{"id":"ASB-A-473005624", "published":"2026-06-01T00:00:00Z", "modified":"2026-06-26T15:22:10.377767615Z", "aliases":["CVE-2026-0096", "A-473005624"], "details":"In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-06-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/62b7a2483f4eef4ff0f02ccb81fe6cfea9819ef8"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["159324348765147310522604654680846368000", "41991939993019617369715164125433827417", "25263024759571172987283809017921453145", "15057426393544080933666848142032792581", "284048333391037264030703705924151321501", "121146827228712055477810338936247853420", "240692908214260540521571245005001803379", "278255309700569017139674697718274297938", "250098259322782252527027101157448521637"], "threshold":0.9}, "id":"ASB-A-473005624-244c7946", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/62b7a2483f4eef4ff0f02ccb81fe6cfea9819ef8", "target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java"}}, {"deprecated":false, "digest":{"function_hash":"53590786290521689243474473953963296370", "length":255}, "id":"ASB-A-473005624-f5a1ad8c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/62b7a2483f4eef4ff0f02ccb81fe6cfea9819ef8", "target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java", "function":"getAppLabel"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-06-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/08db8c5058a3257b9dbc8ba2647bf7d0b46a42a9"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["159324348765147310522604654680846368000", "41991939993019617369715164125433827417", "25263024759571172987283809017921453145", "15057426393544080933666848142032792581", "284048333391037264030703705924151321501", "121146827228712055477810338936247853420", "240692908214260540521571245005001803379", "278255309700569017139674697718274297938", "250098259322782252527027101157448521637"], "threshold":0.9}, "id":"ASB-A-473005624-2624d8f6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/08db8c5058a3257b9dbc8ba2647bf7d0b46a42a9", "target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java"}}, {"deprecated":false, "digest":{"function_hash":"53590786290521689243474473953963296370", "length":255}, "id":"ASB-A-473005624-51188aa8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/08db8c5058a3257b9dbc8ba2647bf7d0b46a42a9", "target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java", "function":"getAppLabel"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-06-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/db5cc76685baaa0b82b4628da239d89e641812a4"], "severity":"High", "spl":"2026-06-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["159324348765147310522604654680846368000", "41991939993019617369715164125433827417", "25263024759571172987283809017921453145", "15057426393544080933666848142032792581", "284048333391037264030703705924151321501", "121146827228712055477810338936247853420", "240692908214260540521571245005001803379", "278255309700569017139674697718274297938", "250098259322782252527027101157448521637"], "threshold":0.9}, "id":"ASB-A-473005624-36de580c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/db5cc76685baaa0b82b4628da239d89e641812a4", "target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java"}}, {"deprecated":false, "digest":{"function_hash":"53590786290521689243474473953963296370", "length":255}, "id":"ASB-A-473005624-6ce25535", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/db5cc76685baaa0b82b4628da239d89e641812a4", "target":{"file":"src/com/android/settings/bluetooth/ForgetDeviceDialogFragment.java", "function":"getAppLabel"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-06-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Settings/+/24b35b078f392dc4d649338ec123dd3f8928440b"}]}