ASB-A-383131643

See a problem?
Import Source
https://storage.googleapis.com/android-osv-test/ASB-A-383131643.json
JSON Data
https://api.test.osv.dev/v1/vulns/ASB-A-383131643
Aliases
  • A-383131643
  • CVE-2025-48533
Published
2025-08-01T00:00:00Z
Modified
2025-08-07T04:57:16.695183Z
Summary
[none]
Details

In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-next:0
Fixed
16-next:2025-08-01

Affected versions

Other

16-next

Ecosystem specific

{
    "severity": "High",
    "fixes": [
        "https://googleplex-android.googlesource.com/platform/frameworks/base/+/0c7daa8c44adf7b23b407978170491d70b7aa84b",
        "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4cf89bd148795ef1d83c45497c96c5330b4f96ba"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/0c7daa8c44adf7b23b407978170491d70b7aa84b",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "transferStartingWindow"
            },
            "digest": {
                "length": 2811.0,
                "function_hash": "188666625156769520787027893255270210842"
            },
            "id": "ASB-A-383131643-0daa3afe"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4cf89bd148795ef1d83c45497c96c5330b4f96ba",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java",
                "function": "adjustStartingWindowFlags"
            },
            "digest": {
                "length": 613.0,
                "function_hash": "38402682963695578333558666884319351243"
            },
            "id": "ASB-A-383131643-1f5e148a"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/0c7daa8c44adf7b23b407978170491d70b7aa84b",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/Transition.java"
            },
            "digest": {
                "line_hashes": [
                    "295353538994050404986894166969307918449",
                    "138112661030918210077543955187680353938",
                    "19267940210548569687091292320833839182",
                    "39550102382398472376667335771097479653",
                    "40093426836716373829590423712309205782",
                    "240497603130270694259780119059018400700",
                    "276355024490054981867388630576512263123",
                    "106370422983275521125736544354821153624"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-2d03252a"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/0c7daa8c44adf7b23b407978170491d70b7aa84b",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java"
            },
            "digest": {
                "line_hashes": [
                    "70364576539833702248323915212353620306",
                    "4591508831541913308677368719691352461",
                    "68870475221047791701431612098072276699",
                    "256479364053777079694714586289567329404",
                    "115437082496998703651371983493154850327",
                    "14916839673393911792819601772681127025",
                    "139833354254995253588946772941567741245",
                    "183999790675466300771426713099822476961",
                    "176319389000705351973116952001645090683",
                    "201196962065985135020792099053015377892",
                    "276731655695409068292206385948917517047",
                    "129758074334746300946130505730906411493"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-3b68af1d"
        },
        {
            "match_only_versions": [
                "16-next"
            ],
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "removeStartingWindow"
            },
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/0c7daa8c44adf7b23b407978170491d70b7aa84b",
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "length": 207.0,
                "function_hash": "195605974803520282369476552289305356615"
            },
            "id": "ASB-A-383131643-43f0655e"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4cf89bd148795ef1d83c45497c96c5330b4f96ba",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java"
            },
            "digest": {
                "line_hashes": [
                    "290342883897506260999612767078501633049",
                    "145380661148846638436466766531654411637",
                    "12480060513596584793435532768292023901",
                    "17649337740330618367504204031937293937"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-60647dc2"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/0c7daa8c44adf7b23b407978170491d70b7aa84b",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java",
                "function": "isOnScreen"
            },
            "digest": {
                "length": 494.0,
                "function_hash": "265708615112191309693713525558853660617"
            },
            "id": "ASB-A-383131643-639c5cfb"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/0c7daa8c44adf7b23b407978170491d70b7aa84b",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java",
                "function": "adjustStartingWindowFlags"
            },
            "digest": {
                "length": 368.0,
                "function_hash": "269248033999486185388392350105085211191"
            },
            "id": "ASB-A-383131643-6820c702"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/0c7daa8c44adf7b23b407978170491d70b7aa84b",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/Transition.java",
                "function": "finishTransition"
            },
            "digest": {
                "length": 8021.0,
                "function_hash": "255711161188704900310073368294353089236"
            },
            "id": "ASB-A-383131643-753c567f"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/0c7daa8c44adf7b23b407978170491d70b7aa84b",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/StartingData.java"
            },
            "digest": {
                "line_hashes": [
                    "42202213775854941682261219124105375971",
                    "171724511320086730317374023272101726616",
                    "52203580948176693279535497798922707663",
                    "190906785890208233084410720936936305578",
                    "27346358893097681538986577565166571175",
                    "216686571770969265910826809823559416904",
                    "191098016639089965367275372788092724472",
                    "322758098175192503152549513442172951141"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-b1e8c0ec"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/0c7daa8c44adf7b23b407978170491d70b7aa84b",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java"
            },
            "digest": {
                "line_hashes": [
                    "244768818090566641606710214620709482077",
                    "193245082464537885884699037425556179924",
                    "306703068895092150457784200365374789646",
                    "43980644431869645329929556195458177640",
                    "5298547956664258932226069241713289881",
                    "224223009864377829781005953861578301957",
                    "92129275790589566746171136682583706276",
                    "80560001101387241092826370072395275025",
                    "72498208190674151826139385293064536035",
                    "48502535084873237647686783082840299857",
                    "11837908929740429299292913986411452349",
                    "140709261011736772746584991375104552522",
                    "210659549227607445529742159974315196"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-e2f5e483"
        }
    ],
    "spl": "2025-08-01",
    "types": [
        "EoP"
    ]
}

