ASB-A-472269954

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-472269954.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-472269954
Aliases
  • A-472269954
  • CVE-2026-28584
Published
2026-09-01T00:00:00Z
Modified
2026-09-09T15:15:54Z
Summary
[none]
Details

In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/174693f1586b7216c6f74a59c5a6c55e92acf1ff"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "DoS"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "277827426775417050919952495055004549277",
                    "66268719618098379100660581316538426195",
                    "276576523798533265143373121852099052156",
                    "79716321625944541792730027652862945528",
                    "32843246800274118500279878416669081662",
                    "238625897045588819735687576536888286659",
                    "315517761902771516422882097428876370471",
                    "304944200626218992873944944094875652464"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-472269954-8982880e",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/174693f1586b7216c6f74a59c5a6c55e92acf1ff",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "229381349720124623635292353533886373601",
                "length": 12410
            },
            "id": "ASB-A-472269954-bfa73af7",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/174693f1586b7216c6f74a59c5a6c55e92acf1ff",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function": "createSessionInternal"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-472269954.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/a8e2a2350ce9851c9e5b1a68bdbbe913a4c6c36b"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "DoS"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "338895600956412432101087457862411487182",
                "length": 12812
            },
            "id": "ASB-A-472269954-1ffa91c1",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/a8e2a2350ce9851c9e5b1a68bdbbe913a4c6c36b",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function": "createSessionInternal"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "277827426775417050919952495055004549277",
                    "66268719618098379100660581316538426195",
                    "276576523798533265143373121852099052156",
                    "79716321625944541792730027652862945528",
                    "32843246800274118500279878416669081662",
                    "238625897045588819735687576536888286659",
                    "315517761902771516422882097428876370471",
                    "304944200626218992873944944094875652464"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-472269954-c1be75ef",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/a8e2a2350ce9851c9e5b1a68bdbbe913a4c6c36b",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-472269954.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/e11e5ec5fa15c45c9d97fffd5de10a8f81873325"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "DoS"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "229381349720124623635292353533886373601",
                "length": 12410
            },
            "id": "ASB-A-472269954-6105e59e",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e11e5ec5fa15c45c9d97fffd5de10a8f81873325",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function": "createSessionInternal"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "277827426775417050919952495055004549277",
                    "66268719618098379100660581316538426195",
                    "276576523798533265143373121852099052156",
                    "79716321625944541792730027652862945528",
                    "32843246800274118500279878416669081662",
                    "238625897045588819735687576536888286659",
                    "315517761902771516422882097428876370471",
                    "304944200626218992873944944094875652464"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-472269954-826bd70c",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e11e5ec5fa15c45c9d97fffd5de10a8f81873325",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-472269954.json"