{"id":"ASB-A-382775095", "published":"2025-03-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2025-0078", "A-382775095"], "details":"In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/native", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15-next:0"}, {"fixed":"15-next:2025-03-01"}]}], "versions":["15-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/90b14eab96ef0de6f91375a2d55768798ce11059"], "severity":"High", "spl":"2025-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"103054758997303530909674299488431052806", "length":1631}, "id":"ASB-A-382775095-820644a0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/90b14eab96ef0de6f91375a2d55768798ce11059", "target":{"file":"cmds/servicemanager/main.cpp", "function":"main"}}, {"deprecated":false, "digest":{"line_hashes":["337286965434251483831955774888882175871", "313999500694981596962968914895666274670", "41442552728851546643087969104938208301", "239001468851271657634345280584581928601"], "threshold":0.9}, "id":"ASB-A-382775095-e7c70f69", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/90b14eab96ef0de6f91375a2d55768798ce11059", "target":{"file":"cmds/servicemanager/main.cpp"}}]}}, {"package":{"name":"platform/frameworks/native", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2025-03-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"], "severity":"High", "spl":"2025-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["5021685984790554028578586044454569582", "158063599821068648845358961348018589092", "1644809115128101204043221543353588375", "239001468851271657634345280584581928601"], "threshold":0.9}, "id":"ASB-A-382775095-b4c8b016", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06", "target":{"file":"cmds/servicemanager/main.cpp"}}, {"deprecated":false, "digest":{"function_hash":"255594495738122695466899620609061562274", "length":979}, "id":"ASB-A-382775095-ba47c4f3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06", "target":{"file":"cmds/servicemanager/main.cpp", "function":"main"}}]}}, {"package":{"name":"platform/frameworks/native", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2025-03-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"], "severity":"High", "spl":"2025-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"255594495738122695466899620609061562274", "length":979}, "id":"ASB-A-382775095-5d35d6a0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06", "target":{"file":"cmds/servicemanager/main.cpp", "function":"main"}}, {"deprecated":false, "digest":{"line_hashes":["5021685984790554028578586044454569582", "158063599821068648845358961348018589092", "1644809115128101204043221543353588375", "239001468851271657634345280584581928601"], "threshold":0.9}, "id":"ASB-A-382775095-b31eb96f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06", "target":{"file":"cmds/servicemanager/main.cpp"}}]}}, {"package":{"name":"platform/frameworks/native", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2025-03-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/f7e88ce3ad00852c92ec23997bb78b0a9b358d65"], "severity":"High", "spl":"2025-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["337286965434251483831955774888882175871", "313999500694981596962968914895666274670", "41442552728851546643087969104938208301", "239001468851271657634345280584581928601"], "threshold":0.9}, "id":"ASB-A-382775095-708244dd", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/f7e88ce3ad00852c92ec23997bb78b0a9b358d65", "target":{"file":"cmds/servicemanager/main.cpp"}}, {"deprecated":false, "digest":{"function_hash":"331552110268812508616993286843637271200", "length":1436}, "id":"ASB-A-382775095-ccbbbdd8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/f7e88ce3ad00852c92ec23997bb78b0a9b358d65", "target":{"file":"cmds/servicemanager/main.cpp", "function":"main"}}]}}, {"package":{"name":"platform/frameworks/native", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2025-03-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"], "severity":"High", "spl":"2025-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"255594495738122695466899620609061562274", "length":979}, "id":"ASB-A-382775095-447a6095", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06", "target":{"file":"cmds/servicemanager/main.cpp", "function":"main"}}, {"deprecated":false, "digest":{"line_hashes":["5021685984790554028578586044454569582", "158063599821068648845358961348018589092", "1644809115128101204043221543353588375", "239001468851271657634345280584581928601"], "threshold":0.9}, "id":"ASB-A-382775095-6a9977f9", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06", "target":{"file":"cmds/servicemanager/main.cpp"}}]}}, {"package":{"name":"platform/frameworks/native", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2025-03-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06"], "severity":"High", "spl":"2025-03-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"255594495738122695466899620609061562274", "length":979}, "id":"ASB-A-382775095-1abf1cc4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06", "target":{"file":"cmds/servicemanager/main.cpp", "function":"main"}}, {"deprecated":false, "digest":{"line_hashes":["5021685984790554028578586044454569582", "158063599821068648845358961348018589092", "1644809115128101204043221543353588375", "239001468851271657634345280584581928601"], "threshold":0.9}, "id":"ASB-A-382775095-c74797f7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/native/+/6c86b6c926ab527eb88804711beb4bd09e348e06", "target":{"file":"cmds/servicemanager/main.cpp"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2025-03-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/native/+/c32d4defe0f4e5cad86437d6672de7a76caf1a79"}]}