ASB-A-489225275

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-489225275.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-489225275
Aliases
  • A-489225275
  • CVE-2026-28607
Published
2026-09-01T00:00:00Z
Modified
2026-09-08T15:39:03Z
Summary
[none]
Details

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "25678527416454208432614379293024199404",
                    "316726248341758280998379107508325748599",
                    "272807006561610370501417909584127061202",
                    "91188059137859994195088770566842266599",
                    "16621780674115800497096008820767391377",
                    "340039348358812029490277916356954824021",
                    "89643403731073374122551795631902689778",
                    "67431381264119715207409204071429308707",
                    "291049377288913872505989158231109560769",
                    "115173738379477178924815138717586857760",
                    "58287169907098579911924116407589926025",
                    "263746575025031202258905831758877131157"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-02dd0183",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "252687512716136636728004069591461906783",
                "length": 1482
            },
            "id": "ASB-A-489225275-23297681",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java",
                "function": "onCreate"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "185604537140952635734738236709254031490",
                "length": 292
            },
            "id": "ASB-A-489225275-355b8cad",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "getRequestedPermissions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "52680562980510607517605899431326641353",
                    "222646591356491429637094959728387294067",
                    "82476260474160191190619696386489110591"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-53b935a5",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/PackageUtil.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "106852290312809516895377641684996428641",
                    "254206429671381710035655612641757762048",
                    "338452513642929939047865711802153221999",
                    "259508737967465209493145439077418684169",
                    "221254481077704355234469265561947169807",
                    "198168478088630732755973602456631827793",
                    "225949171834575153345138588195644216622",
                    "221973176153146143582069605600468334443",
                    "112910000939268604554438998217215511921",
                    "263746575025031202258905831758877131157",
                    "263005559163137403638496821056305388088",
                    "58929518678013263896037181778314082377",
                    "29844061187659970732989886449581715712",
                    "296276164912890511957931757038036306715",
                    "28048552181586519684944616507710731140",
                    "221021393018850293048960617952541970827",
                    "196782686220617066927954600405440177661",
                    "17313545307980698675703531090957618616",
                    "260861499165759283338398296075050270664",
                    "299215052268245412278961868015967141767",
                    "249511230169017374000683920755685807171",
                    "21221126853118825090031009375356438417",
                    "41360014686090784930503947598537150219",
                    "219613577819779853200054952202802097574",
                    "186413296058605191460440160453328220847",
                    "137957984886052759307568400966786216280",
                    "306936669422279865259940716863850363040",
                    "96321991240038270269755988956708029260",
                    "187560578324102053171208247010179276029",
                    "58642554557945972021082773925851064904",
                    "263132710757540252641829136028558801726",
                    "201245894770287100299819480583310197571",
                    "319269864999209180400716469509464626956",
                    "253815196771545047754757517792839028343",
                    "25951370221727965608250245537454751050",
                    "9330368635400660237435184567344288369",
                    "209838517258065424964777518212473963353",
                    "226869341315576444528013089983214843069",
                    "218673300309448677127534856087808873891",
                    "233719466794560235134779317995158355676",
                    "194861516906589107651718416040819752177",
                    "56111384582563921389874863548700993107",
                    "142289138470839470692046499309342139915",
                    "217634510623778148224838654866171535080",
                    "17487251200895864438150254966736862173",
                    "204101675498605135024808400654796059844",
                    "164917948516606776464851285832314310256",
                    "277292775291073277501337954943058697709",
                    "294258919881150336376956612249256445296",
                    "249879808794227586937239148136134966261",
                    "201190704786300312245317127310257814587",
                    "201587660596743591545175087948861025183",
                    "206583249750969311944178716942576507397",
                    "81449729320594700327696298941855148802",
                    "165497933030216600670766577457908712381",
                    "47249007774615380260116880509701510897",
                    "24761777831436560761710409046387147445",
                    "279242499557701657666253780944471264490",
                    "154731730640234064466207119379245630454",
                    "47209053410727927234555338959710548712",
                    "257166332073073215211498061369789646710",
                    "233056818382301436189550149717537071606",
                    "106593624790003189716276185524729643306",
                    "219011696207312508610660324158438822739",
