ASB-A-482947423

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-482947423.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-482947423
Aliases
  • A-482947423
  • CVE-2026-58838
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:14Z
Summary
[none]
Details

In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/providers/DownloadProvider

Package

Name
platform/packages/providers/DownloadProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "211780235207706187971573931621795632827",
                "length":  265
            },
            "id":  "ASB-A-482947423-4079821f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInPrivateExternalAndroidDirs"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "324012900189278724082818435901028863453",
                "length":  100
            },
            "id":  "ASB-A-482947423-451b3fce",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInExternalAndroidDirs"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "162776973371719968785450460997115648385",
                    "53785966035345413186682068050453003852",
                    "301978190510795751567515921457826913234",
                    "252223703444627967676936803257648769177",
                    "316354340869570178297291378910415766696",
                    "69581308735062959321030290999252166865",
                    "239186513940641068448898482879426032661",
                    "33884445427034245068758763419433603876",
                    "249798217802232672549927071124175086447",
                    "114487928270391752033887408531048319746",
                    "248699596369135014493218374199558648516",
                    "209345230473000967762870807462707458591",
                    "73503895872154771580154557247113135680",
                    "170023314044330735859502574661608762615",
                    "98385798723094820737499869810984236622",
                    "73638861061980359784775058706297001542"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-482947423-5f0b3b79",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"
platform/packages/providers/DownloadProvider

Package

Name
platform/packages/providers/DownloadProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "324012900189278724082818435901028863453",
                "length":  100
            },
            "id":  "ASB-A-482947423-35602e52",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInExternalAndroidDirs"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "162776973371719968785450460997115648385",
                    "53785966035345413186682068050453003852",
                    "301978190510795751567515921457826913234",
                    "252223703444627967676936803257648769177",
                    "318035472014424621936902689870360644468",
                    "303308495953443320536628058378254659593",
                    "286748704687510955870906176980999956571",
                    "124040603353339922140414749868572286253",
                    "249798217802232672549927071124175086447",
                    "114487928270391752033887408531048319746",
                    "248699596369135014493218374199558648516",
                    "209345230473000967762870807462707458591",
                    "73503895872154771580154557247113135680",
                    "170023314044330735859502574661608762615",
                    "98385798723094820737499869810984236622",
                    "73638861061980359784775058706297001542"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-482947423-603640e4",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "211780235207706187971573931621795632827",
                "length":  265
            },
            "id":  "ASB-A-482947423-c6e35971",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInPrivateExternalAndroidDirs"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"
platform/packages/providers/DownloadProvider

Package

Name
platform/packages/providers/DownloadProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "162776973371719968785450460997115648385",
                    "53785966035345413186682068050453003852",
                    "301978190510795751567515921457826913234",
                    "252223703444627967676936803257648769177",
                    "318035472014424621936902689870360644468",
                    "303308495953443320536628058378254659593",
                    "286748704687510955870906176980999956571",
                    "124040603353339922140414749868572286253",
                    "249798217802232672549927071124175086447",
                    "114487928270391752033887408531048319746",
                    "248699596369135014493218374199558648516",
                    "209345230473000967762870807462707458591",
                    "73503895872154771580154557247113135680",
                    "170023314044330735859502574661608762615",
                    "98385798723094820737499869810984236622",
                    "73638861061980359784775058706297001542"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-482947423-40bfaa3a",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "324012900189278724082818435901028863453",
                "length":  100
            },
            "id":  "ASB-A-482947423-b8cebe15",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInExternalAndroidDirs"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "211780235207706187971573931621795632827",
                "length":  265
            },
            "id":  "ASB-A-482947423-c62eac6b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInPrivateExternalAndroidDirs"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"
platform/packages/providers/DownloadProvider

Package

Name
platform/packages/providers/DownloadProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "162776973371719968785450460997115648385",
                    "53785966035345413186682068050453003852",
                    "301978190510795751567515921457826913234",
                    "252223703444627967676936803257648769177",
                    "318035472014424621936902689870360644468",
                    "303308495953443320536628058378254659593",
                    "286748704687510955870906176980999956571",
                    "124040603353339922140414749868572286253",
                    "249798217802232672549927071124175086447",
                    "114487928270391752033887408531048319746",
                    "248699596369135014493218374199558648516",
                    "209345230473000967762870807462707458591",
                    "73503895872154771580154557247113135680",
                    "170023314044330735859502574661608762615",
                    "98385798723094820737499869810984236622",
                    "73638861061980359784775058706297001542"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-482947423-2eea7d04",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "324012900189278724082818435901028863453",
                "length":  100
            },
            "id":  "ASB-A-482947423-59cc356e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInExternalAndroidDirs"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "211780235207706187971573931621795632827",
                "length":  265
            },
            "id":  "ASB-A-482947423-68fa7f0d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInPrivateExternalAndroidDirs"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"
platform/packages/providers/DownloadProvider

Package

Name
platform/packages/providers/DownloadProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "211780235207706187971573931621795632827",
                "length":  265
            },
            "id":  "ASB-A-482947423-0716fa7c",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInPrivateExternalAndroidDirs"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "162776973371719968785450460997115648385",
                    "53785966035345413186682068050453003852",
                    "301978190510795751567515921457826913234",
                    "252223703444627967676936803257648769177",
                    "316354340869570178297291378910415766696",
                    "69581308735062959321030290999252166865",
                    "239186513940641068448898482879426032661",
                    "33884445427034245068758763419433603876",
                    "249798217802232672549927071124175086447",
                    "114487928270391752033887408531048319746",
                    "248699596369135014493218374199558648516",
                    "209345230473000967762870807462707458591",
                    "73503895872154771580154557247113135680",
                    "170023314044330735859502574661608762615",
                    "98385798723094820737499869810984236622",
                    "73638861061980359784775058706297001542"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-482947423-58ae7e94",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "324012900189278724082818435901028863453",
                "length":  100
            },
            "id":  "ASB-A-482947423-d14f2655",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInExternalAndroidDirs"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"
platform/packages/providers/DownloadProvider

Package

Name
platform/packages/providers/DownloadProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "211780235207706187971573931621795632827",
                "length":  265
            },
            "id":  "ASB-A-482947423-08f667ba",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInPrivateExternalAndroidDirs"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "162776973371719968785450460997115648385",
                    "53785966035345413186682068050453003852",
                    "301978190510795751567515921457826913234",
                    "252223703444627967676936803257648769177",
                    "303308495953443320536628058378254659593",
                    "286748704687510955870906176980999956571",
                    "124040603353339922140414749868572286253",
                    "223563093838748518281752250081677751222",
                    "249798217802232672549927071124175086447",
                    "114487928270391752033887408531048319746",
                    "248699596369135014493218374199558648516",
                    "209345230473000967762870807462707458591",
                    "73503895872154771580154557247113135680",
                    "170023314044330735859502574661608762615",
                    "98385798723094820737499869810984236622",
                    "73638861061980359784775058706297001542"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-482947423-3819dc6a",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "324012900189278724082818435901028863453",
                "length":  100
            },
            "id":  "ASB-A-482947423-b971f263",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920",
            "target":  {
                "file":  "src/com/android/providers/downloads/Helpers.java",
                "function":  "isFileInExternalAndroidDirs"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"