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-08-01

Affected versions

Other

15

Ecosystem specific

{
    "severity": "High",
    "fixes": [
        "https://googleplex-android.googlesource.com/platform/frameworks/base/+/ec6d53979d48b8e948777014ab047162e8bddd6e"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/ec6d53979d48b8e948777014ab047162e8bddd6e",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java",
                "function": "isOnScreen"
            },
            "digest": {
                "length": 494.0,
                "function_hash": "265708615112191309693713525558853660617"
            },
            "id": "ASB-A-383131643-16c1cc39"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/ec6d53979d48b8e948777014ab047162e8bddd6e",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java"
            },
            "digest": {
                "line_hashes": [
                    "244768818090566641606710214620709482077",
                    "193245082464537885884699037425556179924",
                    "306703068895092150457784200365374789646",
                    "81853394613437641085274700366434220593",
                    "5298547956664258932226069241713289881",
                    "224223009864377829781005953861578301957",
                    "92129275790589566746171136682583706276",
                    "80560001101387241092826370072395275025",
                    "72498208190674151826139385293064536035",
                    "48502535084873237647686783082840299857",
                    "11837908929740429299292913986411452349",
                    "140709261011736772746584991375104552522",
                    "210659549227607445529742159974315196"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-17e465fd"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/ec6d53979d48b8e948777014ab047162e8bddd6e",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java",
                "function": "adjustStartingWindowFlags"
            },
            "digest": {
                "length": 368.0,
                "function_hash": "269248033999486185388392350105085211191"
            },
            "id": "ASB-A-383131643-3a897653"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/ec6d53979d48b8e948777014ab047162e8bddd6e",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java"
            },
            "digest": {
                "line_hashes": [
                    "304503232217147303151471945678911421590",
                    "127806507770467309495727978569442345673",
                    "73004960247588333564143092967082033326",
                    "52946276261216500151360893114624230137",
                    "326134997057823826339176026219221353882",
                    "115437082496998703651371983493154850327",
                    "14916839673393911792819601772681127025",
                    "139833354254995253588946772941567741245",
                    "183999790675466300771426713099822476961",
                    "176319389000705351973116952001645090683",
                    "192217359741241124160176409451812683730",
                    "284667311307674507153831602647616639415",
                    "177277096828039635975725158108394034291"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-3ea69a70"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/ec6d53979d48b8e948777014ab047162e8bddd6e",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/StartingData.java"
            },
            "digest": {
                "line_hashes": [
                    "42202213775854941682261219124105375971",
                    "171724511320086730317374023272101726616",
                    "52203580948176693279535497798922707663",
                    "190906785890208233084410720936936305578",
                    "27346358893097681538986577565166571175",
                    "216686571770969265910826809823559416904",
                    "191098016639089965367275372788092724472",
                    "322758098175192503152549513442172951141"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-41a0c4d1"
        },
        {
            "match_only_versions": [
                "15"
            ],
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "removeStartingWindow"
            },
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/ec6d53979d48b8e948777014ab047162e8bddd6e",
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "length": 207.0,
                "function_hash": "195605974803520282369476552289305356615"
            },
            "id": "ASB-A-383131643-44befac3"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/ec6d53979d48b8e948777014ab047162e8bddd6e",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "transferStartingWindow"
            },
            "digest": {
                "length": 2235.0,
                "function_hash": "3236085739092546821537457028230148887"
            },
            "id": "ASB-A-383131643-abdfc769"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/ec6d53979d48b8e948777014ab047162e8bddd6e",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/Transition.java",
                "function": "finishTransition"
            },
            "digest": {
                "length": 7577.0,
                "function_hash": "32115597787002893432521954634876697633"
            },
            "id": "ASB-A-383131643-ef08dabd"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/ec6d53979d48b8e948777014ab047162e8bddd6e",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/Transition.java"
            },
            "digest": {
                "line_hashes": [
                    "56186694017439455698080233559655066031",
                    "271197017161907154489387514232160430075",
                    "33394478536535192605130413835370724664",
                    "289188386739016632740124058896608667672",
                    "40093426836716373829590423712309205782",
                    "240497603130270694259780119059018400700",
                    "276355024490054981867388630576512263123",
                    "106370422983275521125736544354821153624"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-f90fbc34"
        }
    ],
    "spl": "2025-08-01",
    "types": [
        "EoP"
    ]
}

