{"id":"ASB-A-494585668", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-10T15:43:18.983809180Z", "aliases":["CVE-2026-28624", "A-494585668"], "details":"In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-09-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f"], "severity":"High", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"282676188069123263012021670236518582350", "length":519}, "id":"ASB-A-494585668-16a378d9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java", "function":"onAuthenticationSucceeded"}}, {"deprecated":false, "digest":{"function_hash":"32665876195638296979997778435093411561", "length":273}, "id":"ASB-A-494585668-5508be75", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"line_hashes":["84593077711908135041558218202040325065", "252532824643222096991086064549492778874", "261624836854169473028206718849663316071", "11940075462925023646595161087592068533", "329604635574742802474718114706034976988", "94425592515769651551795622825457719967", "142046650168156065069941248160612091854", "339984016205820877152474195367953243384", "280096478600413740358447277571206260409", "293419562084526619782177503018313373971", "81328940153259826599555762959327017111", "254925979891075030082494879575947115587", "337224780723990571172092314652605720080", "167963172314617511412550797330940236700", "171293951055979856932296723760858064382", "245509428877725867596575479083711199301", "135075427366898096346582818512520434529", "9357615191256052559120393169858125884", "214800579272569593164185860523746821443", "49164820578418263194904628095537348422", "146681275437368894939314576438569640609", "87604808395722069774285068467732569341", "25716162600148752210140207888775965083", "196377103502877859548386929643279875626", "246638492459690661715177485133175256075", "319902007053799012744013829253249799890", "60750567615105906490739994072873627701", "147479440469064893751870439272685564888", "104774849201676531514884571666799885161"], "threshold":0.9}, "id":"ASB-A-494585668-65f9fdf5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/Utils.java"}}, {"deprecated":false, "digest":{"line_hashes":["216611538982774219064357036722095770683", "238591627107206518704204430726853451105", "167366239788893862494835965945395819714", "45227581825024894005327719110681144955", "312638224080952593892869323603095369527", "203696545924957432548161677662511328874", "192386710449203338217395540483997885079", "79868520545354998358264995962044749217", "144762822544313989024791584550580612217", "243587080073749473751825295264367901353", "335212839679497896287875255361023669164", "186295943394775587985858650550986159853", "7341732184311982688986679780124516111", "64750267052431998743177942597928366092", "72545818926335418134865693705424006939", "156649761607953611405084694923205163925"], "threshold":0.9}, "id":"ASB-A-494585668-7121cc8c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"163810253413383527125518995371843167927", "length":630}, "id":"ASB-A-494585668-8831773a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onSaveInstanceState"}}, {"deprecated":false, "digest":{"function_hash":"35026602641749790704822154187908252186", "length":299}, "id":"ASB-A-494585668-8c028f12", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"function_hash":"75869849386813686728659189892649513593", "length":2569}, "id":"ASB-A-494585668-af6c8c4f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"330015964169304060567784990814072368715", "length":6056}, "id":"ASB-A-494585668-b151debb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"310513005022918049460756000669410865231", "length":2469}, "id":"ASB-A-494585668-c624af12", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onActivityResult"}}, {"deprecated":false, "digest":{"function_hash":"334847760755918641818569326583073782349", "length":774}, "id":"ASB-A-494585668-c940a1a8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/Utils.java", "function":"getIntentForBiometricAuthentication"}}, {"deprecated":false, "digest":{"line_hashes":["71932557150206659975853232926336500607", "175108171127236356764268833378095426826", "140706492593317516265382343012912317201", "164870383276795681153716561908207968536", "196401770078667145028851776345906971618", "190388584261322128522137291008973181217", "218381582642163307327777852524225769130", "340251991205858917937126935710584912810", "290826557895233652068832861007571510972", "296702662202197618701874475029708549129", "183757092393531542172000701895942279255", "23997919683986308749509442302326934129", "10283259619358558470820165145726371030", "215311000833777952339171444261790178955", "326803075879054571434020649152387299876", "78377383732106295357327317256140113908", "40951321693192716743406588819681209431", "64631800881591706946272949083555397978", "267061728358347340865905907711955675516", "150267972767906926429253505506034388800", "284872024643385197664699105803171603947", "156148966619433747979583754779860046569", "154233744154165332833692081628410321256", "109784385202364438098158433821287081011", "69392890539891819890456109275306573", "7647996677264387666790907480596133115", "181379220911791232952119684609323482231", "37145401911884376766519628517267636240", "332792391964525351147947942645316943854", "196834181792294525564220380023349547028", "216392775168902171258354975663879403061", "208749307360775127