                    "289174658616443959451699440838066839097"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-6462f5c6",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "164274188035875193774244932934383904484",
                "length": 138
            },
            "exact_target_file_match_only": true,
            "id": "ASB-A-489225275-8bede331",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "getPackageNameForUid"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "331971739253791085034829331216593523517",
                "length": 2029
            },
            "id": "ASB-A-489225275-90f9f886",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "onCreate"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-489225275.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "67351796576961428084154187004498649684",
                "length": 1124
            },
            "id": "ASB-A-489225275-11ac7dd9",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java",
                "function": "onCreate"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "106852290312809516895377641684996428641",
                    "254206429671381710035655612641757762048",
                    "338452513642929939047865711802153221999",
                    "249511230169017374000683920755685807171",
                    "21221126853118825090031009375356438417",
                    "41360014686090784930503947598537150219",
                    "219613577819779853200054952202802097574",
                    "186413296058605191460440160453328220847",
                    "137957984886052759307568400966786216280",
                    "306936669422279865259940716863850363040",
                    "96321991240038270269755988956708029260",
                    "253815196771545047754757517792839028343",
                    "25951370221727965608250245537454751050",
                    "9330368635400660237435184567344288369",
                    "209838517258065424964777518212473963353",
                    "226869341315576444528013089983214843069",
                    "218673300309448677127534856087808873891",
                    "233719466794560235134779317995158355676",
                    "194861516906589107651718416040819752177",
                    "56111384582563921389874863548700993107",
                    "142289138470839470692046499309342139915",
                    "217634510623778148224838654866171535080",
                    "17487251200895864438150254966736862173",
                    "204101675498605135024808400654796059844",
                    "164917948516606776464851285832314310256",
                    "277292775291073277501337954943058697709",
                    "294258919881150336376956612249256445296",
                    "249879808794227586937239148136134966261",
                    "201190704786300312245317127310257814587",
                    "201587660596743591545175087948861025183",
                    "206583249750969311944178716942576507397",
                    "81449729320594700327696298941855148802",
                    "165497933030216600670766577457908712381",
                    "47249007774615380260116880509701510897",
                    "24761777831436560761710409046387147445",
                    "279242499557701657666253780944471264490",
                    "154731730640234064466207119379245630454",
                    "47209053410727927234555338959710548712",
                    "257166332073073215211498061369789646710",
                    "233056818382301436189550149717537071606",
                    "106593624790003189716276185524729643306",
                    "219011696207312508610660324158438822739",
                    "289174658616443959451699440838066839097"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-5b59b7af",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "164274188035875193774244932934383904484",
                "length": 138
            },
            "exact_target_file_match_only": true,
            "id": "ASB-A-489225275-933e96de",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "getPackageNameForUid"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "179210721781866428300979830668522342143",
                "length": 1669
            },
            "id": "ASB-A-489225275-b149e4cf",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "onCreate"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "52680562980510607517605899431326641353",
                    "186589791679892618466714720917437507577",
                    "67285741456772442012070940876174401461"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-c0788efd",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/PackageUtil.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "185604537140952635734738236709254031490",
                "length": 292
            },
            "id": "ASB-A-489225275-f3ddc775",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "getRequestedPermissions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "25678527416454208432614379293024199404",
                    "316726248341758280998379107508325748599",
                    "272807006561610370501417909584127061202",
                    "273131921640719163415313175550143036442",
                    "20125181843498003731916637974928233653",
                    "85350371322174750088956847913711933747",
                    "315300290812579995506388452235574074731",
                    "118915008066074194702284930329014920501",
                    "67431381264119715207409204071429308707",
                    "291049377288913872505989158231109560769",
                    "263773574913797356623212842948883971478",
                    "209614292367324420253485868923748794552",
                    "314322894872804974644392465042348751920"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-ffb66036",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-489225275.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "179210721781866428300979830668522342143",
                "length": 1669
            },
