{"id":"ASB-A-494585668","details":"In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-494585668","CVE-2026-28624"],"modified":"2026-09-09T15:15:54.249544283Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"282676188069123263012021670236518582350","length":519},"id":"ASB-A-494585668-16a378d9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"function":"onAuthenticationSucceeded","file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"}},{"target":{"file":"src/com/android/settings/Utils.java","function":"launchBiometricPromptForMandatoryBiometrics"},"deprecated":false,"digest":{"function_hash":"32665876195638296979997778435093411561","length":273},"id":"ASB-A-494585668-5508be75","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["84593077711908135041558218202040325065","252532824643222096991086064549492778874","261624836854169473028206718849663316071","11940075462925023646595161087592068533","329604635574742802474718114706034976988","94425592515769651551795622825457719967","142046650168156065069941248160612091854","339984016205820877152474195367953243384","280096478600413740358447277571206260409","293419562084526619782177503018313373971","81328940153259826599555762959327017111","254925979891075030082494879575947115587","337224780723990571172092314652605720080","167963172314617511412550797330940236700","171293951055979856932296723760858064382","245509428877725867596575479083711199301","135075427366898096346582818512520434529","9357615191256052559120393169858125884","214800579272569593164185860523746821443","49164820578418263194904628095537348422","146681275437368894939314576438569640609","87604808395722069774285068467732569341","25716162600148752210140207888775965083","196377103502877859548386929643279875626","246638492459690661715177485133175256075","319902007053799012744013829253249799890","60750567615105906490739994072873627701","147479440469064893751870439272685564888","104774849201676531514884571666799885161"]},"id":"ASB-A-494585668-65f9fdf5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"file":"src/com/android/settings/Utils.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["216611538982774219064357036722095770683","238591627107206518704204430726853451105","167366239788893862494835965945395819714","45227581825024894005327719110681144955","312638224080952593892869323603095369527","203696545924957432548161677662511328874","192386710449203338217395540483997885079","79868520545354998358264995962044749217","144762822544313989024791584550580612217","243587080073749473751825295264367901353","335212839679497896287875255361023669164","186295943394775587985858650550986159853","7341732184311982688986679780124516111","64750267052431998743177942597928366092","72545818926335418134865693705424006939","156649761607953611405084694923205163925"]},"id":"ASB-A-494585668-7121cc8c"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"onSaveInstanceState"},"deprecated":false,"digest":{"length":630,"function_hash":"163810253413383527125518995371843167927"},"id":"ASB-A-494585668-8831773a"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"function":"launchBiometricPromptForMandatoryBiometrics","file":"src/com/android/settings/Utils.java"},"deprecated":false,"digest":{"function_hash":"35026602641749790704822154187908252186","length":299},"id":"ASB-A-494585668-8c028f12"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"onCreate"},"deprecated":false,"digest":{"function_hash":"75869849386813686728659189892649513593","length":2569},"id":"ASB-A-494585668-af6c8c4f","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"330015964169304060567784990814072368715","length":6056},"id":"ASB-A-494585668-b151debb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java","function":"onCreate"}},{"id":"ASB-A-494585668-c624af12","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"onActivityResult"},"deprecated":false,"digest":{"function_hash":"310513005022918049460756000669410865231","length":2469}},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"file":"src/com/android/settings/Utils.java","function":"getIntentForBiometricAuthentication"},"deprecated":false,"digest":{"length":774,"function_hash":"334847760755918641818569326583073782349"},"id":"ASB-A-494585668-c940a1a8","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"},"deprecated":false,"digest":{"line_hashes":["71932557150206659975853232926336500607","175108171127236356764268833378095426826","140706492593317516265382343012912317201","164870383276795681153716561908207968536","196401770078667145028851776345906971618","190388584261322128522137291008973181217","218381582642163307327777852524225769130","340251991205858917937126935710584912810","290826557895233652068832861007571510972","296702662202197