{"id":"ASB-A-435188844", "published":"2026-06-01T00:00:00Z", "modified":"2026-06-09T15:27:06.151355248Z", "aliases":["CVE-2025-48600", "A-435188844"], "details":"In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-06-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d1ec2efc0b8941a0585712d5b4cec95fd9f12f17", "https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b", "https://android.googlesource.com/platform/frameworks/base/+/57eaa465cabb9a74cc57cbb16657c36ad9fc2d58"], "severity":"High", "spl":"2026-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"122749625844804206727342454752676686296", "length":2106}, "id":"ASB-A-435188844-0151069d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"getInstalledApplications"}}, {"deprecated":false, "digest":{"function_hash":"5647340085746230413610397063328464262", "length":1984}, "id":"ASB-A-435188844-625ae55b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"queryIntentServicesInternal"}}, {"deprecated":false, "digest":{"line_hashes":["227316091039036741688165405033312270495", "168041188259495589488515740846403180969", "296082808144919494521700876815600945391", "99142030560691458793086281728954589051", "139900786063038530169935772350342113882", "108281999829929096221549010765423657699", "200989171371557913724393867628334998461"], "threshold":0.9}, "id":"ASB-A-435188844-81793f07", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/57eaa465cabb9a74cc57cbb16657c36ad9fc2d58", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}, {"deprecated":false, "digest":{"line_hashes":["4294957759969163647030007171520665213", "306741063813963352960024090521032319801", "321143770395008550573402163604596675100", "159971660088949769821375506581406084819", "36913861435273227248918589552137622929", "36963201016912102583229836077585078143", "55766225966301963280177765834222273378", "41950295011078535475049143437751156035", "41380579415712750401924041556804812701", "85770552592431473164032735928327496872", "219997553884769946559652061920708055675", "198234216519597277862920543544592306576", "1487286327549188928671549598742772044"], "threshold":0.9}, "id":"ASB-A-435188844-944e4bea", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d1ec2efc0b8941a0585712d5b4cec95fd9f12f17", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"249151320877369229577323512686903901657", "length":1211}, "id":"ASB-A-435188844-c2834459", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d1ec2efc0b8941a0585712d5b4cec95fd9f12f17", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"resolveContentProvider"}}, {"deprecated":false, "digest":{"function_hash":"8306612149884868563026530448652594284", "length":570}, "id":"ASB-A-435188844-d6d4cfa5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"hasCrossUserPermission"}}, {"deprecated":false, "digest":{"function_hash":"155955387924007233392608071178537083333", "length":197}, "id":"ASB-A-435188844-e70dc1ed", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"getComponentEnabledSetting"}}, {"deprecated":false, "digest":{"function_hash":"218154990225916159172293927134632331536", "length":1313}, "id":"ASB-A-435188844-f1ff118f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/57eaa465cabb9a74cc57cbb16657c36ad9fc2d58", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"resolveContentProvider"}}, {"deprecated":false, "digest":{"line_hashes":["15870670946479014925001504625572540566", "266496136111753541690104297175217800057", "256033668868439213716330198766041779588", "72923278655251581498243308851500364391", "98905019191585788313594137073002121425", "267145194869585725088647465490166871692", "178824460229124039209746682262284872734", "32888512578613526980746288787537898207", "149303953833791877644512825266718304072", "73876162608022179835938230523821631111", "10191450910670444366152688014456025508", "111365901445882203949516727381253004922", "154716211210760544107959204467901304495", "16390171742763364730724830698676653437", "147946162775492104294407966842086961863", "145693316129868691273772613216711399073", "35882275691100037462877197287475299546", "222528837614798955560984759610539387666", "281153006355958011749245036745581092893", "91837217503181450060727752121693815721", "97832320229534722407012942704610568251", "154573272478387978490097957500149675549", "211002399056754244271423834466983655530"], "threshold":0.9}, "id":"ASB-A-435188844-f422a1f5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6775f07552f15f6e4b934bb9552f7a6abff8060b", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-06-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218", "https://android.googlesource.com/platform/frameworks/base/+/517492cb0b1b2fb664de1689548dbfe4a8a3cec1", "https://android.googlesource.com/platform/frameworks/base/+/c732cc437484fb8665c93d587143869c0a11c9d5"], "severity":"High", "spl":"2026-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["15870670946479014925001504625572540566", "266496136111753541690104297175217800057", "256033668868439213716330198766041779588", "72923278655251581498243308851500364391", "98905019191585788313594137073002121425", "267145194869585725088647465490166871692", "178824460229124039209746682262