            "id": "ASB-A-489225275-5969b3c7",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "onCreate"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "52680562980510607517605899431326641353",
                    "186589791679892618466714720917437507577",
                    "67285741456772442012070940876174401461"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-6051b7a9",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/PackageUtil.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "25678527416454208432614379293024199404",
                    "316726248341758280998379107508325748599",
                    "272807006561610370501417909584127061202",
                    "273131921640719163415313175550143036442",
                    "20125181843498003731916637974928233653",
                    "85350371322174750088956847913711933747",
                    "315300290812579995506388452235574074731",
                    "118915008066074194702284930329014920501",
                    "67431381264119715207409204071429308707",
                    "291049377288913872505989158231109560769",
                    "263773574913797356623212842948883971478",
                    "209614292367324420253485868923748794552",
                    "314322894872804974644392465042348751920"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-6366b50c",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "164274188035875193774244932934383904484",
                "length": 138
            },
            "exact_target_file_match_only": true,
            "id": "ASB-A-489225275-89a03f43",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "getPackageNameForUid"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "106852290312809516895377641684996428641",
                    "254206429671381710035655612641757762048",
                    "338452513642929939047865711802153221999",
                    "249511230169017374000683920755685807171",
                    "21221126853118825090031009375356438417",
                    "41360014686090784930503947598537150219",
                    "219613577819779853200054952202802097574",
                    "186413296058605191460440160453328220847",
                    "137957984886052759307568400966786216280",
                    "306936669422279865259940716863850363040",
                    "96321991240038270269755988956708029260",
                    "253815196771545047754757517792839028343",
                    "25951370221727965608250245537454751050",
                    "9330368635400660237435184567344288369",
                    "209838517258065424964777518212473963353",
                    "226869341315576444528013089983214843069",
                    "218673300309448677127534856087808873891",
                    "233719466794560235134779317995158355676",
                    "194861516906589107651718416040819752177",
                    "56111384582563921389874863548700993107",
                    "142289138470839470692046499309342139915",
                    "217634510623778148224838654866171535080",
                    "17487251200895864438150254966736862173",
                    "204101675498605135024808400654796059844",
                    "164917948516606776464851285832314310256",
                    "277292775291073277501337954943058697709",
                    "294258919881150336376956612249256445296",
                    "249879808794227586937239148136134966261",
                    "201190704786300312245317127310257814587",
                    "201587660596743591545175087948861025183",
                    "206583249750969311944178716942576507397",
                    "81449729320594700327696298941855148802",
                    "165497933030216600670766577457908712381",
                    "47249007774615380260116880509701510897",
                    "24761777831436560761710409046387147445",
                    "279242499557701657666253780944471264490",
                    "154731730640234064466207119379245630454",
                    "47209053410727927234555338959710548712",
                    "257166332073073215211498061369789646710",
                    "233056818382301436189550149717537071606",
                    "106593624790003189716276185524729643306",
                    "219011696207312508610660324158438822739",
                    "289174658616443959451699440838066839097"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-8d150497",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "67351796576961428084154187004498649684",
                "length": 1124
            },
            "id": "ASB-A-489225275-e5b99348",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java",
                "function": "onCreate"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "185604537140952635734738236709254031490",
                "length": 292
            },
            "id": "ASB-A-489225275-ef7af8b1",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "getRequestedPermissions"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-489225275.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "25678527416454208432614379293024199404",
                    "316726248341758280998379107508325748599",
                    "272807006561610370501417909584127061202",
                    "91188059137859994195088770566842266599",
                    "16621780674115800497096008820767391377",
                    "340039348358812029490277916356954824021",
                    "89643403731073374122551795631902689778",
                    "67431381264119715207409204071429308707",
                    "291049377288913872505989158231109560769",
                    "115173738379477178924815138717586857760",
                    "58287169907098579911924116407589926025",
                    "263746575025031202258905831758877131157"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-29d3ff17",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "106852290312809516895377641684996428641",
                    "254206429671381710035655612641757762048",
                    "338452513642929939047865711802153221999",