618701874475029708549129","183757092393531542172000701895942279255","23997919683986308749509442302326934129","10283259619358558470820165145726371030","215311000833777952339171444261790178955","326803075879054571434020649152387299876","78377383732106295357327317256140113908","40951321693192716743406588819681209431","64631800881591706946272949083555397978","267061728358347340865905907711955675516","150267972767906926429253505506034388800","284872024643385197664699105803171603947","156148966619433747979583754779860046569","154233744154165332833692081628410321256","109784385202364438098158433821287081011","69392890539891819890456109275306573","7647996677264387666790907480596133115","181379220911791232952119684609323482231","37145401911884376766519628517267636240","332792391964525351147947942645316943854","196834181792294525564220380023349547028","216392775168902171258354975663879403061","208749307360775127418014842672949484850","59029525604458179404622278040192977487","70543526127930411208112270085533205179","68315707067356237757460699103901217314","319519171549899841701286902608381090364","182361854510655975413413811557648692407","292985995249374205351384820676736623836","205461937507870903060060357338016892931","24710587099882822677726480918346710697","68027262495572715269170868938619101553","289326486673962088609417905749253454109","104467680485070337458823135226465072775","5420187718368315485376863016951436862","162885105295699433360768953554061005660","255685053125655992016181932082344149641"],"threshold":0.9},"id":"ASB-A-494585668-e0a2b186","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"handleAuthenticationSuccessful"},"deprecated":false,"digest":{"length":802,"function_hash":"326251186975944397833437444784282534539"},"id":"ASB-A-494585668-e27bd504"},{"target":{"file":"src/com/android/settings/Utils.java","function":"launchBiometricPromptForMandatoryBiometrics"},"deprecated":false,"digest":{"length":248,"function_hash":"298633626937842160491492051725414845719"},"id":"ASB-A-494585668-eed82de4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f"],"severity":"High","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-494585668.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"src/com/android/settings/Utils.java","function":"launchBiometricPromptForMandatoryBiometrics"},"deprecated":false,"digest":{"function_hash":"35026602641749790704822154187908252186","length":299},"id":"ASB-A-494585668-1240514f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e"},{"deprecated":false,"digest":{"length":248,"function_hash":"298633626937842160491492051725414845719"},"id":"ASB-A-494585668-3653a8ea","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"file":"src/com/android/settings/Utils.java","function":"launchBiometricPromptForMandatoryBiometrics"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"function":"onCreate","file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"},"deprecated":false,"digest":{"length":6399,"function_hash":"179414397889464978312367791223126608314"},"id":"ASB-A-494585668-3e32a0c7","signature_type":"Function"},{"id":"ASB-A-494585668-665bf5c7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"function":"getIntentForBiometricAuthentication","file":"src/com/android/settings/Utils.java"},"deprecated":false,"digest":{"function_hash":"309719402835937433708152680169566842738","length":840}},{"digest":{"threshold":0.9,"line_hashes":["71932557150206659975853232926336500607","175108171127236356764268833378095426826","140706492593317516265382343012912317201","164870383276795681153716561908207968536","196401770078667145028851776345906971618","190388584261322128522137291008973181217","218381582642163307327777852524225769130","340251991205858917937126935710584912810","290826557895233652068832861007571510972","296702662202197618701874475029708549129","183757092393531542172000701895942279255","23997919683986308749509442302326934129","10283259619358558470820165145726371030","215311000833777952339171444261790178955","326803075879054571434020649152387299876","78377383732106295357327317256140113908","40951321693192716743406588819681209431","64631800881591706946272949083555397978","267061728358347340865905907711955675516","150267972767906926429253505506034388800","82639642542768048142959026316503390150","138351568694322524620940942219736527963","253445064890254243133863684052557568384","331093619199226893178260004339309492966","254021103023271981294645609282663613100","318766794864380495148733835512356283792","45600841732258828903347531151455668526","134033903998753801970336404295373253986","135510862523144219110504290676455925420","69392890539891819890456109275306573","7647996677264387666790907480596133115","181379220911791232952119684609