284872734", "32888512578613526980746288787537898207", "264875104936512111300848035006535202788", "271655580764290341023650166012204054618", "29740387121134890746022108021521388352", "232740267204609464100447218023341939531", "544833157332720308311909603872673442", "126765616413512870019687800692235248867", "197867991546047462033292404306628545077", "25690728072073030173148040545132618370", "290442913872884727345794975608903147363", "310151990810170675759313300378787045167", "145693316129868691273772613216711399073", "35882275691100037462877197287475299546", "222528837614798955560984759610539387666", "281153006355958011749245036745581092893", "91837217503181450060727752121693815721", "97832320229534722407012942704610568251", "154573272478387978490097957500149675549", "211002399056754244271423834466983655530"], "threshold":0.9}, "id":"ASB-A-435188844-056f931b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"102896054550205968779892655968754707601", "length":449}, "id":"ASB-A-435188844-53a70c54", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"hasCrossUserPermission"}}, {"deprecated":false, "digest":{"function_hash":"249151320877369229577323512686903901657", "length":1211}, "id":"ASB-A-435188844-7847882e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/517492cb0b1b2fb664de1689548dbfe4a8a3cec1", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"resolveContentProvider"}}, {"deprecated":false, "digest":{"function_hash":"5647340085746230413610397063328464262", "length":1984}, "id":"ASB-A-435188844-8d0f46d7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"queryIntentServicesInternal"}}, {"deprecated":false, "digest":{"function_hash":"218154990225916159172293927134632331536", "length":1313}, "id":"ASB-A-435188844-921fafb8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c732cc437484fb8665c93d587143869c0a11c9d5", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"resolveContentProvider"}}, {"deprecated":false, "digest":{"function_hash":"155955387924007233392608071178537083333", "length":197}, "id":"ASB-A-435188844-c84778ee", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"getComponentEnabledSetting"}}, {"deprecated":false, "digest":{"line_hashes":["227316091039036741688165405033312270495", "168041188259495589488515740846403180969", "296082808144919494521700876815600945391", "99142030560691458793086281728954589051", "139900786063038530169935772350342113882", "108281999829929096221549010765423657699", "200989171371557913724393867628334998461"], "threshold":0.9}, "id":"ASB-A-435188844-cde410b3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c732cc437484fb8665c93d587143869c0a11c9d5", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"122749625844804206727342454752676686296", "length":2106}, "id":"ASB-A-435188844-d91e9187", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8dabe17d3bb3a780c06730262d28edbc38a06218", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"getInstalledApplications"}}, {"deprecated":false, "digest":{"line_hashes":["4294957759969163647030007171520665213", "306741063813963352960024090521032319801", "321143770395008550573402163604596675100", "159971660088949769821375506581406084819", "36913861435273227248918589552137622929", "36963201016912102583229836077585078143", "55766225966301963280177765834222273378", "41950295011078535475049143437751156035", "41380579415712750401924041556804812701", "85770552592431473164032735928327496872", "219997553884769946559652061920708055675", "198234216519597277862920543544592306576", "1487286327549188928671549598742772044"], "threshold":0.9}, "id":"ASB-A-435188844-f7d56699", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/517492cb0b1b2fb664de1689548dbfe4a8a3cec1", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-06-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/90eff8175258a5ef2ad2007585f1f920bcfee0d3"], "severity":"High", "spl":"2026-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"218154990225916159172293927134632331536", "length":1313}, "id":"ASB-A-435188844-00a004ee", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90eff8175258a5ef2ad2007585f1f920bcfee0d3", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"resolveContentProvider"}}, {"deprecated":false, "digest":{"line_hashes":["227316091039036741688165405033312270495", "168041188259495589488515740846403180969", "296082808144919494521700876815600945391", "99142030560691458793086281728954589051", "139900786063038530169935772350342113882", "108281999829929096221549010765423657699", "200989171371557913724393867628334998461"], "threshold":0.9}, "id":"ASB-A-435188844-2354fcbb", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/90eff8175258a5ef2ad2007585f1f920bcfee0d3", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-06-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f3e6526b770761bfe1b51abdc32e86ee2558ec72"], "severity":"High", "spl":"2026-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["227316091039036741688165405033312270495", "168041188259495589488515740846403180969", "296082808144919494521700876815600945391", "99142030560691458793086281728954589051", "139900786063038530169935772350342113882", "108281999829929