418014842672949484850", "59029525604458179404622278040192977487", "70543526127930411208112270085533205179", "68315707067356237757460699103901217314", "319519171549899841701286902608381090364", "182361854510655975413413811557648692407", "292985995249374205351384820676736623836", "205461937507870903060060357338016892931", "24710587099882822677726480918346710697", "68027262495572715269170868938619101553", "289326486673962088609417905749253454109", "104467680485070337458823135226465072775", "5420187718368315485376863016951436862", "162885105295699433360768953554061005660", "255685053125655992016181932082344149641"], "threshold":0.9}, "id":"ASB-A-494585668-e0a2b186", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"}}, {"deprecated":false, "digest":{"function_hash":"326251186975944397833437444784282534539", "length":802}, "id":"ASB-A-494585668-e27bd504", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"handleAuthenticationSuccessful"}}, {"deprecated":false, "digest":{"function_hash":"298633626937842160491492051725414845719", "length":248}, "id":"ASB-A-494585668-eed82de4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/e99f4f51fe5823cd990f93984517ee2875809c7f", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-09-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e"], "severity":"High", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"35026602641749790704822154187908252186", "length":299}, "id":"ASB-A-494585668-1240514f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"function_hash":"298633626937842160491492051725414845719", "length":248}, "id":"ASB-A-494585668-3653a8ea", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"function_hash":"179414397889464978312367791223126608314", "length":6399}, "id":"ASB-A-494585668-3e32a0c7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"309719402835937433708152680169566842738", "length":840}, "id":"ASB-A-494585668-665bf5c7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/Utils.java", "function":"getIntentForBiometricAuthentication"}}, {"deprecated":false, "digest":{"line_hashes":["71932557150206659975853232926336500607", "175108171127236356764268833378095426826", "140706492593317516265382343012912317201", "164870383276795681153716561908207968536", "196401770078667145028851776345906971618", "190388584261322128522137291008973181217", "218381582642163307327777852524225769130", "340251991205858917937126935710584912810", "290826557895233652068832861007571510972", "296702662202197618701874475029708549129", "183757092393531542172000701895942279255", "23997919683986308749509442302326934129", "10283259619358558470820165145726371030", "215311000833777952339171444261790178955", "326803075879054571434020649152387299876", "78377383732106295357327317256140113908", "40951321693192716743406588819681209431", "64631800881591706946272949083555397978", "267061728358347340865905907711955675516", "150267972767906926429253505506034388800", "82639642542768048142959026316503390150", "138351568694322524620940942219736527963", "253445064890254243133863684052557568384", "331093619199226893178260004339309492966", "254021103023271981294645609282663613100", "318766794864380495148733835512356283792", "45600841732258828903347531151455668526", "134033903998753801970336404295373253986", "135510862523144219110504290676455925420", "69392890539891819890456109275306573", "7647996677264387666790907480596133115", "181379220911791232952119684609323482231", "37145401911884376766519628517267636240", "332792391964525351147947942645316943854", "196834181792294525564220380023349547028", "216392775168902171258354975663879403061", "208749307360775127418014842672949484850", "59029525604458179404622278040192977487", "70543526127930411208112270085533205179", "68315707067356237757460699103901217314", "319519171549899841701286902608381090364", "182361854510655975413413811557648692407", "292985995249374205351384820676736623836", "205461937507870903060060357338016892931", "24710587099882822677726480918346710697", "68027262495572715269170868938619101553", "289326486673962088609417905749253454109", "104467680485070337458823135226465072775", "5420187718368315485376863016951436862", "162885105295699433360768953554061005660", "255685053125655992016181932082344149641"], "threshold":0.9}, "id":"ASB-A-494585668-66d02461", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"}}, {"deprecated":false, "digest":{"function_hash":"234020962603676770365731763331470732521", "length":2625}, "id":"ASB-A-494585668-75d7ae1c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"282676188069123263012021670236518582350", "length":519}, "id":"ASB-A-494585668-7daa4df9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java", "function":"onAuthenticationSucceeded"}}, {"deprecated":false, "digest":{"function_hash":"326251186975944397833437444784282534539", "length":802}, "id":"ASB-A-494585668-81ac1f02", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"handleAuthenticationSuccessful"}}, {"deprecated":false, "digest":{"function_hash":"6497338532305591295657489758465178103", "length":2573}, "id":"ASB-A-494585668-95ce333a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onActivityResult"}}, {"deprecated":false, "digest":{"function_hash":"32665876195638296979997778435093411561", "length":273}, "id":"ASB-A-494585668-c29dd873", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"line_hashes":["84593