323482231","37145401911884376766519628517267636240","332792391964525351147947942645316943854","196834181792294525564220380023349547028","216392775168902171258354975663879403061","208749307360775127418014842672949484850","59029525604458179404622278040192977487","70543526127930411208112270085533205179","68315707067356237757460699103901217314","319519171549899841701286902608381090364","182361854510655975413413811557648692407","292985995249374205351384820676736623836","205461937507870903060060357338016892931","24710587099882822677726480918346710697","68027262495572715269170868938619101553","289326486673962088609417905749253454109","104467680485070337458823135226465072775","5420187718368315485376863016951436862","162885105295699433360768953554061005660","255685053125655992016181932082344149641"]},"id":"ASB-A-494585668-66d02461","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"function":"onCreate","file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"},"deprecated":false,"digest":{"length":2625,"function_hash":"234020962603676770365731763331470732521"},"id":"ASB-A-494585668-75d7ae1c","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java","function":"onAuthenticationSucceeded"},"deprecated":false,"digest":{"function_hash":"282676188069123263012021670236518582350","length":519},"id":"ASB-A-494585668-7daa4df9"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"handleAuthenticationSuccessful"},"deprecated":false,"digest":{"function_hash":"326251186975944397833437444784282534539","length":802},"id":"ASB-A-494585668-81ac1f02","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"onActivityResult"},"deprecated":false,"digest":{"function_hash":"6497338532305591295657489758465178103","length":2573},"id":"ASB-A-494585668-95ce333a"},{"deprecated":false,"digest":{"function_hash":"32665876195638296979997778435093411561","length":273},"id":"ASB-A-494585668-c29dd873","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"file":"src/com/android/settings/Utils.java","function":"launchBiometricPromptForMandatoryBiometrics"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"file":"src/com/android/settings/Utils.java"},"deprecated":false,"digest":{"line_hashes":["84593077711908135041558218202040325065","252532824643222096991086064549492778874","261624836854169473028206718849663316071","11940075462925023646595161087592068533","329604635574742802474718114706034976988","94425592515769651551795622825457719967","142046650168156065069941248160612091854","339984016205820877152474195367953243384","280096478600413740358447277571206260409","293419562084526619782177503018313373971","81328940153259826599555762959327017111","254925979891075030082494879575947115587","337224780723990571172092314652605720080","167963172314617511412550797330940236700","171293951055979856932296723760858064382","245509428877725867596575479083711199301","135075427366898096346582818512520434529","9357615191256052559120393169858125884","214800579272569593164185860523746821443","261906008856212832792001614282443073403","58034145936685779782304342435204806766","87604808395722069774285068467732569341","25716162600148752210140207888775965083","89867073997525876774499851103939010037","195320092645580450979061646609089333024","319902007053799012744013829253249799890","60750567615105906490739994072873627701","147479440469064893751870439272685564888","104774849201676531514884571666799885161"],"threshold":0.9},"id":"ASB-A-494585668-c756b11c","signature_type":"Line"},{"target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"onSaveInstanceState"},"deprecated":false,"digest":{"function_hash":"163810253413383527125518995371843167927","length":630},"id":"ASB-A-494585668-cf6194ae","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"},"deprecated":false,"digest":{"line_hashes":["216611538982774219064357036722095770683","238591627107206518704204430726853451105","167366239788893862494835965945395819714","45227581825024894005327719110681144955","312638224080952593892869323603095369527","203696545924957432548161677662511328874","192386710449203338217395540483997885079","79868520545354998358264995962044749217","144762822544313989024791584550580612217","243587080073749473751825295264367901353","335212839679497896287875255361023669164","186295943394775587985858650550986159853","7341732184311982688986679780124516111","64750267052431998743177942597928366092","72545818926335418134865693705424006939","156649761607953611405084694923205163925"],"threshold":0.9},"id":"ASB-A-494585668-f311f489","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-494585668.