ASB-A-484925508

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-484925508.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-484925508
Aliases
  • A-484925508
  • CVE-2026-59011
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:25Z
Summary
[none]
Details

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/41bb5fa5d46f0220bd003390f6db9c72aeabc521"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "222085607644333928434203773874021128690",
                "length":  148
            },
            "id":  "ASB-A-484925508-15ce34b3",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/41bb5fa5d46f0220bd003390f6db9c72aeabc521",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "maybeReplaceNullProjection"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "138070842596560769734827969229590886088",
                "length":  5729
            },
            "id":  "ASB-A-484925508-1d22deee",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/41bb5fa5d46f0220bd003390f6db9c72aeabc521",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "queryInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "336077513578596475808007209046544904298",
                "length":  12372
            },
            "id":  "ASB-A-484925508-2586be42",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/41bb5fa5d46f0220bd003390f6db9c72aeabc521",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "getQueryBuilderInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "216434170045796828948805504936894542667",
                    "322035284204665997382985779268298815857",
                    "254099610201678917588906316727067633671",
                    "67917690545752534649119548373340769103"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-484925508-665e3340",
            "match_only_versions":  [
                "17-qpr2-next"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/41bb5fa5d46f0220bd003390f6db9c72aeabc521",
            "target":  {
                "file":  "src/com/android/providers/media/util/SQLiteQueryBuilder.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "40622674373582069079003114045755959416",
                "length":  62
            },
            "id":  "ASB-A-484925508-8d281e92",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/41bb5fa5d46f0220bd003390f6db9c72aeabc521",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "constructNullProjectionForColumn"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "78136156428971399909478239603117502259",
                    "144748983143611482529902641943728114724",
                    "190557053743471103691261644748235744615",
                    "288471512238644594691644411589335419257",
                    "190102994393200469791540811494703684483",
                    "305601694767788224015967273230681909641",
                    "299851401582584543039257592036293041321",
                    "146333830509978126799128865670494126898",
                    "140752231484734671998808725463167670046",
                    "299938911237862647523490541323062323961",
                    "218885315616897923678168791775705213417",
                    "29921166719075715352337069906890560855",
                    "219364568296873764029439876815959591714",
                    "144038127956377291716633271514442413024",
                    "223631237705423313034175150724268709516",
                    "261441332807346757900363031834983489776",
                    "156106190602666391903132444897118880690",
                    "74765498381270259721992811887886114156",
                    "143417932450898847712345590894082769098",
                    "92966768407594685883303734293218536079",
                    "190668755871498076565143764958304674906",
                    "326200365266982708373407001597647938154",
                    "71424835505651919430998410502974283278",
                    "120423493098933080319142226464494864395",
                    "116634083740871014891959143669532695120",
                    "53502395909490895992176195328963116583",
                    "29684830196137007177182160048013059118",
                    "258143802819079946389336896737754071070",
                    "170933254868730268119017057087403553846",
                    "207303371213307464705183004019923462310",
                    "239352055652548800037162451948547277879",
                    "284507612342957011890735652164349513707",
                    "64077579633300729439679842270803083437",
                    "337392387623658939880913116461175065872",
                    "104151452297613660589015384944684632539",
                    "160558259158379733770072015561197159147",
                    "209897040375656507204136285106684779948",
                    "43085192719403875776266408122454032353",
                    "279489497918080912656502914452583782406",
                    "56881949657299564442147319586587935479",
                    "127564806292382433846009583564194365056",
                    "246373305410850496932439563691223076993",
                    "169124900924639743357340023014960197313",
                    "134365248347307655169737054767793912171",
                    "256353010243560976944009589772958933106",
                    "231754378497820775092162001401326121084",
                    "187508293339972949913873778911923008808",
                    "19105241461190899958546989830320714088",
                    "118289913618897382132968146926830582035",
                    "248254187538733681508395034871153708090",
                    "237927719916616896425410658372413434442",
                    "140681410781901061995998728845252270774",
                    "23509691797959109133817434185790956947",
                    "279771557028504704050841437700293033674",
                    "119121670647923061455687941815973364093",
                    "98122615734853388747656225873532821777",
                    "324286182766020367731365542556029721775",