077711908135041558218202040325065", "252532824643222096991086064549492778874", "261624836854169473028206718849663316071", "11940075462925023646595161087592068533", "329604635574742802474718114706034976988", "94425592515769651551795622825457719967", "142046650168156065069941248160612091854", "339984016205820877152474195367953243384", "280096478600413740358447277571206260409", "293419562084526619782177503018313373971", "81328940153259826599555762959327017111", "254925979891075030082494879575947115587", "337224780723990571172092314652605720080", "167963172314617511412550797330940236700", "171293951055979856932296723760858064382", "245509428877725867596575479083711199301", "135075427366898096346582818512520434529", "9357615191256052559120393169858125884", "214800579272569593164185860523746821443", "261906008856212832792001614282443073403", "58034145936685779782304342435204806766", "87604808395722069774285068467732569341", "25716162600148752210140207888775965083", "89867073997525876774499851103939010037", "195320092645580450979061646609089333024", "319902007053799012744013829253249799890", "60750567615105906490739994072873627701", "147479440469064893751870439272685564888", "104774849201676531514884571666799885161"], "threshold":0.9}, "id":"ASB-A-494585668-c756b11c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/Utils.java"}}, {"deprecated":false, "digest":{"function_hash":"163810253413383527125518995371843167927", "length":630}, "id":"ASB-A-494585668-cf6194ae", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onSaveInstanceState"}}, {"deprecated":false, "digest":{"line_hashes":["216611538982774219064357036722095770683", "238591627107206518704204430726853451105", "167366239788893862494835965945395819714", "45227581825024894005327719110681144955", "312638224080952593892869323603095369527", "203696545924957432548161677662511328874", "192386710449203338217395540483997885079", "79868520545354998358264995962044749217", "144762822544313989024791584550580612217", "243587080073749473751825295264367901353", "335212839679497896287875255361023669164", "186295943394775587985858650550986159853", "7341732184311982688986679780124516111", "64750267052431998743177942597928366092", "72545818926335418134865693705424006939", "156649761607953611405084694923205163925"], "threshold":0.9}, "id":"ASB-A-494585668-f311f489", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2d3354240c37b5f7c0ec6f18218a5c8fe0a9344e", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-09-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f"], "severity":"High", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"334847760755918641818569326583073782349", "length":774}, "id":"ASB-A-494585668-0cfc26d4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/Utils.java", "function":"getIntentForBiometricAuthentication"}}, {"deprecated":false, "digest":{"function_hash":"71532852142030614830398123091447287252", "length":2789}, "id":"ASB-A-494585668-16737bfc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onActivityResult"}}, {"deprecated":false, "digest":{"line_hashes":["216611538982774219064357036722095770683", "238591627107206518704204430726853451105", "167366239788893862494835965945395819714", "45227581825024894005327719110681144955", "312638224080952593892869323603095369527", "203696545924957432548161677662511328874", "192386710449203338217395540483997885079", "79868520545354998358264995962044749217", "144762822544313989024791584550580612217", "243587080073749473751825295264367901353", "335212839679497896287875255361023669164", "186295943394775587985858650550986159853", "7341732184311982688986679780124516111", "64750267052431998743177942597928366092", "72545818926335418134865693705424006939", "156649761607953611405084694923205163925"], "threshold":0.9}, "id":"ASB-A-494585668-1c0e4533", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"35026602641749790704822154187908252186", "length":299}, "id":"ASB-A-494585668-38022ec7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"function_hash":"154322933754375672069017953503795901787", "length":6268}, "id":"ASB-A-494585668-48c41c10", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"282676188069123263012021670236518582350", "length":519}, "id":"ASB-A-494585668-7f67193e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java", "function":"onAuthenticationSucceeded"}}, {"deprecated":false, "digest":{"line_hashes":["71932557150206659975853232926336500607", "175108171127236356764268833378095426826", "140706492593317516265382343012912317201", "164870383276795681153716561908207968536", "196401770078667145028851776345906971618", "190388584261322128522137291008973181217", "218381582642163307327777852524225769130", "340251991205858917937126935710584912810", "290826557895233652068832861007571510972", "296702662202197618701874475029708549129", "183757092393531542172000701895942279255", "23997919683986308749509442302326934129", "10283259619358558470820165145726371030", "215311000833777952339171444261790178955", "326803075879054571434020649152387299876", "78377383732106295357327317256140113908", "40951321693192716743406588819681209431", "64631800881591706946272949083555397978", "267061728358347340865905907711955675516", "150267972767906926429253505506034388800", "284872024643385197664699105803171603947", "156148966619433747979583754779860046569", "154233744154165332833692081628410321