                    "259508737967465209493145439077418684169",
                    "221254481077704355234469265561947169807",
                    "198168478088630732755973602456631827793",
                    "225949171834575153345138588195644216622",
                    "221973176153146143582069605600468334443",
                    "112910000939268604554438998217215511921",
                    "263746575025031202258905831758877131157",
                    "263005559163137403638496821056305388088",
                    "58929518678013263896037181778314082377",
                    "29844061187659970732989886449581715712",
                    "296276164912890511957931757038036306715",
                    "28048552181586519684944616507710731140",
                    "221021393018850293048960617952541970827",
                    "196782686220617066927954600405440177661",
                    "17313545307980698675703531090957618616",
                    "260861499165759283338398296075050270664",
                    "299215052268245412278961868015967141767",
                    "249511230169017374000683920755685807171",
                    "21221126853118825090031009375356438417",
                    "41360014686090784930503947598537150219",
                    "219613577819779853200054952202802097574",
                    "186413296058605191460440160453328220847",
                    "137957984886052759307568400966786216280",
                    "306936669422279865259940716863850363040",
                    "96321991240038270269755988956708029260",
                    "187560578324102053171208247010179276029",
                    "58642554557945972021082773925851064904",
                    "263132710757540252641829136028558801726",
                    "201245894770287100299819480583310197571",
                    "319269864999209180400716469509464626956",
                    "253815196771545047754757517792839028343",
                    "25951370221727965608250245537454751050",
                    "9330368635400660237435184567344288369",
                    "209838517258065424964777518212473963353",
                    "226869341315576444528013089983214843069",
                    "218673300309448677127534856087808873891",
                    "233719466794560235134779317995158355676",
                    "194861516906589107651718416040819752177",
                    "56111384582563921389874863548700993107",
                    "142289138470839470692046499309342139915",
                    "217634510623778148224838654866171535080",
                    "17487251200895864438150254966736862173",
                    "204101675498605135024808400654796059844",
                    "164917948516606776464851285832314310256",
                    "277292775291073277501337954943058697709",
                    "294258919881150336376956612249256445296",
                    "249879808794227586937239148136134966261",
                    "201190704786300312245317127310257814587",
                    "201587660596743591545175087948861025183",
                    "206583249750969311944178716942576507397",
                    "81449729320594700327696298941855148802",
                    "165497933030216600670766577457908712381",
                    "47249007774615380260116880509701510897",
                    "24761777831436560761710409046387147445",
                    "279242499557701657666253780944471264490",
                    "154731730640234064466207119379245630454",
                    "47209053410727927234555338959710548712",
                    "257166332073073215211498061369789646710",
                    "233056818382301436189550149717537071606",
                    "106593624790003189716276185524729643306",
                    "219011696207312508610660324158438822739",
                    "289174658616443959451699440838066839097"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-52856aaa",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "331971739253791085034829331216593523517",
                "length": 2029
            },
            "id": "ASB-A-489225275-6780d7ab",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "onCreate"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "185604537140952635734738236709254031490",
                "length": 292
            },
            "id": "ASB-A-489225275-7045ef2e",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "getRequestedPermissions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "52680562980510607517605899431326641353",
                    "222646591356491429637094959728387294067",
                    "82476260474160191190619696386489110591"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-bd10514f",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/PackageUtil.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "164274188035875193774244932934383904484",
                "length": 138
            },
            "exact_target_file_match_only": true,
            "id": "ASB-A-489225275-f9926c4e",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "getPackageNameForUid"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "252687512716136636728004069591461906783",
                "length": 1482
            },
            "id": "ASB-A-489225275-fa590719",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java",
                "function": "onCreate"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-489225275.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "164274188035875193774244932934383904484",
                "length": 138
            },
            "exact_target_file_match_only": true,
            "id": "ASB-A-489225275-302418a2",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "getPackageNameForUid"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "252687512716136636728004069591461906783",
                "length": 1482
            },
            "id": "ASB-A-489225275-4d4eefb0",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java",