                    "324749492256065600361536845472001439006",
                    "212196974227931521030554194760892990939",
                    "311354044870435980057157301974648504794",
                    "261020369971212179562773239584904495223",
                    "70411044671133216822928607982054813259",
                    "100871931624227977602514027307674634937",
                    "339025428082691968074009648292685641425",
                    "206252426279668622196747240600354577887",
                    "154668583359224652685325821870775348064",
                    "163166888442498041557597458867187483373",
                    "150631482471764004499226641392932322635",
                    "179973160279130582477640119169469626576",
                    "321881014519936229180210177407365196349",
                    "327288559819186023000102596694638684991",
                    "11936566430602059354760477712178019312",
                    "296362791177467999872665390709140999762",
                    "331086224422890089569552121593642362290"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-484925508-8d393642",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/41bb5fa5d46f0220bd003390f6db9c72aeabc521",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "82157462679296270343706234711524331857",
                "length":  666
            },
            "id":  "ASB-A-484925508-936c887a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/41bb5fa5d46f0220bd003390f6db9c72aeabc521",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "updateProjectionToFilterColumns"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "39398124406134537443558467022981626040",
                "length":  399
            },
            "id":  "ASB-A-484925508-e05c3c02",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/41bb5fa5d46f0220bd003390f6db9c72aeabc521",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "hasColumnsToFilterInProjection"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-484925508.json"
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/660116175a31e5f9d988cb16772c08a04841c88d"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "222085607644333928434203773874021128690",
                "length":  148
            },
            "id":  "ASB-A-484925508-65ce6890",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/660116175a31e5f9d988cb16772c08a04841c88d",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "maybeReplaceNullProjection"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "40622674373582069079003114045755959416",
                "length":  62
            },
            "id":  "ASB-A-484925508-6c1e9dad",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/660116175a31e5f9d988cb16772c08a04841c88d",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "constructNullProjectionForColumn"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "99848815113896054436808947807316448964",
                "length":  12718
            },
            "id":  "ASB-A-484925508-7402d4cf",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/660116175a31e5f9d988cb16772c08a04841c88d",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "getQueryBuilderInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "78146234852344112615341262298644040657",
                "length":  5285
            },
            "id":  "ASB-A-484925508-c0a29954",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/660116175a31e5f9d988cb16772c08a04841c88d",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "queryInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "216434170045796828948805504936894542667",
                    "322035284204665997382985779268298815857",
                    "254099610201678917588906316727067633671",
                    "67917690545752534649119548373340769103"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-484925508-ca32807d",
            "match_only_versions":  [
                "16"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/660116175a31e5f9d988cb16772c08a04841c88d",
            "target":  {
                "file":  "src/com/android/providers/media/util/SQLiteQueryBuilder.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "200961842801349431749811913098021676831",
                    "126452337059883244011480556167134143509",
                    "97782892710964590112593745953684525333",
                    "54703477929668607262606516768787707578",
                    "126308519180086350281812393545460632424",
                    "146333830509978126799128865670494126898",
                    "140752231484734671998808725463167670046",
                    "299938911237862647523490541323062323961",
                    "218885315616897923678168791775705213417",
                    "29921166719075715352337069906890560855",
                    "151858563469914051784293504551280944911",
                    "310505163684527007002465605799022756177",
                    "92966768407594685883303734293218536079",
                    "190668755871498076565143764958304674906",
                    "326200365266982708373407001597647938154",
                    "156732307042897432442220125988432813002",
                    "246936565027385000449241980329786206176",
                    "307973373050535680592627385548285613826",
                    "246583880497810871601417060675950249561",
                    "18683593852901306818233055542225469541",
                    "321436176898330478321561118223419987970",
                    "268404516030684785224792768388746674899",
                    "216465499135392862613419111866930105593",
                    "134096327475937003203930286041030949662",
                    "106510372998049319820352711314630029751",
                    "52477595211223186304891684145130276972",
                    "207303371213307464705183004019923462310",
                    "239352055652548800037162451948547277879",
                    "284507612342957011890735652164349513707",
