{"id":"ASB-A-495409704","details":"In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-495409704","CVE-2026-49935"],"modified":"2026-11-02T17:11:22.107682601Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135","target":{"function":"enforceReadAppSpecificLocalesPermission","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"length":134,"function_hash":"204640619156121527015000109178908719778"},"id":"ASB-A-495409704-12424313","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["65108249682543369662895169525771640678","124511008088410140102027306009226811097","12578430793144090836326824156709633016","309170623087012450335331149533740038672","99760262590819959032684605100204788914","22956372567448344252373219566971357170","28154918724281620191803097820962342153","20373327523386036825058087662538163121","142932191048381655066480454741982696669","246294234149769732362235853238767381830","194021661568072029242773898042590878321","304593631200895600299124931216184258654","135400389216790823390656141790877931888","121709718552727013508263063397889062031","287984017247713266422381603041510423238","105197364842148803494048246472238349333","84444668375217595136283703802417526042","115081509818505196177982383578720692195","69466328432589881792934062894658759388","310199797424744018136115483308189328266","310779936514822097921495146728044147206","270050512741005101982096221570688599084","107431043384748316432201972400711436992","128912889450738313214841166868332171371","314575291799610489605641954583839074466"],"threshold":0.9},"id":"ASB-A-495409704-32819cbd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false},{"id":"ASB-A-495409704-3324d127","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"getApplicationLocales"},"deprecated":false,"digest":{"function_hash":"27582516652715705737538442692828518397","length":654}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"getXmlFileNameForUser"},"deprecated":false,"digest":{"length":208,"function_hash":"19651672710792399300603434211876709189"},"id":"ASB-A-495409704-7b7aece0","signature_type":"Function","signature_version":"v1"},{"target":{"function":"getOverrideLocaleConfig","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"function_hash":"316882120375936217854703695627144018893","length":1042},"id":"ASB-A-495409704-81f6ebe2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6865735a418caaebef14ef29568a5f51e72ae135"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"316882120375936217854703695627144018893","length":1042},"id":"ASB-A-495409704-1982a7e5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29","target":{"function":"getOverrideLocaleConfig","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"}},{"digest":{"function_hash":"27582516652715705737538442692828518397","length":654},"id":"ASB-A-495409704-2acb0f48","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"getApplicationLocales"},"deprecated":false},{"match_only_versions":["15"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b14d40e2f7cb84add09163976f7cbb45e1d3b7a","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"line_hashes":["250637483692756758966468287869369123818","238861801233761563171882973496142869361","275198498035068956357998673455030678984"],"threshold":0.9},"id":"ASB-A-495409704-41d096e5"},{"deprecated":false,"digest":{"line_hashes":["65108249682543369662895169525771640678","124511008088410140102027306009226811097","12578430793144090836326824156709633016","309170623087012450335331149533740038672","99760262590819959032684605100204788914","22956372567448344252373219566971357170","28154918724281620191803097820962342153","20373327523386036825058087662538163121","142932191048381655066480454741982696669","246294234149769732362235853238767381830","194021661568072029242773898042590878321","304593631200895600299124931216184258654","135400389216790823390656141790877931888","121709718552727013508263063397889062031","287984017247713266422381603041510423238","105197364842148803494048246472238349333","84444668375217595136283703802417526042","115081509818505196177982383578720692195","69466328432589881792934062894658759388","310199797424744018136115483308189328266","310779936514822097921495146728044147206","270050512741005101982096221570688599084","107431043384748316432201972400711436992","128912889450738313214841166868332171371","314575291799610489605641954583839074466"],"threshold":0.9},"id":"ASB-A-495409704-5cddc01b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"}},{"target":{"function":"enforceReadAppSpecificLocalesPermission","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"function_hash":"204640619156121527015000109178908719778","length":134},"id":"ASB-A-495409704-9b4c9df5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29"},{"deprecated":false,"digest":{"function_hash":"185141413877681854166128703631407916015","length":1349},"id":"ASB-A-495409704-d5ea8915","match_only_versions":["15"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b14d40e2f7cb84add09163976f7cbb45e1d3b7a","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"getOverrideLocaleConfig"}},{"id":"ASB-A-495409704-f6b72aa7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"getXmlFileNameForUser"},"deprecated":false,"digest":{"function_hash":"19651672710792399300603434211876709189","length":208}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e4c79ddf98cb8874e2ed6dadc05712fc4be38d29","https://android.googlesource.com/platform/frameworks/base/+/0b14d40e2f7cb84add09163976f7cbb45e1d3b7a"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6","https://android.googlesource.com/platform/frameworks/base/+/b27cab2b96365d2b64aa2858d299c99f01961eff"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"enforceReadAppSpecificLocalesPermission"},"deprecated":false,"digest":{"length":134,"function_hash":"204640619156121527015000109178908719778"},"id":"ASB-A-495409704-0070ae57","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["250637483692756758966468287869369123818","238861801233761563171882