{"id":"ASB-A-473005624","details":"In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-473005624","CVE-2026-0096"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/24b35b078f392dc4d649338ec123dd3f8928440b"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/62b7a2483f4eef4ff0f02ccb81fe6cfea9819ef8","target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java"},"deprecated":false,"digest":{"line_hashes":["159324348765147310522604654680846368000","41991939993019617369715164125433827417","25263024759571172987283809017921453145","15057426393544080933666848142032792581","284048333391037264030703705924151321501","121146827228712055477810338936247853420","240692908214260540521571245005001803379","278255309700569017139674697718274297938","250098259322782252527027101157448521637"],"threshold":0.9},"id":"ASB-A-473005624-244c7946","signature_type":"Line"},{"digest":{"function_hash":"53590786290521689243474473953963296370","length":255},"id":"ASB-A-473005624-f5a1ad8c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/62b7a2483f4eef4ff0f02ccb81fe6cfea9819ef8","target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java","function":"getAppLabel"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/62b7a2483f4eef4ff0f02ccb81fe6cfea9819ef8"],"severity":"High","spl":"2026-06-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-473005624.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/08db8c5058a3257b9dbc8ba2647bf7d0b46a42a9","target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java"},"deprecated":false,"digest":{"line_hashes":["159324348765147310522604654680846368000","41991939993019617369715164125433827417","25263024759571172987283809017921453145","15057426393544080933666848142032792581","284048333391037264030703705924151321501","121146827228712055477810338936247853420","240692908214260540521571245005001803379","278255309700569017139674697718274297938","250098259322782252527027101157448521637"],"threshold":0.9},"id":"ASB-A-473005624-2624d8f6","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/08db8c5058a3257b9dbc8ba2647bf7d0b46a42a9","target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java","function":"getAppLabel"},"deprecated":false,"digest":{"function_hash":"53590786290521689243474473953963296370","length":255},"id":"ASB-A-473005624-51188aa8"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/08db8c5058a3257b9dbc8ba2647bf7d0b46a42a9"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-473005624.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-06-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"severity":"High","spl":"2026-06-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["159324348765147310522604654680846368000","41991939993019617369715164125433827417","25263024759571172987283809017921453145","15057426393544080933666848142032792581","284048333391037264030703705924151321501","121146827228712055477810338936247853420","240692908214260540521571245005001803379","278255309700569017139674697718274297938","250098259322782252527027101157448521637"],"threshold":0.9},"id":"ASB-A-473005624-36de580c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/db5cc76685baaa0b82b4628da239d89e641812a4","target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"53590786290521689243474473953963296370","length":255},"id":"ASB-A-473005624-6ce25535","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/db5cc76685baaa0b82b4628da239d89e641812a4","target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java","function":"getAppLabel"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/db5cc76685baaa0b82b4628da239d89e641812a4"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-473005624.json"}}],"schema_version":"1.9.0"}