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/Utils.java","function":"getIntentForBiometricAuthentication"},"deprecated":false,"digest":{"length":774,"function_hash":"334847760755918641818569326583073782349"},"id":"ASB-A-494585668-0cfc26d4","signature_type":"Function"},{"digest":{"function_hash":"71532852142030614830398123091447287252","length":2789},"id":"ASB-A-494585668-16737bfc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"onActivityResult"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["216611538982774219064357036722095770683","238591627107206518704204430726853451105","167366239788893862494835965945395819714","45227581825024894005327719110681144955","312638224080952593892869323603095369527","203696545924957432548161677662511328874","192386710449203338217395540483997885079","79868520545354998358264995962044749217","144762822544313989024791584550580612217","243587080073749473751825295264367901353","335212839679497896287875255361023669164","186295943394775587985858650550986159853","7341732184311982688986679780124516111","64750267052431998743177942597928366092","72545818926335418134865693705424006939","156649761607953611405084694923205163925"],"threshold":0.9},"id":"ASB-A-494585668-1c0e4533","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"}},{"deprecated":false,"digest":{"length":299,"function_hash":"35026602641749790704822154187908252186"},"id":"ASB-A-494585668-38022ec7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/Utils.java","function":"launchBiometricPromptForMandatoryBiometrics"}},{"deprecated":false,"digest":{"function_hash":"154322933754375672069017953503795901787","length":6268},"id":"ASB-A-494585668-48c41c10","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java","function":"onCreate"}},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"function":"onAuthenticationSucceeded","file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"},"deprecated":false,"digest":{"function_hash":"282676188069123263012021670236518582350","length":519},"id":"ASB-A-494585668-7f67193e","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-494585668-a4b7ff4c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"},"deprecated":false,"digest":{"line_hashes":["71932557150206659975853232926336500607","175108171127236356764268833378095426826","140706492593317516265382343012912317201","164870383276795681153716561908207968536","196401770078667145028851776345906971618","190388584261322128522137291008973181217","218381582642163307327777852524225769130","340251991205858917937126935710584912810","290826557895233652068832861007571510972","296702662202197618701874475029708549129","183757092393531542172000701895942279255","23997919683986308749509442302326934129","10283259619358558470820165145726371030","215311000833777952339171444261790178955","326803075879054571434020649152387299876","78377383732106295357327317256140113908","40951321693192716743406588819681209431","64631800881591706946272949083555397978","267061728358347340865905907711955675516","150267972767906926429253505506034388800","284872024643385197664699105803171603947","156148966619433747979583754779860046569","154233744154165332833692081628410321256","109784385202364438098158433821287081011","11494662368815157159576278359847038080","198501506775194349575621905019750406993","301173076705388724543026510102700914107","330583157563336724940711160400967729503","138351568694322524620940942219736527963","253445064890254243133863684052557568384","331093619199226893178260004339309492966","254021103023271981294645609282663613100","318766794864380495148733835512356283792","45600841732258828903347531151455668526","134033903998753801970336404295373253986","135510862523144219110504290676455925420","69392890539891819890456109275306573","7647996677264387666790907480596133115","181379220911791232952119684609323482231","37145401911884376766519628517267636240","332792391964525351147947942645316943854","196834181792294525564220380023349547028","216392775168902171258354975663879403061","208749307360775127418014842672949484850","59029525604458179404622278040192977487","70543526127930411208112270085533205179","68315707067356237757460699103901217314","319519171549899841701286902608381090364","182361854510655975413413811557648692407","292985995249374205351384820676736623836","205461937507870903060060357338016892931","24710587099882822677726480918346710697","68027262495572715269170868938619101553","289326486673962088609417905749253454109","104467680485070337458823135226465072775","5420187718368315485376863016951436862","162885105295699433360768953554061005660","255685053125655992016181932082344149641"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"handleAuthenticationSuccessful"},"deprecated":false,"digest":{"function_hash":"326251186975944397833437444784282534539","length":802},"id":"ASB-A-494585668-a8f8a72d"},{"digest":{"function_hash":"234020962603676770