                    "64077579633300729439679842270803083437",
                    "337392387623658939880913116461175065872",
                    "104151452297613660589015384944684632539",
                    "160558259158379733770072015561197159147",
                    "209897040375656507204136285106684779948",
                    "43085192719403875776266408122454032353",
                    "279489497918080912656502914452583782406",
                    "197600733139596941613677776890679620949",
                    "184993839007334120563956385813390751793",
                    "118317953927097395445403869796608702513",
                    "282065637642710522813622248509897417470",
                    "65644325692055250772344919143128264294",
                    "117939280642596003901680705079155385669",
                    "98801581019823890648089483589795686001",
                    "119530899372777965767909415574314564148",
                    "254235492860058566371182987574919401954",
                    "331870604327545099782745366590925944997",
                    "98122615734853388747656225873532821777",
                    "324286182766020367731365542556029721775",
                    "324749492256065600361536845472001439006",
                    "212196974227931521030554194760892990939",
                    "311354044870435980057157301974648504794",
                    "261020369971212179562773239584904495223",
                    "70411044671133216822928607982054813259",
                    "339025428082691968074009648292685641425",
                    "206252426279668622196747240600354577887",
                    "154668583359224652685325821870775348064",
                    "163166888442498041557597458867187483373",
                    "150631482471764004499226641392932322635",
                    "179973160279130582477640119169469626576",
                    "321881014519936229180210177407365196349",
                    "327288559819186023000102596694638684991",
                    "11936566430602059354760477712178019312",
                    "296362791177467999872665390709140999762",
                    "331086224422890089569552121593642362290"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-484925508-d4287709",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/660116175a31e5f9d988cb16772c08a04841c88d",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "339053198564776663777991820041100551578",
                "length":  456
            },
            "id":  "ASB-A-484925508-df604a9f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/660116175a31e5f9d988cb16772c08a04841c88d",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "hasColumnsToFilterInProjection"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "181473176514755436870772998201721595323",
                "length":  451
            },
            "id":  "ASB-A-484925508-ea249cf5",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/660116175a31e5f9d988cb16772c08a04841c88d",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "updateProjectionToFilterColumns"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-484925508.json"
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ed0b21dd48760d8743b7dc0214395f84c8d81cf9"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "170531516452098603863159139985161717158",
                "length":  5342
            },
            "id":  "ASB-A-484925508-2b406266",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ed0b21dd48760d8743b7dc0214395f84c8d81cf9",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "queryInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "200961842801349431749811913098021676831",
                    "126452337059883244011480556167134143509",
                    "97782892710964590112593745953684525333",
                    "54703477929668607262606516768787707578",
                    "126308519180086350281812393545460632424",
                    "146333830509978126799128865670494126898",
                    "140752231484734671998808725463167670046",
                    "299938911237862647523490541323062323961",
                    "218885315616897923678168791775705213417",
                    "29921166719075715352337069906890560855",
                    "151858563469914051784293504551280944911",
                    "310505163684527007002465605799022756177",
                    "92966768407594685883303734293218536079",
                    "190668755871498076565143764958304674906",
                    "326200365266982708373407001597647938154",
                    "156732307042897432442220125988432813002",
                    "246936565027385000449241980329786206176",
                    "307973373050535680592627385548285613826",
                    "246583880497810871601417060675950249561",
                    "18683593852901306818233055542225469541",
                    "321436176898330478321561118223419987970",
                    "268404516030684785224792768388746674899",
                    "216465499135392862613419111866930105593",
                    "134096327475937003203930286041030949662",
                    "106510372998049319820352711314630029751",
                    "52477595211223186304891684145130276972",
                    "207303371213307464705183004019923462310",
                    "239352055652548800037162451948547277879",
                    "284507612342957011890735652164349513707",
                    "64077579633300729439679842270803083437",
                    "337392387623658939880913116461175065872",
                    "104151452297613660589015384944684632539",
                    "160558259158379733770072015561197159147",
                    "209897040375656507204136285106684779948",
                    "43085192719403875776266408122454032353",
                    "279489497918080912656502914452583782406",
                    "197600733139596941613677776890679620949",
                    "184993839007334120563956385813390751793",
