{"id":"ASB-A-482947423", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-58838", "A-482947423"], "details":"In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"211780235207706187971573931621795632827", "length":265}, "id":"ASB-A-482947423-4079821f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInPrivateExternalAndroidDirs"}}, {"deprecated":false, "digest":{"function_hash":"324012900189278724082818435901028863453", "length":100}, "id":"ASB-A-482947423-451b3fce", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInExternalAndroidDirs"}}, {"deprecated":false, "digest":{"line_hashes":["162776973371719968785450460997115648385", "53785966035345413186682068050453003852", "301978190510795751567515921457826913234", "252223703444627967676936803257648769177", "316354340869570178297291378910415766696", "69581308735062959321030290999252166865", "239186513940641068448898482879426032661", "33884445427034245068758763419433603876", "249798217802232672549927071124175086447", "114487928270391752033887408531048319746", "248699596369135014493218374199558648516", "209345230473000967762870807462707458591", "73503895872154771580154557247113135680", "170023314044330735859502574661608762615", "98385798723094820737499869810984236622", "73638861061980359784775058706297001542"], "threshold":0.9}, "id":"ASB-A-482947423-5f0b3b79", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}]}}, {"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"324012900189278724082818435901028863453", "length":100}, "id":"ASB-A-482947423-35602e52", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInExternalAndroidDirs"}}, {"deprecated":false, "digest":{"line_hashes":["162776973371719968785450460997115648385", "53785966035345413186682068050453003852", "301978190510795751567515921457826913234", "252223703444627967676936803257648769177", "318035472014424621936902689870360644468", "303308495953443320536628058378254659593", "286748704687510955870906176980999956571", "124040603353339922140414749868572286253", "249798217802232672549927071124175086447", "114487928270391752033887408531048319746", "248699596369135014493218374199558648516", "209345230473000967762870807462707458591", "73503895872154771580154557247113135680", "170023314044330735859502574661608762615", "98385798723094820737499869810984236622", "73638861061980359784775058706297001542"], "threshold":0.9}, "id":"ASB-A-482947423-603640e4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"211780235207706187971573931621795632827", "length":265}, "id":"ASB-A-482947423-c6e35971", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInPrivateExternalAndroidDirs"}}]}}, {"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["162776973371719968785450460997115648385", "53785966035345413186682068050453003852", "301978190510795751567515921457826913234", "252223703444627967676936803257648769177", "318035472014424621936902689870360644468", "303308495953443320536628058378254659593", "286748704687510955870906176980999956571", "124040603353339922140414749868572286253", "249798217802232672549927071124175086447", "114487928270391752033887408531048319746", "248699596369135014493218374199558648516", "209345230473000967762870807462707458591", "73503895872154771580154557247113135680", "170023314044330735859502574661608762615", "98385798723094820737499869810984236622", "73638861061980359784775058706297001542"], "threshold":0.9}, "id":"ASB-A-482947423-40bfaa3a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"324012900189278724082818435901028863453", "length":100}, "id":"ASB-A-482947423-b8cebe15", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInExternalAndroidDirs"}}, {"deprecated":false, "digest":{"function_hash":"211780235207706187971573931621795632827", "length":265}, "id":"ASB-A-482947423-c62eac6b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInPrivateExternalAndroidDirs"}}]}}, {"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["162776973371719968785450460997115648385", "53785966035345413186682068050453003852", "301978190510795751567515921457826913234", "252223703444627967676936803257648769177", "318035472014424621936902689870360644468", "303308495953443320536628058378254659593", "286748704687510955870906176980999956571", "124040603353339922140414749868572286253", "249798217802232672549927071124175086447", "114487928270391752033887408531048319746", "248699596369135014493218374199558648516", "209345230473000967762870807462707458591", "73503895872154771580154557247113135680", "170023314044330735859502574661608762615", "98385798723094820737499869810984236622", "73638861061980359784775058706297001542"], "threshold":0.9}, "id":"ASB-A-482947423-2eea7d04", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"324012900189278724082818435901028863453", "length":100}, "id":"ASB-A-482947423-59cc356e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInExternalAndroidDirs"}}, {"deprecated":false, "digest":{"function_hash":"211780235207706187971573931621795632827", "length":265}, "id":"ASB-A-482947423-68fa7f0d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInPrivateExternalAndroidDirs"}}]}}, {"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"211780235207706187971573931621795632827", "length":265}, "id":"ASB-A-482947423-0716fa7c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInPrivateExternalAndroidDirs"}}, {"deprecated":false, "digest":{"line_hashes":["162776973371719968785450460997115648385", "53785966035345413186682068050453003852", "301978190510795751567515921457826913234", "252223703444627967676936803257648769177", "316354340869570178297291378910415766696", "69581308735062959321030290999252166865", "239186513940641068448898482879426032661", "33884445427034245068758763419433603876", "249798217802232672549927071124175086447", "114487928270391752033887408531048319746", "248699596369135014493218374199558648516", "209345230473000967762870807462707458591", "73503895872154771580154557247113135680", "170023314044330735859502574661608762615", "98385798723094820737499869810984236622", "73638861061980359784775058706297001542"], "threshold":0.9}, "id":"ASB-A-482947423-58ae7e94", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"324012900189278724082818435901028863453", "length":100}, "id":"ASB-A-482947423-d14f2655", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInExternalAndroidDirs"}}]}}, {"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"211780235207706187971573931621795632827", "length":265}, "id":"ASB-A-482947423-08f667ba", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInPrivateExternalAndroidDirs"}}, {"deprecated":false, "digest":{"line_hashes":["162776973371719968785450460997115648385", "53785966035345413186682068050453003852", "301978190510795751567515921457826913234", "252223703444627967676936803257648769177", "303308495953443320536628058378254659593", "286748704687510955870906176980999956571", "124040603353339922140414749868572286253", "223563093838748518281752250081677751222", "249798217802232672549927071124175086447", "114487928270391752033887408531048319746", "248699596369135014493218374199558648516", "209345230473000967762870807462707458591", "73503895872154771580154557247113135680", "170023314044330735859502574661608762615", "98385798723094820737499869810984236622", "73638861061980359784775058706297001542"], "threshold":0.9}, "id":"ASB-A-482947423-3819dc6a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"324012900189278724082818435901028863453", "length":100}, "id":"ASB-A-482947423-b971f263", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFileInExternalAndroidDirs"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}