{"id":"ASB-A-482024712", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-45522", "A-482024712"], "details":"In setProvisioning of EnterpriseProvisioningWrapper.java, there is a possible local bypass of user interaction requirements on package installation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/ManagedProvisioning", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"220262975009191960028187275266101907036", "length":475}, "id":"ASB-A-482024712-4440ee92", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java", "function":"verifyActionAndCallerInner"}}, {"deprecated":false, "digest":{"line_hashes":["101977703831286833404947090558882533891", "79528439821016581726390354556650250724", "110628985262927932226201206664334467886"], "threshold":0.9}, "id":"ASB-A-482024712-46a1ba16", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8", "target":{"file":"src/com/android/managedprovisioning/common/Globals.java"}}, {"deprecated":false, "digest":{"line_hashes":["234386524556167911415314882076874463555", "100779069912042773471003773619909090394", "102622712216492252712970956182813507611", "128727856196892671407637945168632125947", "3363069296211027055243577965575008862", "120237504258966383069508387728616585931", "8251588826120684776545440082453682050", "212439321413227085732384524619099854882", "191934219505742740381089598127273525815", "186182902646409464002697776283655398623", "98272384021563122742223539537536677623", "206713745442346364713057073319978224460"], "threshold":0.9}, "id":"ASB-A-482024712-52048703", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/a27b6d73fcee6553e8977ac0f28feb6390d214c8", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"}}]}}, {"package":{"name":"platform/packages/apps/ManagedProvisioning", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["234386524556167911415314882076874463555", "100779069912042773471003773619909090394", "102622712216492252712970956182813507611", "128727856196892671407637945168632125947", "3363069296211027055243577965575008862", "120237504258966383069508387728616585931", "8251588826120684776545440082453682050", "212439321413227085732384524619099854882", "191934219505742740381089598127273525815", "186182902646409464002697776283655398623", "98272384021563122742223539537536677623", "206713745442346364713057073319978224460"], "threshold":0.9}, "id":"ASB-A-482024712-5c8f164f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"}}, {"deprecated":false, "digest":{"line_hashes":["101977703831286833404947090558882533891", "79528439821016581726390354556650250724", "110628985262927932226201206664334467886"], "threshold":0.9}, "id":"ASB-A-482024712-d4b90f8f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee", "target":{"file":"src/com/android/managedprovisioning/common/Globals.java"}}, {"deprecated":false, "digest":{"function_hash":"220262975009191960028187275266101907036", "length":475}, "id":"ASB-A-482024712-ddc52f4c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/6f5cdbd65d62ceaf4c570cd82ff01d7aed88b8ee", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java", "function":"verifyActionAndCallerInner"}}]}}, {"package":{"name":"platform/packages/apps/ManagedProvisioning", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["101977703831286833404947090558882533891", "79528439821016581726390354556650250724", "110628985262927932226201206664334467886"], "threshold":0.9}, "id":"ASB-A-482024712-855f156f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246", "target":{"file":"src/com/android/managedprovisioning/common/Globals.java"}}, {"deprecated":false, "digest":{"line_hashes":["234386524556167911415314882076874463555", "100779069912042773471003773619909090394", "102622712216492252712970956182813507611", "128727856196892671407637945168632125947", "3363069296211027055243577965575008862", "120237504258966383069508387728616585931", "8251588826120684776545440082453682050", "212439321413227085732384524619099854882", "191934219505742740381089598127273525815", "186182902646409464002697776283655398623", "98272384021563122742223539537536677623", "206713745442346364713057073319978224460"], "threshold":0.9}, "id":"ASB-A-482024712-b4dd14b5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"}}, {"deprecated":false, "digest":{"function_hash":"220262975009191960028187275266101907036", "length":475}, "id":"ASB-A-482024712-bd220c20", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/595e9fdc0131ce72234a0b6650d426f5387b8246", