{"id":"ASB-A-467684755","details":"In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-467684755","CVE-2026-0054"],"modified":"2026-09-09T15:15:54.249544283Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2ecd01f868b7b8c39f46428d03770c00e0749b72"],"severity":"High","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-467684755.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3331f023ee41aa5852fcf2fe11db494989a4942d"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-467684755.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b96890fa85a31106f04a74e0b1335f3a09a56ffe"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-467684755.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6b799738675a9d4afd8763b514ba57d005bc42e7"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-467684755.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-09-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-09-01","types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6b3e2167e2d0c271eaa0602f9a8c965c32edac11"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-467684755.json"}}],"schema_version":"1.9.0"}