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2025-08-01

Affected versions

Other

16

Ecosystem specific

{
    "severity": "High",
    "fixes": [
        "https://googleplex-android.googlesource.com/platform/frameworks/base/+/17d7a10aa573a74d829fd05c8848b0ac8e40be8a"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/17d7a10aa573a74d829fd05c8848b0ac8e40be8a",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java"
            },
            "digest": {
                "line_hashes": [
                    "290342883897506260999612767078501633049",
                    "145380661148846638436466766531654411637",
                    "12480060513596584793435532768292023901",
                    "17649337740330618367504204031937293937"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-2e46884d"
        },
        {
            "match_only_versions": [
                "16"
            ],
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "deferStartingWindowRemovalForKeyguardUnoccluding"
            },
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/17d7a10aa573a74d829fd05c8848b0ac8e40be8a",
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "length": 270.0,
                "function_hash": "109668267982331805958713157325208459474"
            },
            "id": "ASB-A-383131643-4a8a50ec"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/17d7a10aa573a74d829fd05c8848b0ac8e40be8a",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java",
                "function": "adjustStartingWindowFlags"
            },
            "digest": {
                "length": 613.0,
                "function_hash": "38402682963695578333558666884319351243"
            },
            "id": "ASB-A-383131643-5982062c"
        },
        {
            "match_only_versions": [
                "16"
            ],
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java"
            },
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/17d7a10aa573a74d829fd05c8848b0ac8e40be8a",
            "deprecated": false,
            "signature_type": "Line",
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "300088800220192280162784453328203000183",
                    "278998977165012833967117764320366216309",
                    "71112297698217263528999914859609690132",
                    "311265141281599791088971578296439931496"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-b985ea99"
        }
    ],
    "spl": "2025-08-01",
    "types": [
        "EoP"
    ]
}

