{"id":"ASB-A-482024712","details":"In setProvisioning of EnterpriseProvisioningWrapper.java, there is a possible local bypass of user interaction requirements on package installation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-482024712","CVE-2026-45522"],"modified":"2026-11-03T17:44:55.642301420Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/packages/apps/ManagedProvisioning","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8"],"severity":"High","spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8","target":{"function":"verifyActionAndCallerInner","file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"},"deprecated":false,"digest":{"function_hash":"220262975009191960028187275266101907036","length":475},"id":"ASB-A-482024712-4440ee92","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8","target":{"file":"src/com/android/managedprovisioning/common/Globals.java"},"deprecated":false,"digest":{"line_hashes":["101977703831286833404947090558882533891","79528439821016581726390354556650250724","110628985262927932226201206664334467886"],"threshold":0.9},"id":"ASB-A-482024712-46a1ba16"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["234386524556167911415314882076874463555","100779069912042773471003773619909090394","102622712216492252712970956182813507611","128727856196892671407637945168632125947","3363069296211027055243577965575008862","120237504258966383069508387728616585931","8251588826120684776545440082453682050","212439321413227085732384524619099854882","191934219505742740381089598127273525815","186182902646409464002697776283655398623","98272384021563122742223539537536677623","206713745442346364713057073319978224460"]},"id":"ASB-A-482024712-52048703","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8","target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"}},{"package":{"name":"platform/packages/apps/ManagedProvisioning","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"},"deprecated":false,"digest":{"line_hashes":["234386524556167911415314882076874463555","100779069912042773471003773619909090394","102622712216492252712970956182813507611","128727856196892671407637945168632125947","3363069296211027055243577965575008862","120237504258966383069508387728616585931","8251588826120684776545440082453682050","212439321413227085732384524619099854882","191934219505742740381089598127273525815","186182902646409464002697776283655398623","98272384021563122742223539537536677623","206713745442346364713057073319978224460"],"threshold":0.9},"id":"ASB-A-482024712-5c8f164f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee","target":{"file":"src/com/android/managedprovisioning/common/Globals.java"},"deprecated":false,"digest":{"line_hashes":["101977703831286833404947090558882533891","79528439821016581726390354556650250724","110628985262927932226201206664334467886"],"threshold":0.9},"id":"ASB-A-482024712-d4b90f8f","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"220262975009191960028187275266101907036","length":475},"id":"ASB-A-482024712-ddc52f4c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee","target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java","function":"verifyActionAndCallerInner"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"}},{"package":{"name":"platform/packages/apps/ManagedProvisioning","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246","target":{"file":"src/com/android/managedprovisioning/common/Globals.java"},"deprecated":false,"digest":{"line_hashes":["101977703831286833404947090558882533891","79528439821016581726390354556650250724","110628985262927932226201206664334467886"],"threshold":0.9},"id":"ASB-A-482024712-855f156f"},{"deprecated":false,"digest":{"line_hashes":["234386524556167911415314882076874463555","100779069912042773471003773619909090394","102622712216492252712970956182813507611","128727856196892671407637945168632125947","3363069296211027055243577965575008862","120237504258966383069508387728616585931","8251588826120684776545440082453682050","212439321413227085732384524619099854882","191934219505742740381089598127273525815","186182902646409464002697776283655398623","98272384021563122742223539537536677623","206713745442346364713057073319978224460"],"threshold":0.9},"id":"ASB-A-482024712-b4dd14b5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246","target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246","target":{"function":"verifyActionAndCallerInner","file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"},"deprecated":false,"digest":{"length":475,"function_hash":"220262975009191960028187275266101907036"},"id":"ASB-A-482024712-bd220c20"}],"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"}},{"package":{"name":"platform/packages/apps/ManagedProvisioning","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["101977703831286833404947090558882533891","79528439821016581726390354556650250724","110628985262927932226201206664334467886"]},"id":"ASB-A-482024712-3217096e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb","target":{"file":"src/com/android/managedprovisioning/common/Globals.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb","target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"},"deprecated":false,"digest":{"line_hashes":["234386524556167911415314882076874463555","100779069912042773471003773619909090394","102622712216492252712970956182813507611","128727856196892671407637945168632125947","3363069296211027055243577965575008862","120237504258966383069508387728616585931","8251588826120684776545440082453682050","212439321413227085732384524619099854882","191934219505742740381089598127273525815","186182902646409464002697776283655398623","98272384021563122742223539537536677623","206713745442346364713057073319978224460"],"threshold":0.9},"id":"ASB-A-482024712-67714aa5","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":475,"function_hash":"220262975009191960028187275266101907036"},"id":"ASB-A-482024712-a0aa23c7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb","target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java","function":"verifyActionAndCallerInner"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"}},{"package":{"name":"platform/packages/apps/ManagedProvisioning","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0"],"severity":"High","spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-482024712-070888c2","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0","target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"},"deprecated":false,"digest":{"line_hashes":["234386524556167911415314882076874463555","100779069912042773471003773619909090394","102622712216492252712970956182813507611","128727856196892671407637945168632125947","3363069296211027055243577965575008862","120237504258966383069508387728616585931","8251588826120684776545440082453682050","212439321413227085732384524619099854882","191934219505742740381089598127273525815","186182902646409464002697776283655398623","98272384021563122742223539537536677623","206713745442346364713057073319978224460"],"threshold":0.9}},{"id":"ASB-A-482024712-779e6a92","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0","target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java","function":"verifyActionAndCallerInner"},"deprecated":false,"digest":{"function_hash":"220262975009191960028187275266101907036","length":475}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0","target":{"file":"src/com/android/managedprovisioning/common/Globals.java"},"deprecated":false,"digest":{"line_hashes":["101977703831286833404947090558882533891","79528439821016581726390354556650250724","110628985262927932226201206664334467886"],"threshold":0.9},"id":"ASB-A-482024712-ff0ee458","signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"}},{"package":{"name":"platform/packages/apps/ManagedProvisioning","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d","target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"},"deprecated":false,"digest":{"line_hashes":["234386524556167911415314882076874463555","100779069912042773471003773619909090394","102622712216492252712970956182813507611","128727856196892671407637945168632125947","3363069296211027055243577965575008862","120237504258966383069508387728616585931","8251588826120684776545440082453682050","212439321413227085732384524619099854882","191934219505742740381089598127273525815","186182902646409464002697776283655398623","98272384021563122742223539537536677623","206713745442346364713057073319978224460"],"threshold":0.9},"id":"ASB-A-482024712-706ac887","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d","target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java","function":"verifyActionAndCallerInner"},"deprecated":false,"digest":{"length":475,"function_hash":"220262975009191960028187275266101907036"},"id":"ASB-A-482024712-80b79654"},{"id":"ASB-A-482024712-8361b830","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d","target":{"file":"src/com/android/managedprovisioning/common/Globals.java"},"deprecated":false,"digest":{"line_hashes":["101977703831286833404947090558882533891","79528439821016581726390354556650250724","110628985262927932226201206664334467886"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482024712.json"}}],"schema_version":"1.9.2"}