973496142869361","275198498035068956357998673455030678984"],"threshold":0.9},"id":"ASB-A-495409704-3e5c1fb9","match_only_versions":["16"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b27cab2b96365d2b64aa2858d299c99f01961eff","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6","target":{"function":"getOverrideLocaleConfig","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"length":1042,"function_hash":"316882120375936217854703695627144018893"},"id":"ASB-A-495409704-444fa1f7","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"19651672710792399300603434211876709189","length":208},"id":"ASB-A-495409704-818bd204","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"getXmlFileNameForUser"}},{"target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"line_hashes":["65108249682543369662895169525771640678","124511008088410140102027306009226811097","12578430793144090836326824156709633016","309170623087012450335331149533740038672","99760262590819959032684605100204788914","22956372567448344252373219566971357170","28154918724281620191803097820962342153","20373327523386036825058087662538163121","142932191048381655066480454741982696669","246294234149769732362235853238767381830","194021661568072029242773898042590878321","304593631200895600299124931216184258654","135400389216790823390656141790877931888","121709718552727013508263063397889062031","287984017247713266422381603041510423238","105197364842148803494048246472238349333","84444668375217595136283703802417526042","115081509818505196177982383578720692195","69466328432589881792934062894658759388","310199797424744018136115483308189328266","310779936514822097921495146728044147206","270050512741005101982096221570688599084","107431043384748316432201972400711436992","128912889450738313214841166868332171371","314575291799610489605641954583839074466"],"threshold":0.9},"id":"ASB-A-495409704-d95aeae8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1c9407ce917aa31d9f23beec26695b35f34de3a6","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"getApplicationLocales"},"deprecated":false,"digest":{"function_hash":"27582516652715705737538442692828518397","length":654},"id":"ASB-A-495409704-e2bf08c9","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/b27cab2b96365d2b64aa2858d299c99f01961eff","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"getOverrideLocaleConfig"},"deprecated":false,"digest":{"length":1349,"function_hash":"185141413877681854166128703631407916015"},"id":"ASB-A-495409704-ec58e87c","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"length":654,"function_hash":"27582516652715705737538442692828518397"},"id":"ASB-A-495409704-13a2f209","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c","target":{"function":"getApplicationLocales","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c","target":{"function":"getOverrideLocaleConfig","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"function_hash":"316882120375936217854703695627144018893","length":1042},"id":"ASB-A-495409704-64597355","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":134,"function_hash":"204640619156121527015000109178908719778"},"id":"ASB-A-495409704-a85cebde","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"enforceReadAppSpecificLocalesPermission"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c9e9635f6a80b987ed2cb0a829da31dad951c178","target":{"function":"getOverrideLocaleConfig","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"function_hash":"185141413877681854166128703631407916015","length":1349},"id":"ASB-A-495409704-c58e54a3","match_only_versions":["16-qpr2"],"signature_type":"Function"},{"target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["65108249682543369662895169525771640678","124511008088410140102027306009226811097","12578430793144090836326824156709633016","309170623087012450335331149533740038672","99760262590819959032684605100204788914","22956372567448344252373219566971357170","28154918724281620191803097820962342153","20373327523386036825058087662538163121","142932191048381655066480454741982696669","246294234149769732362235853238767381830","194021661568072029242773898042590878321","304593631200895600299124931216184258654","135400389216790823390656141790877931888","121709718552727013508263063397889062031","287984017247713266422381603041510423238","105197364842148803494048246472238349333","84444668375217595136283703802417526042","115081509818505196177982383578720692195","69466328432589881792934062894658759388","310199797424744018136115483308189328266","310779936514822097921495146728044147206","270050512741005101982096221570688599084","107431043384748316432201972400711436992","128912889450738313214841166868332171371","314575291799610489605641954583839074466"]},"id":"ASB-A-495409704-cb8d1a64","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c"},{"target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["250637483692756758966468287869369123818","238861801233761563171882973496142869361","275198498035068956357998673455030678984"]},"id":"ASB-A-495409704-e89e32d9","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c9e9635f6a80b987ed2cb0a829da31dad951c178"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c","target":{"function":"getXmlFileNameForUser","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"function_hash":"19651672710792399300603434211876709189","length":208},"id":"ASB-A-495409704-eb3a486a"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2884540c8591652ba37a717933a6c854aaf4e35c","https://android.googlesource.com/platform/frameworks/base/+/c9e9635f6a80b987ed2cb0a829da31dad951c178"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd","https://android.googlesource.com/platform/frameworks/base/+/e2491491cc025861177114cf8be226952f32e046"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"getApplicationLocales"},"deprecated":false,"digest":{"length":654,"function_hash":"27582516652715705737538442692828518397"},"id":"ASB-A-495409704-12a512ff","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd","