ASB-A-498588487

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-498588487.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-498588487
Aliases
  • A-498588487
  • CVE-2026-28660
Published
2026-09-01T00:00:00Z
Modified
2026-09-08T15:39:03Z
Summary
[none]
Details

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "ID"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "66135735751788773994729551311076250056",
                    "17910172518135811976296703531016978916",
                    "287774087475138469326021921073413644420",
                    "223121719778069458825802352126035715283",
                    "283945616943664523103650871158911531903",
                    "239834099930053202613292695489726444047",
                    "18168249603378674861772506099571325668",
                    "154704893789851052213470597858868812451",
                    "243659821465520410654506795647150838431",
                    "135603085226033825165391651123515321353",
                    "168908619102541483615172151608887724822",
                    "75904538119850232626577435422625396477"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-498588487-167071d3",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "194281981762645415111628158575904127208",
                "length": 624
            },
            "id": "ASB-A-498588487-5d553d66",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2",
            "target": {
                "file": "services/core/java/com/android/server/pm/LauncherAppsService.java",
                "function": "getAllSessions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "208991343523786115795661376446720704144",
                "length": 632
            },
            "id": "ASB-A-498588487-61c28e27",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function": "getAllSessions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "95570531676616451031617073987169738739",
                    "85931253098282894893778629248184580582",
                    "60347845863705867768217320182539210410",
                    "291330430072008320027449604326519765787"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-498588487-96bf12b2",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2",
            "target": {
                "file": "services/core/java/com/android/server/pm/LauncherAppsService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-498588487.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "ID"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "95570531676616451031617073987169738739",
                    "85931253098282894893778629248184580582",
                    "60347845863705867768217320182539210410",
                    "291330430072008320027449604326519765787"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-498588487-1badc3df",
            "match_only_versions": [
                "15"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5",
            "target": {
                "file": "services/core/java/com/android/server/pm/LauncherAppsService.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "288123369583420181910922017617663674079",
                "length": 583
            },
            "id": "ASB-A-498588487-afef89e1",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5",
            "target": {
                "file": "services/core/java/com/android/server/pm/LauncherAppsService.java",
                "function": "getAllSessions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "208991343523786115795661376446720704144",
                "length": 632
            },
            "id": "ASB-A-498588487-b867d9e6",
            "match_only_versions": [
                "15"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function": "getAllSessions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "66135735751788773994729551311076250056",
                    "17910172518135811976296703531016978916",
                    "287774087475138469326021921073413644420",
                    "223121719778069458825802352126035715283",
                    "283945616943664523103650871158911531903",
                    "239834099930053202613292695489726444047",
                    "18168249603378674861772506099571325668",
                    "154704893789851052213470597858868812451",
                    "243659821465520410654506795647150838431",
                    "135603085226033825165391651123515321353",
                    "168908619102541483615172151608887724822",
                    "75904538119850232626577435422625396477"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-498588487-f8f17551",
            "match_only_versions": [
                "15"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-498588487.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "ID"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "194281981762645415111628158575904127208",
                "length": 624
            },
            "id": "ASB-A-498588487-54889ab9",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9",
            "target": {
                "file": "services/core/java/com/android/server/pm/LauncherAppsService.java",
                "function": "getAllSessions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "95570531676616451031617073987169738739",
                    "85931253098282894893778629248184580582",
                    "60347845863705867768217320182539210410",
                    "291330430072008320027449604326519765787"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-498588487-72c9d8ec",
            "match_only_versions": [
                "16"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9",
            "target": {
                "file": "services/core/java/com/android/server/pm/LauncherAppsService.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "208991343523786115795661376446720704144",
                "length": 632
            },
            "id": "ASB-A-498588487-b3871924",
            "match_only_versions": [
                "16"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function": "getAllSessions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "66135735751788773994729551311076250056",
                    "17910172518135811976296703531016978916",
                    "287774087475138469326021921073413644420",
                    "223121719778069458825802352126035715283",
                    "283945616943664523103650871158911531903",
                    "239834099930053202613292695489726444047",
                    "18168249603378674861772506099571325668",
                    "154704893789851052213470597858868812451",
                    "243659821465520410654506795647150838431",
                    "135603085226033825165391651123515321353",
                    "168908619102541483615172151608887724822",
                    "75904538119850232626577435422625396477"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-498588487-beed7251",
            "match_only_versions": [
                "16"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-498588487.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "ID"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "208991343523786115795661376446720704144",
                "length": 632
            },
            "id": "ASB-A-498588487-7ac6ce73",
            "match_only_versions": [
                "16-qpr2"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function": "getAllSessions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "194281981762645415111628158575904127208",
                "length": 624
            },
            "id": "ASB-A-498588487-9ce2d559",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81",
            "target": {
                "file": "services/core/java/com/android/server/pm/LauncherAppsService.java",
                "function": "getAllSessions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "66135735751788773994729551311076250056",
                    "17910172518135811976296703531016978916",
                    "287774087475138469326021921073413644420",
                    "223121719778069458825802352126035715283",
                    "283945616943664523103650871158911531903",
                    "239834099930053202613292695489726444047",
                    "18168249603378674861772506099571325668",
                    "154704893789851052213470597858868812451",
                    "243659821465520410654506795647150838431",
                    "135603085226033825165391651123515321353",
                    "168908619102541483615172151608887724822",
                    "75904538119850232626577435422625396477"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-498588487-c3720f1a",
            "match_only_versions": [
                "16-qpr2"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "95570531676616451031617073987169738739",
                    "85931253098282894893778629248184580582",
                    "60347845863705867768217320182539210410",
                    "291330430072008320027449604326519765787"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-498588487-ed73b38a",
            "match_only_versions": [
                "16-qpr2"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81",
            "target": {
                "file": "services/core/java/com/android/server/pm/LauncherAppsService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-498588487.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "ID"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "95570531676616451031617073987169738739",
                    "85931253098282894893778629248184580582",
                    "60347845863705867768217320182539210410",
                    "291330430072008320027449604326519765787"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-498588487-411c5701",
            "match_only_versions": [
                "17"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59",
            "target": {
                "file": "services/core/java/com/android/server/pm/LauncherAppsService.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "66135735751788773994729551311076250056",
                    "17910172518135811976296703531016978916",
                    "287774087475138469326021921073413644420",
                    "223121719778069458825802352126035715283",
                    "283945616943664523103650871158911531903",
                    "239834099930053202613292695489726444047",
                    "18168249603378674861772506099571325668",
                    "154704893789851052213470597858868812451",
                    "243659821465520410654506795647150838431",
                    "135603085226033825165391651123515321353",
                    "168908619102541483615172151608887724822",
                    "75904538119850232626577435422625396477"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-498588487-4f041cbb",
            "match_only_versions": [
                "17"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "208991343523786115795661376446720704144",
                "length": 632
            },
            "id": "ASB-A-498588487-eb88d8cd",
            "match_only_versions": [
                "17"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59",
            "target": {
                "file": "services/core/java/com/android/server/pm/PackageInstallerService.java",
                "function": "getAllSessions"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "194281981762645415111628158575904127208",
                "length": 624
            },
            "id": "ASB-A-498588487-ebb6ebb3",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59",
            "target": {
                "file": "services/core/java/com/android/server/pm/LauncherAppsService.java",
                "function": "getAllSessions"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-498588487.json"