ASB-A-484928416

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-484928416.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-484928416

Aliases

A-484928416
CVE-2026-28622

Published

2026-09-01T00:00:00Z

Modified

2026-09-09T15:15:54Z

Summary

[none]

Details

In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2026-09-01

Affected packages

Android / platform/packages/providers/MediaProvider

Package

Name: platform/packages/providers/MediaProvider

Affected ranges

Type: ECOSYSTEM
Events: Introduced

17-next:0

Fixed

17-next:2026-09-01

Affected versions

Other

17-next

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/4b698a3cd6c5788baa3db033a6036a4f51908f7f"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "ID"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "42119689135945760980752050154845820423",
                    "84764894896792028689533984363676516934",
                    "243839779554267977789052203930708308316",
                    "188696854051822098628475581598569517710",
                    "311174592527069944023358384831468094979",
                    "330130503888139606082937271650017631736",
                    "152080826542028659099275650879606893093",
                    "245379146133622774286139346869641491217",
                    "30550706276468305229189531561047000019",
                    "242642207283859823897829571108809641120",
                    "333541036334175170593169002723022376500",
                    "187215180741306250042504020544717909393",
                    "239804659510628910615359622109497212372",
                    "147663908448953618744076667364439485851",
                    "214416835777405273668274205189271713776",
                    "242171672764837474105864916301236649574",
                    "152670207180340398999567003431675505935",
                    "305795066801101701024104771869935002738",
                    "104424570516293489991767540404160069647",
                    "199000490722513594151127800177210186705",
                    "266453272466938016674178668078491843869",
                    "1661581121059951977628295230385135830"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-484928416-49c3f0c3",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/4b698a3cd6c5788baa3db033a6036a4f51908f7f",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "99848815113896054436808947807316448964",
                "length": 12718
            },
            "id": "ASB-A-484928416-a53905c5",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/MediaProvider/+/4b698a3cd6c5788baa3db033a6036a4f51908f7f",
            "target": {
                "file": "src/com/android/providers/media/MediaProvider.java",
                "function": "getQueryBuilderInternal"
            }
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-484928416.json"