{"id":"ASB-A-444443479", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-28632", "A-444443479"], "details":"In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/modules/IntentResolver", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"102404312414944373181879991317112281805", "length":270}, "id":"ASB-A-444443479-39b15263", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85", "target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java", "function":"hasCrossProfileIntents"}}, {"deprecated":false, "digest":{"line_hashes":["261399217343972684695727895592631866635", "185638856415472250777403511453353337148", "174678765513168081938800059028083605063", "180678304454666937121745213922932054852", "173826632493730944037461231683334047495", "322591720204169525179012679373892722358", "155363556186907753657789969562469383828", "31487669892833121873421725925486421445", "130613886475893167786377265707477092117"], "threshold":0.9}, "id":"ASB-A-444443479-3d1d9790", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85", "target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java"}}, {"deprecated":false, "digest":{"function_hash":"252163358443479741004470399610878240797", "length":1094}, "id":"ASB-A-444443479-7852f8a8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java", "function":"createMultiProfilePagerAdapter"}}, {"deprecated":false, "digest":{"line_hashes":["50827615389172193476167804578924489006", "179372653182841392501384529015731435115", "43108357634073333283345006991600138253", "268215632334478793499630131869279656265", "191215072427211709999720615158946363704", "186438624328606573299324073958032356520", "280770218486435815588299531523209973782", "228202319285620297987594883753643678047", "231615605790565961966554210325086555827", "10788890208269827094398933855377448601", "337486458313766494693156938498009278182", "224802029678367421169334237047299560192", "64215130863152011613952937353327667777", "84484727654404652031316774843918451666", "107437320668624815791554135780661049909", "170409662879207657202973769363957741324", "229548529139284394599763677225932039967", "162848783552875215724231917807762980300", "322956742249993162742432605305541351385"], "threshold":0.9}, "id":"ASB-A-444443479-840a6138", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java"}}, {"deprecated":false, "digest":{"function_hash":"293273185477494904553227875292076217164", "length":58}, "id":"ASB-A-444443479-84af69d0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java", "function":"createCrossProfileIntentsChecker"}}]}}, {"package":{"name":"platform/packages/modules/IntentResolver", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["261399217343972684695727895592631866635", "185638856415472250777403511453353337148", "174678765513168081938800059028083605063", "180678304454666937121745213922932054852", "173826632493730944037461231683334047495", "322591720204169525179012679373892722358", "155363556186907753657789969562469383828", "31487669892833121873421725925486421445", "130613886475893167786377265707477092117"], "threshold":0.9}, "id":"ASB-A-444443479-19294e20", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7", "target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java"}}, {"deprecated":false, "digest":{"function_hash":"102404312414944373181879991317112281805", "length":270}, "id":"ASB-A-444443479-24acae19", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7", "target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java", "function":"hasCrossProfileIntents"}}, {"deprecated":false, "digest":{"function_hash":"129649157783174540752816730278599423349", "length":1176}, "id":"ASB-A-444443479-36841f9a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java", "function":"createMultiProfilePagerAdapter"}}, {"deprecated":false, "digest":{"function_hash":"293273185477494904553227875292076217164", "length":58}, "id":"ASB-A-444443479-d8580797", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java", "function":"createCrossProfileIntentsChecker"}}, {"deprecated":false, "digest":{"line_hashes":["100221638589423083594012080875383394399", "37609028171920469997899396064862303440", "44612873956806874334189150001501274772", "236007651643712088128125245832366472509", "314389838404869486439439673753433018505", "153938270870071004047384234489600603872", "280770218486435815588299531523209973782", "228202319285620297987594883753643678047", "231615605790565961966554210325086555827", "10788890208269827094398933855377448601", "337486458313766494693156938498009278182", "224802029678367421169334237047299560192", "64215130863152011613952937353327667777", "84484727654404652031316774843918451666", "107437320668624815791554135780661049909", "170409662879207657202973769363957741324", "305640153593329326034246597603890928632", "29439480183015998907126345156143631982", "322956742249993162742432605305541351385"], "threshold":0.9}, "id":"ASB-A-444443479-fe6b7edb", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java"}}]}}, {"package":{"name":"platform/packages/modules/IntentResolver", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["147577759490990865139685944544695572481", "175385664384916817133776395483059229838", "294553773904660010724504629577352706116", "184282470000757737825352594435403856561", "191215072427211709999720615158946363704", "186438624328606573299324073958032356520", "280770218486435815588299531523209973782", "228202319285620297987594883753643678047", "231615605790565961966554210325086555827", "10788890208269827094398933855377448601", "337486458313766494693156938498009278182", "224802029678367421169334237047299560192", "64215130863152011613952937353327667777", "84484727654404652031316774843918451666", "107437320668624815791554135780661049909", "170409662879207657202973769363957741324", "305640153593329326034246597603890928632", "29439480183015998907126345156143631982", "322956742249993162742432605305541351385"], "threshold":0.9}, "id":"ASB-A-444443479-2799a807", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java"}}, {"deprecated":false, "digest":{"line_hashes":["261399217343972684695727895592631866635", "185638856415472250777403511453353337148", "174678765513168081938800059028083605063", "180678304454666937121745213922932054852", "173826632493730944037461231683334047495", "322591720204169525179012679373892722358", "155363556186907753657789969562469383828", "31487669892833121873421725925486421445", "130613886475893167786377265707477092117"], "threshold":0.9}, "id":"ASB-A-444443479-4f0c359f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