256", "109784385202364438098158433821287081011", "11494662368815157159576278359847038080", "198501506775194349575621905019750406993", "301173076705388724543026510102700914107", "330583157563336724940711160400967729503", "138351568694322524620940942219736527963", "253445064890254243133863684052557568384", "331093619199226893178260004339309492966", "254021103023271981294645609282663613100", "318766794864380495148733835512356283792", "45600841732258828903347531151455668526", "134033903998753801970336404295373253986", "135510862523144219110504290676455925420", "69392890539891819890456109275306573", "7647996677264387666790907480596133115", "181379220911791232952119684609323482231", "37145401911884376766519628517267636240", "332792391964525351147947942645316943854", "196834181792294525564220380023349547028", "216392775168902171258354975663879403061", "208749307360775127418014842672949484850", "59029525604458179404622278040192977487", "70543526127930411208112270085533205179", "68315707067356237757460699103901217314", "319519171549899841701286902608381090364", "182361854510655975413413811557648692407", "292985995249374205351384820676736623836", "205461937507870903060060357338016892931", "24710587099882822677726480918346710697", "68027262495572715269170868938619101553", "289326486673962088609417905749253454109", "104467680485070337458823135226465072775", "5420187718368315485376863016951436862", "162885105295699433360768953554061005660", "255685053125655992016181932082344149641"], "threshold":0.9}, "id":"ASB-A-494585668-a4b7ff4c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"}}, {"deprecated":false, "digest":{"function_hash":"326251186975944397833437444784282534539", "length":802}, "id":"ASB-A-494585668-a8f8a72d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"handleAuthenticationSuccessful"}}, {"deprecated":false, "digest":{"function_hash":"234020962603676770365731763331470732521", "length":2625}, "id":"ASB-A-494585668-b1c76b0a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"line_hashes":["84593077711908135041558218202040325065", "252532824643222096991086064549492778874", "261624836854169473028206718849663316071", "11940075462925023646595161087592068533", "329604635574742802474718114706034976988", "94425592515769651551795622825457719967", "142046650168156065069941248160612091854", "339984016205820877152474195367953243384", "280096478600413740358447277571206260409", "293419562084526619782177503018313373971", "81328940153259826599555762959327017111", "254925979891075030082494879575947115587", "337224780723990571172092314652605720080", "167963172314617511412550797330940236700", "171293951055979856932296723760858064382", "245509428877725867596575479083711199301", "135075427366898096346582818512520434529", "9357615191256052559120393169858125884", "214800579272569593164185860523746821443", "261906008856212832792001614282443073403", "58034145936685779782304342435204806766", "87604808395722069774285068467732569341", "25716162600148752210140207888775965083", "196377103502877859548386929643279875626", "246638492459690661715177485133175256075", "319902007053799012744013829253249799890", "60750567615105906490739994072873627701", "147479440469064893751870439272685564888", "104774849201676531514884571666799885161"], "threshold":0.9}, "id":"ASB-A-494585668-b2253d2e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/Utils.java"}}, {"deprecated":false, "digest":{"function_hash":"32665876195638296979997778435093411561", "length":273}, "id":"ASB-A-494585668-b5898587", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"function_hash":"298633626937842160491492051725414845719", "length":248}, "id":"ASB-A-494585668-bcd90a1a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"function_hash":"163810253413383527125518995371843167927", "length":630}, "id":"ASB-A-494585668-d6287cee", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/fd751d67f2c27d2082b86c1f695fdd76bdce540f", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onSaveInstanceState"}}]}}, {"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-09-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795"], "severity":"High", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"35026602641749790704822154187908252186", "length":299}, "id":"ASB-A-494585668-1baedd06", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"function_hash":"163810253413383527125518995371843167927", "length":630}, "id":"ASB-A-494585668-31b77558", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onSaveInstanceState"}}, {"deprecated":false, "digest":{"line_hashes":["84593077711908135041558218202040325065", "252532824643222096991086064549492778874", "261624836854169473028206718849663316071", "11940075462925023646595161087592068533", "329604635574742802474718114706034976988", "94425592515769651551795622825457719967", "142046650168156065069941248160612091854", "339984016205820877152474195367953243384", "280096478600413740358447277571206260409", "293419562084526619782177503018313373971", "81328940153259826599555762959327017111", "254925979891075030082494879575947115587", "337224780723990571172092314652605720080", "167963172314617511412550797330940236700", "171293951055979856932296723760858064382", "245509428877725867596575479083711199301", "135075427366898096346582818512520434529", "9357615191256052559120393169858125884", "214800579272569593164185860523746821443", "49164820578418263194904628095537348422", "146681275437368894939314576438569640609", "87604808395722069774285068467732569341", "25716162600148752210140207888775965083", "196377103502877859548386929643279875626", "246638492459690661715177485133175256075", "319902007053799012744013829253249799890", "60750567615105906490739994072873627701", "147479440469064893751870439272685564888", "104774849201676531514884571666799885161"], "threshold":0.9}, "id":"ASB-A-494585668-8890b20d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/Utils.java"}}, {"deprecated":false, "digest":{"function_hash":"310513005022918049460756000669410865231", "length":2469}, "id":"ASB-A-494585668-88eaab86", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onActivityResult"}}, {"deprecated":false, "digest":{"function_hash":"298633626937842160491492051725414845719", "length":248}, "id":"ASB-A-494585668-8af6bdfd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"function_hash":"326251186975944397833437444784282534539", "length":802}, "id":"ASB-A-494585668-8b17c7b4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"handleAuthenticationSuccessful"}}, {"deprecated":false, "digest":{"function_hash":"75869849386813686728659189892649513593", "length":2569}, "id":"ASB-A-494585668-9a75521e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"282676188069123263012021670236518582350", "length":519}, "id":"ASB-A-494585668-ce7d55d4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java", "function":"onAuthenticationSucceeded"}}, {"deprecated":false, "digest":{"line_hashes":["71932557150206659975853232926336500607", "175108171127236356764268833378095426826", "140706492593317516265382343012912317201", "164870383276795681153716561908207968536", "196401770078667145028851776345906971618", "190388584261322128522137291008973181217", "218381582642163307327777852524225769130", "340251991205858917937126935710584912810", "290826557895233652068832861007571510972", "296702662202197618701874475029708549129", "183757092393531542172000701895942279255", "23997919683986308749509442302326934129", "10283259619358558470820165145726371030", "215311000833777952339171444261790178955", "326803075879054571434020649152387299876", "78377383732106295357327317256140113908", "40951321693192716743406588819681209431", "64631800881591706946272949083555397978", "267061728358347340865905907711955675516", "150267972767906926429253505506034388800", "284872024643385197664699105803171603947", "156148966619433747979583754779860046569", "154233744154165332833692081628410321256", "109784385202364438098158433821287081011", "69392890539891819890456109275306573", "7647996677264387666790907480596133115", "181379220911791232952119684609323482231", "37145401911884376766519628517267636240", "332792391964525351147947942645316943854", "196834181792294525564220380023349547028", "216392775168902171258354975663879403061", "208749307360775127418014842672949484850", "59029525604458179404622278040192977487", "70543526127930411208112270085533205179", "68315707067356237757460699103901217314", "319519171549899841701286902608381090364", "182361854510655975413413811557648692407", "292985995249374205351384820676736623836", "205461937507870903060060357338016892931", "24710587099882822677726480918346710697", "68027262495572715269170868938619101553", "289326486673962088609417905749253454109", "104467680485070337458823135226465072775", "5420187718368315485376863016951436862", "162885105295699433360768953554061005660", "255685053125655992016181932082344149641"], "threshold":0.9}, "id":"ASB-A-494585668-d54fc536", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/biometrics/fingerprint/FingerprintSettings.java"}}, {"deprecated":false, "digest":{"line_hashes":["216611538982774219064357036722095770683", "238591627107206518704204430726853451105", "167366239788893862494835965945395819714", "45227581825024894005327719110681144955", "312638224080952593892869323603095369527", "203696545924957432548161677662511328874", "192386710449203338217395540483997885079", "79868520545354998358264995962044749217", "144762822544313989024791584550580612217", "243587080073749473751825295264367901353", "335212839679497896287875255361023669164", "186295943394775587985858650550986159853", "7341732184311982688986679780124516111", "64750267052431998743177942597928366092", "72545818926335418134865693705424006939", "156649761607953611405084694923205163925"], "threshold":0.9}, "id":"ASB-A-494585668-e189f502", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"225355106264462343682862456478620329099", "length":5863}, "id":"ASB-A-494585668-eb702514", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/password/ConfirmDeviceCredentialActivity.java", "function":"onCreate"}}, {"deprecated":false, "digest":{"function_hash":"32665876195638296979997778435093411561", "length":273}, "id":"ASB-A-494585668-ed7ee920", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/Utils.java", "function":"launchBiometricPromptForMandatoryBiometrics"}}, {"deprecated":false, "digest":{"function_hash":"334847760755918641818569326583073782349", "length":774}, "id":"ASB-A-494585668-fc8ca0b3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/61886c120a68815563351001aa7524f777052795", "target":{"file":"src/com/android/settings/Utils.java", "function":"getIntentForBiometricAuthentication"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}]}