                    "118317953927097395445403869796608702513",
                    "282065637642710522813622248509897417470",
                    "65644325692055250772344919143128264294",
                    "117939280642596003901680705079155385669",
                    "98801581019823890648089483589795686001",
                    "119530899372777965767909415574314564148",
                    "254235492860058566371182987574919401954",
                    "331870604327545099782745366590925944997",
                    "98122615734853388747656225873532821777",
                    "324286182766020367731365542556029721775",
                    "324749492256065600361536845472001439006",
                    "212196974227931521030554194760892990939",
                    "311354044870435980057157301974648504794",
                    "261020369971212179562773239584904495223",
                    "70411044671133216822928607982054813259",
                    "339025428082691968074009648292685641425",
                    "206252426279668622196747240600354577887",
                    "154668583359224652685325821870775348064",
                    "163166888442498041557597458867187483373",
                    "150631482471764004499226641392932322635",
                    "179973160279130582477640119169469626576",
                    "321881014519936229180210177407365196349",
                    "327288559819186023000102596694638684991",
                    "11936566430602059354760477712178019312",
                    "296362791177467999872665390709140999762",
                    "331086224422890089569552121593642362290"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-484925508-39942210",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ed0b21dd48760d8743b7dc0214395f84c8d81cf9",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "40622674373582069079003114045755959416",
                "length":  62
            },
            "id":  "ASB-A-484925508-413861c4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ed0b21dd48760d8743b7dc0214395f84c8d81cf9",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "constructNullProjectionForColumn"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "222085607644333928434203773874021128690",
                "length":  148
            },
            "id":  "ASB-A-484925508-4b249b05",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ed0b21dd48760d8743b7dc0214395f84c8d81cf9",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "maybeReplaceNullProjection"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "216434170045796828948805504936894542667",
                    "322035284204665997382985779268298815857",
                    "254099610201678917588906316727067633671",
                    "67917690545752534649119548373340769103"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-484925508-8bcafce0",
            "match_only_versions":  [
                "16-qpr2"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ed0b21dd48760d8743b7dc0214395f84c8d81cf9",
            "target":  {
                "file":  "src/com/android/providers/media/util/SQLiteQueryBuilder.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "339053198564776663777991820041100551578",
                "length":  456
            },
            "id":  "ASB-A-484925508-aae13b44",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ed0b21dd48760d8743b7dc0214395f84c8d81cf9",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "hasColumnsToFilterInProjection"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "181473176514755436870772998201721595323",
                "length":  451
            },
            "id":  "ASB-A-484925508-c0667093",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ed0b21dd48760d8743b7dc0214395f84c8d81cf9",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "updateProjectionToFilterColumns"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "99848815113896054436808947807316448964",
                "length":  12718
            },
            "id":  "ASB-A-484925508-e50a173e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/ed0b21dd48760d8743b7dc0214395f84c8d81cf9",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "getQueryBuilderInternal"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-484925508.json"
platform/packages/providers/MediaProvider

Package

Name
platform/packages/providers/MediaProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5589ad59b1e70c71bec2c7a61d68e17ff59ce6a3"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "39398124406134537443558467022981626040",
                "length":  399
            },
            "id":  "ASB-A-484925508-1190b00c",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5589ad59b1e70c71bec2c7a61d68e17ff59ce6a3",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "hasColumnsToFilterInProjection"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "216434170045796828948805504936894542667",
                    "322035284204665997382985779268298815857",
                    "254099610201678917588906316727067633671",
                    "67917690545752534649119548373340769103"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-484925508-3036007c",
            "match_only_versions":  [
                "17"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5589ad59b1e70c71bec2c7a61d68e17ff59ce6a3",
            "target":  {
                "file":  "src/com/android/providers/media/util/SQLiteQueryBuilder.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "303670222155959032947434709564635558415",
                "length":  12222
            },
            "id":  "ASB-A-484925508-40b65638",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5589ad59b1e70c71bec2c7a61d68e17ff59ce6a3",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "getQueryBuilderInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "40622674373582069079003114045755959416",
                "length":  62
            },