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java", "function":"verifyActionAndCallerInner"}}]}}, {"package":{"name":"platform/packages/apps/ManagedProvisioning", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["101977703831286833404947090558882533891", "79528439821016581726390354556650250724", "110628985262927932226201206664334467886"], "threshold":0.9}, "id":"ASB-A-482024712-3217096e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb", "target":{"file":"src/com/android/managedprovisioning/common/Globals.java"}}, {"deprecated":false, "digest":{"line_hashes":["234386524556167911415314882076874463555", "100779069912042773471003773619909090394", "102622712216492252712970956182813507611", "128727856196892671407637945168632125947", "3363069296211027055243577965575008862", "120237504258966383069508387728616585931", "8251588826120684776545440082453682050", "212439321413227085732384524619099854882", "191934219505742740381089598127273525815", "186182902646409464002697776283655398623", "98272384021563122742223539537536677623", "206713745442346364713057073319978224460"], "threshold":0.9}, "id":"ASB-A-482024712-67714aa5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"}}, {"deprecated":false, "digest":{"function_hash":"220262975009191960028187275266101907036", "length":475}, "id":"ASB-A-482024712-a0aa23c7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/456a150d6f4222dc776fd28908dc4edb93d17bbb", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java", "function":"verifyActionAndCallerInner"}}]}}, {"package":{"name":"platform/packages/apps/ManagedProvisioning", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["234386524556167911415314882076874463555", "100779069912042773471003773619909090394", "102622712216492252712970956182813507611", "128727856196892671407637945168632125947", "3363069296211027055243577965575008862", "120237504258966383069508387728616585931", "8251588826120684776545440082453682050", "212439321413227085732384524619099854882", "191934219505742740381089598127273525815", "186182902646409464002697776283655398623", "98272384021563122742223539537536677623", "206713745442346364713057073319978224460"], "threshold":0.9}, "id":"ASB-A-482024712-070888c2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"}}, {"deprecated":false, "digest":{"function_hash":"220262975009191960028187275266101907036", "length":475}, "id":"ASB-A-482024712-779e6a92", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java", "function":"verifyActionAndCallerInner"}}, {"deprecated":false, "digest":{"line_hashes":["101977703831286833404947090558882533891", "79528439821016581726390354556650250724", "110628985262927932226201206664334467886"], "threshold":0.9}, "id":"ASB-A-482024712-ff0ee458", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/bb48f530cb31e91136d7f7f9a4978cf7aa1076c0", "target":{"file":"src/com/android/managedprovisioning/common/Globals.java"}}]}}, {"package":{"name":"platform/packages/apps/ManagedProvisioning", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["234386524556167911415314882076874463555", "100779069912042773471003773619909090394", "102622712216492252712970956182813507611", "128727856196892671407637945168632125947", "3363069296211027055243577965575008862", "120237504258966383069508387728616585931", "8251588826120684776545440082453682050", "212439321413227085732384524619099854882", "191934219505742740381089598127273525815", "186182902646409464002697776283655398623", "98272384021563122742223539537536677623", "206713745442346364713057073319978224460"], "threshold":0.9}, "id":"ASB-A-482024712-706ac887", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java"}}, {"deprecated":false, "digest":{"function_hash":"220262975009191960028187275266101907036", "length":475}, "id":"ASB-A-482024712-80b79654", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d", "target":{"file":"src/com/android/managedprovisioning/preprovisioning/PreProvisioningActivityController.java", "function":"verifyActionAndCallerInner"}}, {"deprecated":false, "digest":{"line_hashes":["101977703831286833404947090558882533891", "79528439821016581726390354556650250724", "110628985262927932226201206664334467886"], "threshold":0.9}, "id":"ASB-A-482024712-8361b830", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/ManagedProvisioning/+/8b97d69d2f214ca303e6ef10df5b8489105da75d", "target":{"file":"src/com/android/managedprovisioning/common/Globals.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}