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-08-01

Affected versions

Other

13

Ecosystem specific

{
    "severity": "High",
    "fixes": [
        "https://googleplex-android.googlesource.com/platform/frameworks/base/+/995631079f89ff54315f847e0d174bcf1a510c90"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/995631079f89ff54315f847e0d174bcf1a510c90",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java",
                "function": "adjustStartingWindowFlags"
            },
            "digest": {
                "length": 368.0,
                "function_hash": "269248033999486185388392350105085211191"
            },
            "id": "ASB-A-383131643-1730bb68"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/995631079f89ff54315f847e0d174bcf1a510c90",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "removeStartingWindowAnimation"
            },
            "digest": {
                "length": 1470.0,
                "function_hash": "210765941794146028467108650656653249941"
            },
            "id": "ASB-A-383131643-30109ef4"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/995631079f89ff54315f847e0d174bcf1a510c90",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "onAnimationFinished"
            },
            "digest": {
                "length": 1248.0,
                "function_hash": "110326300720913702105843374204386481289"
            },
            "id": "ASB-A-383131643-31f42d29"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/995631079f89ff54315f847e0d174bcf1a510c90",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java"
            },
            "digest": {
                "line_hashes": [
                    "62438721443317084384429754548334763433",
                    "215440614089295948934326800684653988079",
                    "139833354254995253588946772941567741245",
                    "265688381152192870147686072172983216301",
                    "132796009300925180961391932235823461019",
                    "171639392337189040428400443606789943103",
                    "145499375659311875534124082075321958909",
                    "192217359741241124160176409451812683730",
                    "284667311307674507153831602647616639415",
                    "177277096828039635975725158108394034291",
                    "230397982959482406106806357375357350975",
                    "297903575194850472300990939493734413884",
                    "290226726702173569724432916113055685296",
                    "306044649741815625917351178622149060952",
                    "5431626528871790721572476463564184740",
                    "48094393436329012038805384243514676794",
                    "296298980427394815002317498074214455420",
                    "179221136267571297198982855363454677732",
                    "204704361836088278118120279147986016503",
                    "328288099310947053755468995729055532932",
                    "201550720755171477475430762513281270120",
                    "128666994564515963032620364747895235494",
                    "135586361410838521634261550823678214823",
                    "122869302919985788957561289436092291732",
                    "222673698453342567010917763499067940673",
                    "66681757951182633545867562624085036140"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-4601907c"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/995631079f89ff54315f847e0d174bcf1a510c90",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "transferStartingWindow"
            },
            "digest": {
                "length": 2292.0,
                "function_hash": "93009836617011487967743681805368611206"
            },
            "id": "ASB-A-383131643-5ef6083f"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/995631079f89ff54315f847e0d174bcf1a510c90",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java",
                "function": "isOnScreen"
            },
            "digest": {
                "length": 417.0,
                "function_hash": "107203813061094546921859647981338222805"
            },
            "id": "ASB-A-383131643-608d6af1"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/995631079f89ff54315f847e0d174bcf1a510c90",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/StartingData.java"
            },
            "digest": {
                "line_hashes": [
                    "260872018074367797077022299480922396000",
                    "323113463877828258523309161533937063321",
                    "85216712489996628324969769731038480376",
                    "8029645636153595854518175480805097747"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-b810df16"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/995631079f89ff54315f847e0d174bcf1a510c90",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "canShowWhenLocked"
            },
            "digest": {
                "length": 439.0,
                "function_hash": "44992301109122538946449422229794615983"
            },
            "id": "ASB-A-383131643-e0b84df3"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/995631079f89ff54315f847e0d174bcf1a510c90",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java"
            },
            "digest": {
                "line_hashes": [
                    "5298547956664258932226069241713289881",
                    "149813294597202567051049938763915203125",
                    "209940296420858269530488792148724533936",
                    "308038414144330324917268970751359286406",
                    "72498208190674151826139385293064536035",
                    "48502535084873237647686783082840299857",
                    "11837908929740429299292913986411452349",
                    "140709261011736772746584991375104552522",
                    "210659549227607445529742159974315196"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-ebc2c31b"
        }
    ],
    "spl": "2025-08-01",
    "types": [
        "EoP"
    ]
}