096221549010765423657699", "200989171371557913724393867628334998461"], "threshold":0.9}, "id":"ASB-A-435188844-70e7b7bc", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f3e6526b770761bfe1b51abdc32e86ee2558ec72", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"218154990225916159172293927134632331536", "length":1313}, "id":"ASB-A-435188844-f4ed263d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f3e6526b770761bfe1b51abdc32e86ee2558ec72", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"resolveContentProvider"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-06-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647", "https://android.googlesource.com/platform/frameworks/base/+/97e34e5a6bfa57236995550c5d1d12f979c29ab6", "https://android.googlesource.com/platform/frameworks/base/+/ef604aa614d6de762954f80b64d9fdbba43a04e5"], "severity":"High", "spl":"2026-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"155955387924007233392608071178537083333", "length":197}, "id":"ASB-A-435188844-22629813", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"getComponentEnabledSetting"}}, {"deprecated":false, "digest":{"line_hashes":["292900562621289740165420360404681557470", "254099383506272289078753119801457610562", "8382420818903945909209296020667851894", "159971660088949769821375506581406084819", "36913861435273227248918589552137622929", "36963201016912102583229836077585078143", "55766225966301963280177765834222273378", "41950295011078535475049143437751156035", "41380579415712750401924041556804812701", "85770552592431473164032735928327496872", "219997553884769946559652061920708055675", "198234216519597277862920543544592306576", "1487286327549188928671549598742772044"], "threshold":0.9}, "id":"ASB-A-435188844-497cb12a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/97e34e5a6bfa57236995550c5d1d12f979c29ab6", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"218154990225916159172293927134632331536", "length":1313}, "id":"ASB-A-435188844-577a65c0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ef604aa614d6de762954f80b64d9fdbba43a04e5", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"resolveContentProvider"}}, {"deprecated":false, "digest":{"function_hash":"162419856787718227743110672559810970109", "length":1878}, "id":"ASB-A-435188844-77045391", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"getInstalledApplications"}}, {"deprecated":false, "digest":{"function_hash":"86954973004694357275985886223532729658", "length":1888}, "id":"ASB-A-435188844-a286a67f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"queryIntentServicesInternal"}}, {"deprecated":false, "digest":{"function_hash":"249151320877369229577323512686903901657", "length":1211}, "id":"ASB-A-435188844-a45054c6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/97e34e5a6bfa57236995550c5d1d12f979c29ab6", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"resolveContentProvider"}}, {"deprecated":false, "digest":{"line_hashes":["57339914458931691710384622355105500640", "96745049509738410035755485359915924349", "256033668868439213716330198766041779588", "72923278655251581498243308851500364391", "98905019191585788313594137073002121425", "267145194869585725088647465490166871692", "178824460229124039209746682262284872734", "32888512578613526980746288787537898207", "264875104936512111300848035006535202788", "271655580764290341023650166012204054618", "29740387121134890746022108021521388352", "232740267204609464100447218023341939531", "544833157332720308311909603872673442", "126765616413512870019687800692235248867", "197867991546047462033292404306628545077", "25690728072073030173148040545132618370", "290442913872884727345794975608903147363", "310151990810170675759313300378787045167", "95997925121681771021803279627538258027", "215555870435068607277313027158318557484", "222528837614798955560984759610539387666", "281153006355958011749245036745581092893", "91837217503181450060727752121693815721", "97832320229534722407012942704610568251", "154573272478387978490097957500149675549", "211002399056754244271423834466983655530"], "threshold":0.9}, "id":"ASB-A-435188844-c15d81bf", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"102896054550205968779892655968754707601", "length":449}, "id":"ASB-A-435188844-d9b807a0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d87d678b1480e42c9c9d5b50d7b4b9a7585f5647", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java", "function":"hasCrossUserPermission"}}, {"deprecated":false, "digest":{"line_hashes":["227316091039036741688165405033312270495", "168041188259495589488515740846403180969", "296082808144919494521700876815600945391", "99142030560691458793086281728954589051", "139900786063038530169935772350342113882", "108281999829929096221549010765423657699", "200989171371557913724393867628334998461"], "threshold":0.9}, "id":"ASB-A-435188844-ec547ff1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ef604aa614d6de762954f80b64d9fdbba43a04e5", "target":{"file":"services/core/java/com/android/server/pm/ComputerEngine.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-06-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/02fc7472ebb27fd394caafa8b87d4daead295d70"}]}