556-d36fee16","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/837d1ffa54b637de35558c87dae7d0c155721a43"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/837d1ffa54b637de35558c87dae7d0c155721a43"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-452010556.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-452010556-4d57f745","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/31f2c2486a1af6a3cea4403783978d6544e15d63","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"checkPolicyVisibilityChange"},"deprecated":false,"digest":{"function_hash":"219547898696826789866437462920609420287","length":678}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/31f2c2486a1af6a3cea4403783978d6544e15d63","target":{"file":"services/core/java/com/android/server/wm/WindowState.java"},"deprecated":false,"digest":{"line_hashes":["132273760158267097983055288787745018694","47474440456811787385441026627601259867","242470691432714548066435559718828354906","56253570038693443920346756364922371372","165124606163499328616044586147998878597","156262576093604747735016125120236669588","192755441024916862262803870834814989812","327426287910549702753734403691805186519","121307267217890474450687958466294167117","124008452490842615502247265697895910966","324428782986657472512410250713071903874","308282977652990622579472355143846589277"],"threshold":0.9},"id":"ASB-A-452010556-7d02ecf6"},{"id":"ASB-A-452010556-89986394","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/31f2c2486a1af6a3cea4403783978d6544e15d63","target":{"function":"show","file":"services/core/java/com/android/server/wm/WindowState.java"},"deprecated":false,"digest":{"function_hash":"295990930738223302744833455286679802854","length":1073}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/31f2c2486a1af6a3cea4403783978d6544e15d63","target":{"function":"hide","file":"services/core/java/com/android/server/wm/WindowState.java"},"deprecated":false,"digest":{"function_hash":"142158782823989243623119978438196278745","length":861},"id":"ASB-A-452010556-f3bd14c2","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/31f2c2486a1af6a3cea4403783978d6544e15d63"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-452010556.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-06-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f94bab50c57d490c9d4597d0c077e7610200c71","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"show"},"deprecated":false,"digest":{"length":1209,"function_hash":"8161235701582556819583907762950175376"},"id":"ASB-A-452010556-5e4e82a0"},{"deprecated":false,"digest":{"function_hash":"159025997728744761787732655721851653361","length":977},"id":"ASB-A-452010556-5f240f95","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f94bab50c57d490c9d4597d0c077e7610200c71","target":{"function":"hide","file":"services/core/java/com/android/server/wm/WindowState.java"}},{"deprecated":false,"digest":{"line_hashes":["132273760158267097983055288787745018694","47474440456811787385441026627601259867","242470691432714548066435559718828354906","56253570038693443920346756364922371372","165124606163499328616044586147998878597","156262576093604747735016125120236669588","192755441024916862262803870834814989812","327426287910549702753734403691805186519","121307267217890474450687958466294167117","124008452490842615502247265697895910966","166910566218191803577508002129885722568","203909322426140432772460716763774854065"],"threshold":0.9},"id":"ASB-A-452010556-697d3d98","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f94bab50c57d490c9d4597d0c077e7610200c71","target":{"file":"services/core/java/com/android/server/wm/WindowState.java"}},{"match_only_versions":["16-qpr2"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f94bab50c57d490c9d4597d0c077e7610200c71","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"checkPolicyVisibilityChange"},"deprecated":false,"digest":{"function_hash":"219547898696826789866437462920609420287","length":678},"id":"ASB-A-452010556-ba3acbc3"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2f94bab50c57d490c9d4597d0c077e7610200c71"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-452010556.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-06-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e58fd9cd11e400235ac480b4fba6a20f8161ff9b","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"checkPolicyVisibilityChange"},"deprecated":false,"digest":{"length":678,"function_hash":"219547898696826789866437462920609420287"},"id":"ASB-A-452010556-39caf7e4","match_only_versions":["14"],"signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e58fd9cd11e400235ac480b4fba6a20f8161ff9b","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"show"},"deprecated":false,"digest":{"function_hash":"295990930738223302744833455286679802854","length":1073},"id":"ASB-A-452010556-4247b1ca","signature_type":"Function"},{"target":{"file":"services/core/java/com/android/server/wm/WindowState.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["189797230159533773981665047340823514841","29852250565518537273863339087482042728","177333664150954540924630996645953050901","260092212136069913281304572642024478635","165124606163499328616044586147998878597","156262576093604747735016125120236669588","192755441024916862262803870834814989812","327426287910549702753734403691805186519","121307267217890474450687958466294167117","124008452490842615502247265697895910966","324428782986657472512410250713071903874","308282977652990622579472355143846589277"]},"id":"ASB-A-452010556-97783533","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e58fd9cd11e400235ac480b4fba6a20f8161ff9b"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e58fd9cd11e400235ac480b4fba6a20f8161ff9b","target":{"file":"services/core/java/com/android/server/wm/WindowState.java","function":"hide"},"deprecated":false,"digest":{"function_hash":"142158782823989243623119978438196278745","length":861},"id":"ASB-A-452010556-af2902e5","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e58fd9cd11e400235ac480b4fba6a20f8161ff9b"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-452010556.json"}}],"schema_version":"1.9.0"}