ASB-A-459460815

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-459460815.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-459460815
Aliases
  • A-459460815
  • CVE-2026-58978
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T16:56:16Z
Summary
[none]
Details

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/fbf97426953f3a8819e51a2451ab3ffdb5902df9"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "314677869122922379937794292893576028583",
                    "304223255185766239649078299243393751053",
                    "106317118346291700596767444688036184132",
                    "155797385917050877286553933251806499579"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-3dc22dce",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/fbf97426953f3a8819e51a2451ab3ffdb5902df9",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "206533760152785236654610260021587768659",
                "length":  12640
            },
            "id":  "ASB-A-459460815-aae2cb3d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/fbf97426953f3a8819e51a2451ab3ffdb5902df9",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function":  "createSessionInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "186551410752662410588283544314187352975",
                    "339404943175700234522325329061851695575",
                    "55893281515692248461050767705151310201",
                    "290163043238867212467644898633600551092"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-d775e2af",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/fbf97426953f3a8819e51a2451ab3ffdb5902df9",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307879331622393067155355020010537248767",
                "length":  16530
            },
            "id":  "ASB-A-459460815-f750618d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/fbf97426953f3a8819e51a2451ab3ffdb5902df9",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java",
                "function":  "preparePackage"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-459460815.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/bc07730f77913a353f1a8db245c92d8da857a017"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "186551410752662410588283544314187352975",
                    "339404943175700234522325329061851695575",
                    "55893281515692248461050767705151310201",
                    "290163043238867212467644898633600551092"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-11a4a19b",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/bc07730f77913a353f1a8db245c92d8da857a017",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "314677869122922379937794292893576028583",
                    "304223255185766239649078299243393751053",
                    "11933691988270229335176804288153095066",
                    "21458183491295109203597374139803584881"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-6b95ae6b",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/bc07730f77913a353f1a8db245c92d8da857a017",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "132716465581908396416252676144453751856",
                "length":  19075
            },
            "id":  "ASB-A-459460815-af00a674",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/bc07730f77913a353f1a8db245c92d8da857a017",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java",
                "function":  "preparePackageLI"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "197109079118940328694841016232749120321",
                "length":  11887
            },
            "id":  "ASB-A-459460815-eb495b9b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/bc07730f77913a353f1a8db245c92d8da857a017",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function":  "createSessionInternal"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-459460815.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/403d5f08603d2b4835544cfce7fbc499ef1e3c15"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "109616767100055152360954628222147602817",
                "length":  11894
            },
            "id":  "ASB-A-459460815-60f3e99f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/403d5f08603d2b4835544cfce7fbc499ef1e3c15",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function":  "createSessionInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "314677869122922379937794292893576028583",
                    "304223255185766239649078299243393751053",
                    "11933691988270229335176804288153095066",
                    "21458183491295109203597374139803584881"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-6a3c10b6",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/403d5f08603d2b4835544cfce7fbc499ef1e3c15",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "14805577808970925598107780802664541428",
                "length":  19784
            },
            "id":  "ASB-A-459460815-765308bb",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/403d5f08603d2b4835544cfce7fbc499ef1e3c15",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java",
                "function":  "preparePackage"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "186551410752662410588283544314187352975",
                    "339404943175700234522325329061851695575",
                    "55893281515692248461050767705151310201",
                    "290163043238867212467644898633600551092"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-c9e98c13",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/403d5f08603d2b4835544cfce7fbc499ef1e3c15",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-459460815.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/8f2432aee2b6171b78664bf64e53ea466fb52854"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "80319328743477172111003081975369717725",
                "length":  12940
            },
            "id":  "ASB-A-459460815-2bd9702a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/8f2432aee2b6171b78664bf64e53ea466fb52854",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function":  "createSessionInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "314677869122922379937794292893576028583",
                    "304223255185766239649078299243393751053",
                    "106317118346291700596767444688036184132",
                    "155797385917050877286553933251806499579"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-878ba91a",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/8f2432aee2b6171b78664bf64e53ea466fb52854",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "186551410752662410588283544314187352975",
                    "339404943175700234522325329061851695575",
                    "55893281515692248461050767705151310201",
                    "290163043238867212467644898633600551092"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-c5c4ad76",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/8f2432aee2b6171b78664bf64e53ea466fb52854",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "292216073574346736618866576132995523201",
                "length":  19762
            },
            "id":  "ASB-A-459460815-dc7b01f6",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/8f2432aee2b6171b78664bf64e53ea466fb52854",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java",
                "function":  "preparePackage"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-459460815.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/7d1342ffc94dbfa4e09c351acf17517e6af8d929"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "323866682935126751726445002076852478562",
                "length":  19930
            },
            "id":  "ASB-A-459460815-99ec922b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7d1342ffc94dbfa4e09c351acf17517e6af8d929",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java",
                "function":  "preparePackage"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "186551410752662410588283544314187352975",
                    "339404943175700234522325329061851695575",
                    "55893281515692248461050767705151310201",
                    "290163043238867212467644898633600551092"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-b932ea61",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7d1342ffc94dbfa4e09c351acf17517e6af8d929",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "314677869122922379937794292893576028583",
                    "304223255185766239649078299243393751053",
                    "106317118346291700596767444688036184132",
                    "155797385917050877286553933251806499579"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-e8f7aa27",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7d1342ffc94dbfa4e09c351acf17517e6af8d929",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "339327758139634429047389944931874561486",
                "length":  12538
            },
            "id":  "ASB-A-459460815-f196d2cb",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7d1342ffc94dbfa4e09c351acf17517e6af8d929",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function":  "createSessionInternal"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-459460815.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/63af4340de981a2dea7ee029bdb575d2ba392466"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "196250433924074493780752858096566010478",
                "length":  10207
            },
            "id":  "ASB-A-459460815-28ff1dda",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/63af4340de981a2dea7ee029bdb575d2ba392466",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function":  "createSessionInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "314677869122922379937794292893576028583",
                    "304223255185766239649078299243393751053",
                    "314976761557908602855071991376417878636",
                    "157016655399101368792996001414423487623"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-44445cda",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/63af4340de981a2dea7ee029bdb575d2ba392466",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "186551410752662410588283544314187352975",
                    "339404943175700234522325329061851695575",
                    "55893281515692248461050767705151310201",
                    "290163043238867212467644898633600551092"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-459460815-557d087d",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/63af4340de981a2dea7ee029bdb575d2ba392466",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "32982494306534494045136733355171161469",
                "length":  18785
            },
            "id":  "ASB-A-459460815-88950251",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/63af4340de981a2dea7ee029bdb575d2ba392466",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/InstallPackageHelper.java",
                "function":  "preparePackageLI"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-459460815.json"