{"id":"ASB-A-471173239","details":"In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-471173239","CVE-2026-0094"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/b8d3fe7c5e4b3b637c37c77fa31a026b3bf03818"}],"affected":[{"package":{"name":"platform/packages/apps/KeyChain","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"line_hashes":["26687373485879391662561325096342427190","10564120794107447998862692671314800852","334786948668186791478667143733520750042","195454848540004563348757865935509402405","259441048041282786093793524702039661347","107820713247193742428586680493675422330","293227346220967011805556519508892492054","128544837652075124560358436014501237450","317048380878952574016295194129660067147","294065243487837461116566329224669477416","253516173234571607432916551470524949743","36981083390145988513535660273564440671","123880397416625023861882326713496867314","200867467935981279924066975327163370854","167851226727725959219140596888092811555","132044811077109378497839070930778047943","334117210891919007265941916267990304455"],"threshold":0.9},"id":"ASB-A-471173239-8f4618ba","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/63b405131fb57386e4157218c124813952267bc6","target":{"file":"src/com/android/keychain/KeyChainActivity.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/63b405131fb57386e4157218c124813952267bc6","target":{"function":"getApplicationLabel","file":"src/com/android/keychain/KeyChainActivity.java"},"deprecated":false,"digest":{"function_hash":"278906053347869451486875652198283524472","length":216},"id":"ASB-A-471173239-f3e6d939"}],"fixes":["https://android.googlesource.com/platform/packages/apps/KeyChain/+/63b405131fb57386e4157218c124813952267bc6"],"severity":"High","spl":"2026-06-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-471173239.json"}},{"package":{"name":"platform/packages/apps/KeyChain","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-06-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"target":{"function":"getApplicationLabel","file":"src/com/android/keychain/KeyChainActivity.java"},"deprecated":false,"digest":{"function_hash":"278906053347869451486875652198283524472","length":216},"id":"ASB-A-471173239-c947540e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/7a734d424c21f937601b89bae1dc90e07e27de03"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/7a734d424c21f937601b89bae1dc90e07e27de03","target":{"file":"src/com/android/keychain/KeyChainActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26687373485879391662561325096342427190","10564120794107447998862692671314800852","334786948668186791478667143733520750042","195454848540004563348757865935509402405","259441048041282786093793524702039661347","107820713247193742428586680493675422330","293227346220967011805556519508892492054","128544837652075124560358436014501237450","317048380878952574016295194129660067147","294065243487837461116566329224669477416","253516173234571607432916551470524949743","36981083390145988513535660273564440671","123880397416625023861882326713496867314","200867467935981279924066975327163370854","167851226727725959219140596888092811555","132044811077109378497839070930778047943","334117210891919007265941916267990304455"]},"id":"ASB-A-471173239-e82da58d","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/apps/KeyChain/+/7a734d424c21f937601b89bae1dc90e07e27de03"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-471173239.json"}},{"package":{"name":"platform/packages/apps/KeyChain","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"digest":{"function_hash":"278906053347869451486875652198283524472","length":216},"id":"ASB-A-471173239-81d66a41","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/fcf77cbf5b240d8b82767b1d510c792510c923b4","target":{"function":"getApplicationLabel","file":"src/com/android/keychain/KeyChainActivity.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/fcf77cbf5b240d8b82767b1d510c792510c923b4","target":{"file":"src/com/android/keychain/KeyChainActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26687373485879391662561325096342427190","10564120794107447998862692671314800852","334786948668186791478667143733520750042","195454848540004563348757865935509402405","259441048041282786093793524702039661347","107820713247193742428586680493675422330","293227346220967011805556519508892492054","128544837652075124560358436014501237450","317048380878952574016295194129660067147","294065243487837461116566329224669477416","253516173234571607432916551470524949743","36981083390145988513535660273564440671","123880397416625023861882326713496867314","200867467935981279924066975327163370854","167851226727725959219140596888092811555","132044811077109378497839070930778047943","334117210891919007265941916267990304455"]},"id":"ASB-A-471173239-b6a77adb"}],"fixes":["https://android.googlesource.com/platform/packages/apps/KeyChain/+/fcf77cbf5b240d8b82767b1d510c792510c923b4"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-471173239.json"}},{"package":{"name":"platform/packages/apps/KeyChain","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-06-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/a87784d5b7780b9f821431131a99ce59906ef6e8","target":{"file":"src/com/android/keychain/KeyChainActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26687373485879391662561325096342427190","10564120794107447998862692671314800852","334786948668186791478667143733520750042","195454848540004563348757865935509402405","259441048041282786093793524702039661347","107820713247193742428586680493675422330","293227346220967011805556519508892492054","128544837652075124560358436014501237450","317048380878952574016295194129660067147","294065243487837461116566329224669477416","253516173234571607432916551470524949743","36981083390145988513535660273564440671","123880397416625023861882326713496867314","200867467935981279924066975327163370854","167851226727725959219140596888092811555","132044811077109378497839070930778047943","334117210891919007265941916267990304455"]},"id":"ASB-A-471173239-aa357ca4","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-471173239-c33a69c7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/a87784d5b7780b9f821431131a99ce59906ef6e8","target":{"file":"src/com/android/keychain/KeyChainActivity.java","function":"getApplicationLabel"},"deprecated":false,"digest":{"function_hash":"278906053347869451486875652198283524472","length":216}}],"fixes":["https://android.googlesource.com/platform/packages/apps/KeyChain/+/a87784d5b7780b9f821431131a99ce59906ef6e8"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-471173239.json"}},{"package":{"name":"platform/packages/apps/KeyChain","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-06-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/4be5fc7cab669c6e9a2100a1b9ad0c6c0ced6955","target":{"file":"src/com/android/keychain/KeyChainActivity.java"},"deprecated":false,"digest":{"line_hashes":["26687373485879391662561325096342427190","10564120794107447998862692671314800852","334786948668186791478667143733520750042","195454848540004563348757865935509402405","259441048041282786093793524702039661347","107820713247193742428586680493675422330","293227346220967011805556519508892492054","128544837652075124560358436014501237450","317048380878952574016295194129660067147","294065243487837461116566329224669477416","253516173234571607432916551470524949743","36981083390145988513535660273564440671","123880397416625023861882326713496867314","200867467935981279924066975327163370854","167851226727725959219140596888092811555","132044811077109378497839070930778047943","334117210891919007265941916267990304455"],"threshold":0.9},"id":"ASB-A-471173239-249fac11"},{"target":{"file":"src/com/android/keychain/KeyChainActivity.java","function":"getApplicationLabel"},"deprecated":false,"digest":{"function_hash":"278906053347869451486875652198283524472","length":216},"id":"ASB-A-471173239-df09e297","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/KeyChain/+/4be5fc7cab669c6e9a2100a1b9ad0c6c0ced6955"}],"fixes":["https://android.googlesource.com/platform/packages/apps/KeyChain/+/4be5fc7cab669c6e9a2100a1b9ad0c6c0ced6955"],"severity":"High","spl":"2026-06-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-471173239.json"}}],"schema_version":"1.9.0"}