            "id":  "ASB-A-484925508-49cc9ce9",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5589ad59b1e70c71bec2c7a61d68e17ff59ce6a3",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "constructNullProjectionForColumn"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "222085607644333928434203773874021128690",
                "length":  148
            },
            "id":  "ASB-A-484925508-617a9f16",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5589ad59b1e70c71bec2c7a61d68e17ff59ce6a3",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "maybeReplaceNullProjection"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "39780707833518425154774439175866996947",
                "length":  5616
            },
            "id":  "ASB-A-484925508-70a01aca",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5589ad59b1e70c71bec2c7a61d68e17ff59ce6a3",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "queryInternal"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "90814386219527217596716937218755416269",
                    "289740417327362914437788914585877142620",
                    "51000120045647996871724118645646513497",
                    "54703477929668607262606516768787707578",
                    "126308519180086350281812393545460632424",
                    "146333830509978126799128865670494126898",
                    "140752231484734671998808725463167670046",
                    "299938911237862647523490541323062323961",
                    "218885315616897923678168791775705213417",
                    "29921166719075715352337069906890560855",
                    "219364568296873764029439876815959591714",
                    "144038127956377291716633271514442413024",
                    "223631237705423313034175150724268709516",
                    "261441332807346757900363031834983489776",
                    "156106190602666391903132444897118880690",
                    "74765498381270259721992811887886114156",
                    "143417932450898847712345590894082769098",
                    "92966768407594685883303734293218536079",
                    "190668755871498076565143764958304674906",
                    "326200365266982708373407001597647938154",
                    "71424835505651919430998410502974283278",
                    "120423493098933080319142226464494864395",
                    "116634083740871014891959143669532695120",
                    "53502395909490895992176195328963116583",
                    "29684830196137007177182160048013059118",
                    "258143802819079946389336896737754071070",
                    "170933254868730268119017057087403553846",
                    "207303371213307464705183004019923462310",
                    "239352055652548800037162451948547277879",
                    "284507612342957011890735652164349513707",
                    "64077579633300729439679842270803083437",
                    "337392387623658939880913116461175065872",
                    "104151452297613660589015384944684632539",
                    "160558259158379733770072015561197159147",
                    "209897040375656507204136285106684779948",
                    "43085192719403875776266408122454032353",
                    "279489497918080912656502914452583782406",
                    "56881949657299564442147319586587935479",
                    "127564806292382433846009583564194365056",
                    "246373305410850496932439563691223076993",
                    "169124900924639743357340023014960197313",
                    "134365248347307655169737054767793912171",
                    "256353010243560976944009589772958933106",
                    "231754378497820775092162001401326121084",
                    "187508293339972949913873778911923008808",
                    "19105241461190899958546989830320714088",
                    "118289913618897382132968146926830582035",
                    "248254187538733681508395034871153708090",
                    "237927719916616896425410658372413434442",
                    "140681410781901061995998728845252270774",
                    "23509691797959109133817434185790956947",
                    "279771557028504704050841437700293033674",
                    "119121670647923061455687941815973364093",
                    "98122615734853388747656225873532821777",
                    "324286182766020367731365542556029721775",
                    "324749492256065600361536845472001439006",
                    "212196974227931521030554194760892990939",
                    "311354044870435980057157301974648504794",
                    "261020369971212179562773239584904495223",
                    "70411044671133216822928607982054813259",
                    "339025428082691968074009648292685641425",
                    "206252426279668622196747240600354577887",
                    "154668583359224652685325821870775348064",
                    "163166888442498041557597458867187483373",
                    "150631482471764004499226641392932322635",
                    "179973160279130582477640119169469626576",
                    "321881014519936229180210177407365196349",
                    "327288559819186023000102596694638684991",
                    "11936566430602059354760477712178019312",
                    "296362791177467999872665390709140999762",
                    "331086224422890089569552121593642362290"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-484925508-904aa269",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5589ad59b1e70c71bec2c7a61d68e17ff59ce6a3",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "82157462679296270343706234711524331857",
                "length":  666
            },
            "id":  "ASB-A-484925508-acd123e7",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/5589ad59b1e70c71bec2c7a61d68e17ff59ce6a3",
            "target":  {
                "file":  "src/com/android/providers/media/MediaProvider.java",
                "function":  "updateProjectionToFilterColumns"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-484925508.json"