ASB-A-486385459

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-486385459.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-486385459
Aliases
  • A-486385459
  • CVE-2026-28614
Published
2026-09-01T00:00:00Z
Modified
2026-09-29T15:47:20Z
Summary
[none]
Details

In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/7f44449562bc0a09e52ec84b37d95733c823e72d"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "228640235943044697760860749741364190128",
                    "43953125796183454816142807662472777682",
                    "58952132057675723472071783682177358395",
                    "269123462518549626182616420424445080976",
                    "10628864266787156032942855332068102196",
                    "288353105007237176253432773326204834254",
                    "179265687405319244813021154584500733258"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-486385459-a540a588",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7f44449562bc0a09e52ec84b37d95733c823e72d",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "284230453840811548508644633072343656261",
                "length":  2312
            },
            "id":  "ASB-A-486385459-c585a860",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7f44449562bc0a09e52ec84b37d95733c823e72d",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java",
                "function":  "onCreate"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-486385459.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/90e563165474eb865ba3aecd54e71a0c445966c0"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "284230453840811548508644633072343656261",
                "length":  2312
            },
            "id":  "ASB-A-486385459-ccc4df23",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/90e563165474eb865ba3aecd54e71a0c445966c0",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java",
                "function":  "onCreate"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "228640235943044697760860749741364190128",
                    "43953125796183454816142807662472777682",
                    "58952132057675723472071783682177358395",
                    "269123462518549626182616420424445080976",
                    "10628864266787156032942855332068102196",
                    "288353105007237176253432773326204834254",
                    "179265687405319244813021154584500733258"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-486385459-ee500ad0",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/90e563165474eb865ba3aecd54e71a0c445966c0",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-486385459.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/390eefdff00b5ec4ecd669dfcd975b82f772e6df"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "228640235943044697760860749741364190128",
                    "43953125796183454816142807662472777682",
                    "58952132057675723472071783682177358395",
                    "269123462518549626182616420424445080976",
                    "10628864266787156032942855332068102196",
                    "288353105007237176253432773326204834254",
                    "179265687405319244813021154584500733258"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-486385459-13917c82",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/390eefdff00b5ec4ecd669dfcd975b82f772e6df",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "284230453840811548508644633072343656261",
                "length":  2312
            },
            "id":  "ASB-A-486385459-a81a87a2",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/390eefdff00b5ec4ecd669dfcd975b82f772e6df",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java",
                "function":  "onCreate"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-486385459.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/216464c8bcb7a2f60604cc6fd0f968639f5e891f"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "228640235943044697760860749741364190128",
                    "43953125796183454816142807662472777682",
                    "58952132057675723472071783682177358395",
                    "269123462518549626182616420424445080976",
                    "10628864266787156032942855332068102196",
                    "288353105007237176253432773326204834254",
                    "179265687405319244813021154584500733258"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-486385459-1ecfef58",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/216464c8bcb7a2f60604cc6fd0f968639f5e891f",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "284230453840811548508644633072343656261",
                "length":  2312
            },
            "id":  "ASB-A-486385459-d67c24a1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/216464c8bcb7a2f60604cc6fd0f968639f5e891f",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java",
                "function":  "onCreate"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-486385459.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/dbcba0975474be9589ee5ed4b809b5eb052e6468"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "228640235943044697760860749741364190128",
                    "43953125796183454816142807662472777682",
                    "58952132057675723472071783682177358395",
                    "269123462518549626182616420424445080976",
                    "10628864266787156032942855332068102196",
                    "288353105007237176253432773326204834254",
                    "179265687405319244813021154584500733258"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-486385459-b4ef4ccb",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/dbcba0975474be9589ee5ed4b809b5eb052e6468",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "284230453840811548508644633072343656261",
                "length":  2312
            },
            "id":  "ASB-A-486385459-e9208a29",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/dbcba0975474be9589ee5ed4b809b5eb052e6468",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java",
                "function":  "onCreate"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-486385459.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-09-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/ec1b85f5159017b25a3c1353441f0dbae04623bc"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "228640235943044697760860749741364190128",
                    "43953125796183454816142807662472777682",
                    "58952132057675723472071783682177358395",
                    "269123462518549626182616420424445080976",
                    "10628864266787156032942855332068102196",
                    "288353105007237176253432773326204834254",
                    "179265687405319244813021154584500733258"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-486385459-807e7f0a",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ec1b85f5159017b25a3c1353441f0dbae04623bc",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "170752324650355765361253466071664364210",
                "length":  2202
            },
            "id":  "ASB-A-486385459-ec2e3eb1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ec1b85f5159017b25a3c1353441f0dbae04623bc",
            "target":  {
                "file":  "packages/SystemUI/src/com/android/systemui/SlicePermissionActivity.java",
                "function":  "onCreate"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-486385459.json"