100", "target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java"}}, {"deprecated":false, "digest":{"function_hash":"293273185477494904553227875292076217164", "length":58}, "id":"ASB-A-444443479-9e3bdbdd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java", "function":"createCrossProfileIntentsChecker"}}, {"deprecated":false, "digest":{"function_hash":"102404312414944373181879991317112281805", "length":270}, "id":"ASB-A-444443479-aba1456d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100", "target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java", "function":"hasCrossProfileIntents"}}, {"deprecated":false, "digest":{"function_hash":"117242436247139587048878822694163593003", "length":1072}, "id":"ASB-A-444443479-ffb0ef69", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java", "function":"createMultiProfilePagerAdapter"}}]}}, {"package":{"name":"platform/packages/modules/IntentResolver", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"252163358443479741004470399610878240797", "length":1094}, "id":"ASB-A-444443479-1e261c12", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java", "function":"createMultiProfilePagerAdapter"}}, {"deprecated":false, "digest":{"function_hash":"102404312414944373181879991317112281805", "length":270}, "id":"ASB-A-444443479-4d475820", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc", "target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java", "function":"hasCrossProfileIntents"}}, {"deprecated":false, "digest":{"function_hash":"293273185477494904553227875292076217164", "length":58}, "id":"ASB-A-444443479-9dc19e5d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java", "function":"createCrossProfileIntentsChecker"}}, {"deprecated":false, "digest":{"line_hashes":["111398802756123349014319248315620886325", "195269708378908853983919589132016510590", "88230022454733843219773100838115691145", "313241880832768867806420663948982066025", "191215072427211709999720615158946363704", "186438624328606573299324073958032356520", "280770218486435815588299531523209973782", "228202319285620297987594883753643678047", "231615605790565961966554210325086555827", "10788890208269827094398933855377448601", "337486458313766494693156938498009278182", "224802029678367421169334237047299560192", "64215130863152011613952937353327667777", "84484727654404652031316774843918451666", "107437320668624815791554135780661049909", "170409662879207657202973769363957741324", "229548529139284394599763677225932039967", "162848783552875215724231917807762980300", "322956742249993162742432605305541351385"], "threshold":0.9}, "id":"ASB-A-444443479-cb3caea1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java"}}, {"deprecated":false, "digest":{"line_hashes":["261399217343972684695727895592631866635", "185638856415472250777403511453353337148", "174678765513168081938800059028083605063", "180678304454666937121745213922932054852", "173826632493730944037461231683334047495", "322591720204169525179012679373892722358", "155363556186907753657789969562469383828", "31487669892833121873421725925486421445", "130613886475893167786377265707477092117"], "threshold":0.9}, "id":"ASB-A-444443479-d6513c4a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc", "target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java"}}]}}, {"package":{"name":"platform/packages/modules/IntentResolver", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/IntentResolver/+/87d6a82f38d82eea3e43713612d401c6d962fb5b"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["9348214252256863230287684040574114741", "171889150735786721227257880935348182419", "108811464116761992059442629487695803529", "14352174136124384595727075504745097652", "276374522813325625548067470739151098136", "163586692630500316710733462632325249781", "333890545405436986281970543444770333957"], "threshold":0.9}, "id":"ASB-A-444443479-0369fb43", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/87d6a82f38d82eea3e43713612d401c6d962fb5b", "target":{"file":"java/src/com/android/intentresolver/AbstractMultiProfilePagerAdapter.java"}}, {"deprecated":false, "digest":{"function_hash":"135261264508818863179736291804681547551", "length":298}, "id":"ASB-A-444443479-3b01b395", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/87d6a82f38d82eea3e43713612d401c6d962fb5b", "target":{"file":"java/src/com/android/intentresolver/AbstractMultiProfilePagerAdapter.java", "function":"hasCrossProfileIntents"}}, {"deprecated":false, "digest":{"function_hash":"108443012827697101513274425952343177379", "length":614}, "id":"ASB-A-444443479-e2a70be3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/87d6a82f38d82eea3e43713612d401c6d962fb5b", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java", "function":"createChooserMultiProfilePagerAdapterForTwoProfiles"}}, {"deprecated":false, "digest":{"line_hashes":["151253630933789333445353075129477715121", "109208908062082718360786967763473864545", "292990431219017403073428106411870815936", "339908787637013107391595431886098996514", "86400618650051727809340054899867819557", "72347966524914379993182025660569090111", "268507635961561947929713895833156721603", "317037783350403469164396520080479972253", "316107099336362474100941918314730326606", "136257691785768734859081506468181279730", "263042509104568429819560491911952849514", "327508544717315039301126263382419548955", "205208047154755025425124874081196487015", "44593742112810872108886524681122608147", "118977360857665052683768809958607353949", "233393677511831266262429224707277635905", "100778846533892820839591633113024751992", "290812619204424325129485042056951233514", "60082605171253616931554770824767620153", "318696429406750936797056137952396472381", "123269965894139715216812387011771727983", "85587676265086057623692229424130570134", "229644577302844067576290105003642779602", "328260741502017500648504553615459095999", "92966240932766693866189734873350812424", "74804092246489346581480485460604107756", "76789421307142748630753342102957836485", "124645667238974657826658531929579386820", "290023132561248434237601611188583597526", "138816077411306186447674149310471229866", "132426054416321961132286337598443500536", "303656767413631611843654285019903671546", "27929684967757537883125474649987360494", "311934444604667155843275294377875718877", "81119250624062798817904462918946505591"], "threshold":0.9}, "id":"ASB-A-444443479-ff45f625", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/87d6a82f38d82eea3e43713612d401c6d962fb5b", "target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}