365731763331470732521","length":2625},"id":"ASB-A-494585668-b1c76b0a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"onCreate"},"deprecated":false},{"digest":{"line_hashes":["84593077711908135041558218202040325065","252532824643222096991086064549492778874","261624836854169473028206718849663316071","11940075462925023646595161087592068533","329604635574742802474718114706034976988","94425592515769651551795622825457719967","142046650168156065069941248160612091854","339984016205820877152474195367953243384","280096478600413740358447277571206260409","293419562084526619782177503018313373971","81328940153259826599555762959327017111","254925979891075030082494879575947115587","337224780723990571172092314652605720080","167963172314617511412550797330940236700","171293951055979856932296723760858064382","245509428877725867596575479083711199301","135075427366898096346582818512520434529","9357615191256052559120393169858125884","214800579272569593164185860523746821443","261906008856212832792001614282443073403","58034145936685779782304342435204806766","87604808395722069774285068467732569341","25716162600148752210140207888775965083","196377103502877859548386929643279875626","246638492459690661715177485133175256075","319902007053799012744013829253249799890","60750567615105906490739994072873627701","147479440469064893751870439272685564888","104774849201676531514884571666799885161"],"threshold":0.9},"id":"ASB-A-494585668-b2253d2e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/Utils.java"},"deprecated":false},{"id":"ASB-A-494585668-b5898587","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/Utils.java","function":"launchBiometricPromptForMandatoryBiometrics"},"deprecated":false,"digest":{"function_hash":"32665876195638296979997778435093411561","length":273}},{"id":"ASB-A-494585668-bcd90a1a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"function":"launchBiometricPromptForMandatoryBiometrics","file":"src/com/android/settings/Utils.java"},"deprecated":false,"digest":{"function_hash":"298633626937842160491492051725414845719","length":248}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"onSaveInstanceState"},"deprecated":false,"digest":{"function_hash":"163810253413383527125518995371843167927","length":630},"id":"ASB-A-494585668-d6287cee","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f"],"severity":"High","spl":"2026-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-494585668.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"target":{"file":"src/com/android/settings/Utils.java","function":"launchBiometricPromptForMandatoryBiometrics"},"deprecated":false,"digest":{"function_hash":"35026602641749790704822154187908252186","length":299},"id":"ASB-A-494585668-1baedd06","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795"},{"id":"ASB-A-494585668-31b77558","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"onSaveInstanceState"},"deprecated":false,"digest":{"function_hash":"163810253413383527125518995371843167927","length":630}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"file":"src/com/android/settings/Utils.java"},"deprecated":false,"digest":{"line_hashes":["84593077711908135041558218202040325065","252532824643222096991086064549492778874","261624836854169473028206718849663316071","11940075462925023646595161087592068533","329604635574742802474718114706034976988","94425592515769651551795622825457719967","142046650168156065069941248160612091854","339984016205820877152474195367953243384","280096478600413740358447277571206260409","293419562084526619782177503018313373971","81328940153259826599555762959327017111","254925979891075030082494879575947115587","337224780723990571172092314652605720080","167963172314617511412550797330940236700","171293951055979856932296723760858064382","245509428877725867596575479083711199301","135075427366898096346582818512520434529","9357615191256052559120393169858125884","214800579272569593164185860523746821443","49164820578418263194904628095537348422","146681275437368894939314576438569640609","87604808395722069774285068467732569341","25716162600148752210140207888775965083","196377103502877859548386929643279875626","246638492459690661715177485133175256075","319902007053799012744013829253249799890","60750567615105906490739994072873627701","147479440469064893751870439272685564888","104774849201676531514884571666799885161"],"threshold":0.9},"id":"ASB-A-494585668-8890b20d","signature_type":"Line"},{"target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java","function":"onActivityResult"},"deprecated":false,"digest":{"function_hash":"310513005022918049460756000669410865231","length":2469},"id":"ASB-A-494585668-88eaab86","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"function":"launchBiometricPromptForMandatoryBiometrics","file":"src/com/android/settings/Utils.java"},"deprecated":false,"digest":{"function_hash":"298633626937842160491492051725414845719","length":248},"id":"ASB-A-494585668-8af6bdfd","signature_type":"Function"},{"digest":{"function_hash":"326251186975944397833437444784282534539","length":802},"id":"ASB-A-494585668-8b17c7b4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"function":"handleAuthenticationSuccessful","file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"75869849386813686728659189892649513593","length":2569},"id":"ASB-A-494585668-9a75521e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"function":"onCreate","file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"}},{"deprecated":false,"digest":{"length":519,"function_hash":"282676188069123263012021670236518582350"},"id":"ASB-A-494585668-ce7d55d4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java","function":"onAuthenticationSucceeded"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"},"deprecated":false,"digest":{"line_hashes":["71932557150206659975853232926336500607","175108171127236356764268833378095426826","140706492593317516265382343012912317201","164870383276795681153716561908207968536","196401770078667145028851776345906971618","190388584261322128522137291008973181217","218381582642163307327777852524225769130","340251991205858917937126935710584912810","290826557895233652068832861007571510972","296702662202197618701874475029708549129","183757092393531542172000701895942279255","23997919683986308749509442302326934129","10283259619358558470820165145726371030","215311000833777952339171444261790178955","326803075879054571434020649152387299876","78377383732106295357327317256140113908","40951321693192716743406588819681209431","64631800881591706946272949083555397978","267061728358347340865905907711955675516","150267972767906926429253505506034388800","284872024643385197664699105803171603947","156148966619433747979583754779860046569","154233744154165332833692081628410321256","109784385202364438098158433821287081011","69392890539891819890456109275306573","7647996677264387666790907480596133115","181379220911791232952119684609323482231","37145401911884376766519628517267636240","332792391964525351147947942645316943854","196834181792294525564220380023349547028","216392775168902171258354975663879403061","208749307360775127418014842672949484850","59029525604458179404622278040192977487","70543526127930411208112270085533205179","68315707067356237757460699103901217314","319519171549899841701286902608381090364","182361854510655975413413811557648692407","292985995249374205351384820676736623836","205461937507870903060060357338016892931","24710587099882822677726480918346710697","68027262495572715269170868938619101553","289326486673962088609417905749253454109","104467680485070337458823135226465072775","5420187718368315485376863016951436862","162885105295699433360768953554061005660","255685053125655992016181932082344149641"],"threshold":0.9},"id":"ASB-A-494585668-d54fc536","signature_type":"Line"},{"digest":{"threshold":0.9,"line_hashes":["216611538982774219064357036722095770683","238591627107206518704204430726853451105","167366239788893862494835965945395819714","45227581825024894005327719110681144955","312638224080952593892869323603095369527","203696545924957432548161677662511328874","192386710449203338217395540483997885079","79868520545354998358264995962044749217","144762822544313989024791584550580612217","243587080073749473751825295264367901353","335212839679497896287875255361023669164","186295943394775587985858650550986159853","7341732184311982688986679780124516111","64750267052431998743177942597928366092","72545818926335418134865693705424006939","156649761607953611405084694923205163925"]},"id":"ASB-A-494585668-e189f502","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"},"deprecated":false},{"digest":{"length":5863,"function_hash":"225355106264462343682862456478620329099"},"id":"ASB-A-494585668-eb702514","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"function":"onCreate","file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"file":"src/com/android/settings/Utils.java","function":"launchBiometricPromptForMandatoryBiometrics"},"deprecated":false,"digest":{"function_hash":"32665876195638296979997778435093411561","length":273},"id":"ASB-A-494585668-ed7ee920","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795","target":{"file":"src/com/android/settings/Utils.java","function":"getIntentForBiometricAuthentication"},"deprecated":false,"digest":{"function_hash":"334847760755918641818569326583073782349","length":774},"id":"ASB-A-494585668-fc8ca0b3","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-494585668.json"}}],"schema_version":"1.9.0"}