                "function": "onCreate"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "25678527416454208432614379293024199404",
                    "316726248341758280998379107508325748599",
                    "272807006561610370501417909584127061202",
                    "91188059137859994195088770566842266599",
                    "16621780674115800497096008820767391377",
                    "340039348358812029490277916356954824021",
                    "89643403731073374122551795631902689778",
                    "67431381264119715207409204071429308707",
                    "291049377288913872505989158231109560769",
                    "115173738379477178924815138717586857760",
                    "58287169907098579911924116407589926025",
                    "263746575025031202258905831758877131157"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-4d97207f",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "106852290312809516895377641684996428641",
                    "254206429671381710035655612641757762048",
                    "338452513642929939047865711802153221999",
                    "259508737967465209493145439077418684169",
                    "221254481077704355234469265561947169807",
                    "198168478088630732755973602456631827793",
                    "225949171834575153345138588195644216622",
                    "221973176153146143582069605600468334443",
                    "112910000939268604554438998217215511921",
                    "263746575025031202258905831758877131157",
                    "263005559163137403638496821056305388088",
                    "58929518678013263896037181778314082377",
                    "29844061187659970732989886449581715712",
                    "296276164912890511957931757038036306715",
                    "28048552181586519684944616507710731140",
                    "221021393018850293048960617952541970827",
                    "196782686220617066927954600405440177661",
                    "17313545307980698675703531090957618616",
                    "260861499165759283338398296075050270664",
                    "299215052268245412278961868015967141767",
                    "249511230169017374000683920755685807171",
                    "21221126853118825090031009375356438417",
                    "41360014686090784930503947598537150219",
                    "219613577819779853200054952202802097574",
                    "186413296058605191460440160453328220847",
                    "137957984886052759307568400966786216280",
                    "306936669422279865259940716863850363040",
                    "96321991240038270269755988956708029260",
                    "187560578324102053171208247010179276029",
                    "58642554557945972021082773925851064904",
                    "263132710757540252641829136028558801726",
                    "201245894770287100299819480583310197571",
                    "319269864999209180400716469509464626956",
                    "253815196771545047754757517792839028343",
                    "25951370221727965608250245537454751050",
                    "9330368635400660237435184567344288369",
                    "209838517258065424964777518212473963353",
                    "226869341315576444528013089983214843069",
                    "218673300309448677127534856087808873891",
                    "233719466794560235134779317995158355676",
                    "194861516906589107651718416040819752177",
                    "56111384582563921389874863548700993107",
                    "142289138470839470692046499309342139915",
                    "217634510623778148224838654866171535080",
                    "17487251200895864438150254966736862173",
                    "204101675498605135024808400654796059844",
                    "164917948516606776464851285832314310256",
                    "277292775291073277501337954943058697709",
                    "294258919881150336376956612249256445296",
                    "249879808794227586937239148136134966261",
                    "201190704786300312245317127310257814587",
                    "201587660596743591545175087948861025183",
                    "206583249750969311944178716942576507397",
                    "81449729320594700327696298941855148802",
                    "165497933030216600670766577457908712381",
                    "47249007774615380260116880509701510897",
                    "24761777831436560761710409046387147445",
                    "279242499557701657666253780944471264490",
                    "154731730640234064466207119379245630454",
                    "47209053410727927234555338959710548712",
                    "257166332073073215211498061369789646710",
                    "233056818382301436189550149717537071606",
                    "106593624790003189716276185524729643306",
                    "219011696207312508610660324158438822739",
                    "289174658616443959451699440838066839097"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-8bae1bdd",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "52680562980510607517605899431326641353",
                    "222646591356491429637094959728387294067",
                    "82476260474160191190619696386489110591"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-489225275-99627272",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/PackageUtil.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "185604537140952635734738236709254031490",
                "length": 292
            },
            "id": "ASB-A-489225275-a56c4262",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "getRequestedPermissions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "331971739253791085034829331216593523517",
                "length": 2029
            },
            "id": "ASB-A-489225275-a978f430",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75",
            "target": {
                "file": "packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java",
                "function": "onCreate"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-489225275.json"