target":{"function":"enforceReadAppSpecificLocalesPermission","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"function_hash":"204640619156121527015000109178908719778","length":134},"id":"ASB-A-495409704-1c383524","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd","target":{"function":"getOverrideLocaleConfig","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"length":1042,"function_hash":"316882120375936217854703695627144018893"},"id":"ASB-A-495409704-230e22f1","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e2491491cc025861177114cf8be226952f32e046","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"line_hashes":["250637483692756758966468287869369123818","238861801233761563171882973496142869361","275198498035068956357998673455030678984"],"threshold":0.9},"id":"ASB-A-495409704-26abf61c","match_only_versions":["17"],"signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"19651672710792399300603434211876709189","length":208},"id":"ASB-A-495409704-3b85e1ec","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd","target":{"function":"getXmlFileNameForUser","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"}},{"digest":{"threshold":0.9,"line_hashes":["65108249682543369662895169525771640678","124511008088410140102027306009226811097","12578430793144090836326824156709633016","309170623087012450335331149533740038672","99760262590819959032684605100204788914","22956372567448344252373219566971357170","28154918724281620191803097820962342153","20373327523386036825058087662538163121","142932191048381655066480454741982696669","246294234149769732362235853238767381830","194021661568072029242773898042590878321","304593631200895600299124931216184258654","135400389216790823390656141790877931888","121709718552727013508263063397889062031","287984017247713266422381603041510423238","105197364842148803494048246472238349333","84444668375217595136283703802417526042","115081509818505196177982383578720692195","69466328432589881792934062894658759388","310199797424744018136115483308189328266","310779936514822097921495146728044147206","270050512741005101982096221570688599084","107431043384748316432201972400711436992","128912889450738313214841166868332171371","314575291799610489605641954583839074466"]},"id":"ASB-A-495409704-7aff3b38","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/606c6d0e609db00d6b51d9e5075f175801479bdd","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e2491491cc025861177114cf8be226952f32e046","target":{"function":"getOverrideLocaleConfig","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"function_hash":"185141413877681854166128703631407916015","length":1349},"id":"ASB-A-495409704-88c17f96","match_only_versions":["17"]}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382","target":{"function":"getXmlFileNameForUser","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"length":208,"function_hash":"19651672710792399300603434211876709189"},"id":"ASB-A-495409704-35978d46"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/23650bac77a4233be59c75956c9d39e1e0e8f170","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"line_hashes":["250637483692756758966468287869369123818","238861801233761563171882973496142869361","275198498035068956357998673455030678984"],"threshold":0.9},"id":"ASB-A-495409704-7e83219a","match_only_versions":["14"],"signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["65108249682543369662895169525771640678","124511008088410140102027306009226811097","12578430793144090836326824156709633016","309170623087012450335331149533740038672","99760262590819959032684605100204788914","22956372567448344252373219566971357170","28154918724281620191803097820962342153","20373327523386036825058087662538163121","142932191048381655066480454741982696669","246294234149769732362235853238767381830","194021661568072029242773898042590878321","304593631200895600299124931216184258654","135400389216790823390656141790877931888","121709718552727013508263063397889062031","287984017247713266422381603041510423238","105197364842148803494048246472238349333","84444668375217595136283703802417526042","115081509818505196177982383578720692195","69466328432589881792934062894658759388","310199797424744018136115483308189328266","310779936514822097921495146728044147206","270050512741005101982096221570688599084","107431043384748316432201972400711436992","128912889450738313214841166868332171371","314575291799610489605641954583839074466"],"threshold":0.9},"id":"ASB-A-495409704-91ae063f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/23650bac77a4233be59c75956c9d39e1e0e8f170","target":{"function":"getOverrideLocaleConfig","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"length":1349,"function_hash":"185141413877681854166128703631407916015"},"id":"ASB-A-495409704-d9d7259a","match_only_versions":["14"]},{"id":"ASB-A-495409704-dba13311","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382","target":{"function":"enforceReadAppSpecificLocalesPermission","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false,"digest":{"length":134,"function_hash":"204640619156121527015000109178908719778"}},{"digest":{"function_hash":"27582516652715705737538442692828518397","length":654},"id":"ASB-A-495409704-ea25a889","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382","target":{"function":"getApplicationLocales","file":"services/core/java/com/android/server/locales/LocaleManagerService.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382","target":{"file":"services/core/java/com/android/server/locales/LocaleManagerService.java","function":"getOverrideLocaleConfig"},"deprecated":false,"digest":{"function_hash":"316882120375936217854703695627144018893","length":1042},"id":"ASB-A-495409704-fb4ba960","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f9235e517ee46b75b0c5a65febed332259551382","https://android.googlesource.com/platform/frameworks/base/+/23650bac77a4233be59c75956c9d39e1e0e8f170"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-495409704.json"}}],"schema_version":"1.9.2"}