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-08-01

Affected versions

Other

14

Ecosystem specific

{
    "severity": "High",
    "fixes": [
        "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "canShowWhenLocked"
            },
            "digest": {
                "length": 439.0,
                "function_hash": "44992301109122538946449422229794615983"
            },
            "id": "ASB-A-383131643-1e35e086"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java",
                "function": "isOnScreen"
            },
            "digest": {
                "length": 396.0,
                "function_hash": "304912749070863200627283423124774862207"
            },
            "id": "ASB-A-383131643-3c1b65be"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "transferStartingWindow"
            },
            "digest": {
                "length": 2168.0,
                "function_hash": "158587994877630455307244238210044729712"
            },
            "id": "ASB-A-383131643-5df48d3d"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "removeStartingWindowAnimation"
            },
            "digest": {
                "length": 1454.0,
                "function_hash": "284664513458819593441050770691567451373"
            },
            "id": "ASB-A-383131643-6e053a5c"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java"
            },
            "digest": {
                "line_hashes": [
                    "253766885381751606912818607700622613436",
                    "235602420210051922359671249527431556650",
                    "253776789204052747258016896123934547912",
                    "80130676830205091524345667178789285486",
                    "113231895391067930343569597040555082489",
                    "150459146272115831886021014550232692506",
                    "302056195422199717362730685405166208797",
                    "166801019711525161475080038708777518848",
                    "115437082496998703651371983493154850327",
                    "14916839673393911792819601772681127025",
                    "139833354254995253588946772941567741245",
                    "183999790675466300771426713099822476961",
                    "176319389000705351973116952001645090683",
                    "214757394341527965090573759019762505722",
                    "58841225123325305872162801814706677300",
                    "54721987662936098553759858551516054411",
                    "303986255261042808838567374749954888184",
                    "101687891194894608869182017730799235958",
                    "315055025888615935005146340391840346408",
                    "267892095328004208735219654840462891657",
                    "214895359370249749203595980278843290935",
                    "103241168457388694262714980029425728050",
                    "292928128209263018364810596812543189708",
                    "192004054271717046038969324693828436767",
                    "192217359741241124160176409451812683730",
                    "284667311307674507153831602647616639415",
                    "177277096828039635975725158108394034291",
                    "230397982959482406106806357375357350975",
                    "297903575194850472300990939493734413884",
                    "290226726702173569724432916113055685296",
                    "306044649741815625917351178622149060952",
                    "5431626528871790721572476463564184740",
                    "48094393436329012038805384243514676794",
                    "296298980427394815002317498074214455420",
                    "179221136267571297198982855363454677732",
                    "204704361836088278118120279147986016503",
                    "328288099310947053755468995729055532932",
                    "201550720755171477475430762513281270120",
                    "128666994564515963032620364747895235494",
                    "135586361410838521634261550823678214823"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-75de4d9b"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/Transition.java"
            },
            "digest": {
                "line_hashes": [
                    "295353538994050404986894166969307918449",
                    "126809344185333069928602846207130930118",
                    "298284269845291286422644489271191086061",
                    "282140908477691926273602780874467271351",
                    "40093426836716373829590423712309205782",
                    "240497603130270694259780119059018400700",
                    "276355024490054981867388630576512263123",
                    "106370422983275521125736544354821153624"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-8931b64a"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "transferSplashScreenIfNeeded"
            },
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "length": 284.0,
                "function_hash": "264503545988796348206835096650479014997"
            },
            "id": "ASB-A-383131643-910de7f6"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "onSyncTransactionCommitted"
            },
            "digest": {
                "length": 317.0,
                "function_hash": "208047061736737151516516564066339709668"
            },
            "id": "ASB-A-383131643-9d38ffd4"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/StartingData.java"
            },
            "digest": {
                "line_hashes": [
                    "253519229480184099427968387164615001811",
                    "253560179174451173939979696510316649247",
                    "151940989360723791107837002534916908819",
                    "86436322466608176381345031011007436186",
                    "209860117049417959989438723142058212869",
                    "200704139779802880131248866546680692248",
                    "262003158772263455757186221823122500532"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-bfbeffa4"
        },
        {
            "match_only_versions": [
                "14"
            ],
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java",
                "function": "removeStartingWindow"
            },
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "deprecated": false,
            "signature_type": "Function",
            "signature_version": "v1",
            "digest": {
                "length": 207.0,
                "function_hash": "195605974803520282369476552289305356615"
            },
            "id": "ASB-A-383131643-bff8708f"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Line",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java"
            },
            "digest": {
                "line_hashes": [
                    "244768818090566641606710214620709482077",
                    "193245082464537885884699037425556179924",
                    "306703068895092150457784200365374789646",
                    "81853394613437641085274700366434220593",
                    "5298547956664258932226069241713289881",
                    "149813294597202567051049938763915203125",
                    "147627825799905787091740653822680360955",
                    "260430457092545694017852989432934746479",
                    "72498208190674151826139385293064536035",
                    "48502535084873237647686783082840299857",
                    "11837908929740429299292913986411452349",
                    "140709261011736772746584991375104552522",
                    "210659549227607445529742159974315196"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-383131643-d790094f"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/WindowState.java",
                "function": "adjustStartingWindowFlags"
            },
            "digest": {
                "length": 368.0,
                "function_hash": "269248033999486185388392350105085211191"
            },
            "id": "ASB-A-383131643-fde675ab"
        },
        {
            "deprecated": false,
            "source": "https://googleplex-android.googlesource.com/platform/frameworks/base/+/4d90cac9c80afe090cd231aae8cf4f844d95f8f3",
            "signature_type": "Function",
            "signature_version": "v1",
            "target": {
                "file": "services/core/java/com/android/server/wm/Transition.java",
                "function": "finishTransition"
            },
            "digest": {
                "length": 7073.0,
                "function_hash": "209211219461626721805368334315614498316"
            },
            "id": "ASB-A-383131643-fe0c6768"
        }
    ],
    "spl": "2025-08-01",
    "types": [
        "EoP"
    ]
}