{"id":"ASB-A-471797575", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-11T15:42:03.104094163Z", "aliases":["CVE-2026-28644", "A-471797575"], "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-09-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/995f95376eb373d9e8d584883a87ebb90db609d0"], "severity":"High", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["267234732593795690459778999906339934707", "201063708500393510071108629482607161125", "3165407314155142059674102040682916501", "177809087579538070238245537243034007378", "311103090027810912653217446501431600245", "311545419293262592779433611898598004330", "64422315487152615121553626652131733082", "93050852636990815166199202291513347838", "314135186584661864628121941040893142512", "196711629987325289702584279164457436759", "24935059888481825808044669781728220500", "80123638825207670014965709529000917922", "216419437103615506300321458944451048737", "30078428719961917795180416304365530502", "280989723271764441248974080608782019831"], "threshold":0.9}, "id":"ASB-A-471797575-65b75c40", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/995f95376eb373d9e8d584883a87ebb90db609d0", "target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"11225162889188045262244835351011776019", "length":3190}, "id":"ASB-A-471797575-b5b2d772", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/995f95376eb373d9e8d584883a87ebb90db609d0", "target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java", "function":"startNextMatchingActivity"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-09-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a24b74da128da7cf45973c35154eb47876c3acf3"], "severity":"High", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"181769873053337694477873114370499293214", "length":3075}, "id":"ASB-A-471797575-24cfa20e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a24b74da128da7cf45973c35154eb47876c3acf3", "target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java", "function":"startNextMatchingActivity"}}, {"deprecated":false, "digest":{"line_hashes":["62633938392948863456674959037979078221", "138294872529556787577045791169816821948", "3165407314155142059674102040682916501", "177809087579538070238245537243034007378", "311103090027810912653217446501431600245", "311545419293262592779433611898598004330", "64422315487152615121553626652131733082", "93050852636990815166199202291513347838", "314135186584661864628121941040893142512", "196711629987325289702584279164457436759", "24935059888481825808044669781728220500", "80123638825207670014965709529000917922", "216419437103615506300321458944451048737", "30078428719961917795180416304365530502", "280989723271764441248974080608782019831"], "threshold":0.9}, "id":"ASB-A-471797575-83c317b5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/a24b74da128da7cf45973c35154eb47876c3acf3", "target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-09-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2b02232721942885bb45f9c72e2b70200e433c1d"], "severity":"High", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["267234732593795690459778999906339934707", "201063708500393510071108629482607161125", "3165407314155142059674102040682916501", "177809087579538070238245537243034007378", "311103090027810912653217446501431600245", "311545419293262592779433611898598004330", "64422315487152615121553626652131733082", "93050852636990815166199202291513347838", "314135186584661864628121941040893142512", "196711629987325289702584279164457436759", "24935059888481825808044669781728220500", "80123638825207670014965709529000917922", "216419437103615506300321458944451048737", "30078428719961917795180416304365530502", "280989723271764441248974080608782019831"], "threshold":0.9}, "id":"ASB-A-471797575-f9ce1f89", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2b02232721942885bb45f9c72e2b70200e433c1d", "target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"11225162889188045262244835351011776019", "length":3190}, "id":"ASB-A-471797575-fac17ad5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2b02232721942885bb45f9c72e2b70200e433c1d", "target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java", "function":"startNextMatchingActivity"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-09-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4b4ea7c7391c4bae978b9f6114f3f1e4257a7ca4"], "severity":"High", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["267234732593795690459778999906339934707", "201063708500393510071108629482607161125", "3165407314155142059674102040682916501", "177809087579538070238245537243034007378", "311103090027810912653217446501431600245", "311545419293262592779433611898598004330", "64422315487152615121553626652131733082", "93050852636990815166199202291513347838", "314135186584661864628121941040893142512", "196711629987325289702584279164457436759", "24935059888481825808044669781728220500", "80123638825207670014965709529000917922", "216419437103615506300321458944451048737", "30078428719961917795180416304365530502", "280989723271764441248974080608782019831"], "threshold":0.9}, "id":"ASB-A-471797575-8b26aa10", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4b4ea7c7391c4bae978b9f6114f3f1e4257a7ca4", "target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"11225162889188045262244835351011776019", "length":3190}, "id":"ASB-A-471797575-c227e632", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4b4ea7c7391c4bae978b9f6114f3f1e4257a7ca4", "target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java", "function":"startNextMatchingActivity"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-09-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/49507b0e29aa17dd01f22b1fea871e5a5cd35409"], "severity":"High", "spl":"2026-09-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"271377748463102027924821653983830805023", "length":2971}, "id":"ASB-A-471797575-0b858d64", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/49507b0e29aa17dd01f22b1fea871e5a5cd35409", "target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java", "function":"startNextMatchingActivity"}}, {"deprecated":false, "digest":{"line_hashes":["62633938392948863456674959037979078221", "138294872529556787577045791169816821948", "3165407314155142059674102040682916501", "177809087579538070238245537243034007378", "311103090027810912653217446501431600245", "311545419293262592779433611898598004330", "64422315487152615121553626652131733082", "93050852636990815166199202291513347838", "314135186584661864628121941040893142512", "196711629987325289702584279164457436759", "193361832083325832520681715831896511865", "240145062841803829746003412656347661785", "146113047732805261016662476579002387606", "280989723271764441248974080608782019831"], "threshold":0.9}, "id":"ASB-A-471797575-13f802ae", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/49507b0e29aa17dd01f22b1fea871e5a5cd35409", "target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}]}