{"id":"ASB-A-498162425", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-55264", "A-498162425"], "details":"In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"191790017511253499521390517376373064771", "length":851}, "id":"ASB-A-498162425-052b9cb9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"checkDestinationFilePathRestrictions"}}, {"deprecated":false, "digest":{"function_hash":"110967783211825894487055299495850689562", "length":910}, "id":"ASB-A-498162425-2bae7b61", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkDownloadedFilePath"}}, {"deprecated":false, "digest":{"function_hash":"126846526632470062071384680087957547226", "length":2850}, "id":"ASB-A-498162425-3eab381a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkInsertPermissions"}}, {"deprecated":false, "digest":{"function_hash":"2570707937030247635270512663885589139", "length":1188}, "id":"ASB-A-498162425-4abd44f3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"logVerboseOpenFileInfo"}}, {"deprecated":false, "digest":{"line_hashes":["319968131732966878335492432862009169039", "283905761946507337867765072941970407225", "144766987770461267759917616369168644120", "50531897741651730885254972958441239122", "100814637638357964843970911157544461125", "51178454138944312132638746331043883210", "125115819644900896497385861423049676731", "257277134168835120580914606770657116890", "32795350332005576687995209872446582328", "240716560623469246503577962139165236152", "316130655847659994863251917282559811859", "109891341816880214090045361456840921497", "191044219971436116430067743241388972838", "162643476413108576964635341222724178040", "319668309734731209647266839764277727446", "137798806865731016589499144751276129178", "51981579517093587943744092330794157943", "265220291524012738659067870049771226337", "336219000401742417169987769310582193158", "165524586795455585860520982098764462105", "198259181563682615350334727860780633941", "201649539840690409682269798813421944661", "101326853097531343093972391082846738573", "295709304328089267200943636095186664422", "130041268595290425913739191158205504832", "269767468591660554132272255809471483386", "210167189556760666792958444910823800323", "25705371495313585068333487775503027268", "241864328414844809803604555230962056764", "108587633537507210242609878158511307392", "128797082458499271042020098054893634524", "206595471633514484748500303191320843304", "166337675263112384633214305208700952451", "110310661001557351899419952197453418926", "242689469119797169232603993138221452973", "115813513611785974948206868770592190732", "241616794146644658069325258645048770872", "265327089288429881176664649899688069294", "210364460122909675900110413275950559082", "226764922388754556828136901533156579282", "77767875361646141766523022975364985554", "255199986323501933762178996818293922826", "64144684215165488984949050918871853401", "86556705182283327999759493629576323362", "39093664468793664434394571349121065304", "96354860121479526837624707418952346801", "303261713221302820178984988521075568922", "136193735816866371423231754184253908406", "290277950795669339425373439792203756513", "536342708549862246255287749372356259", "173213216655434887255702715122605034611", "30882435790888815960000715321992543333", "277442550098369274042332338464579723480", "35731442600192499278284464036798403322", "154978508412848911859447069425734388038", "60436304062155373351573421492785660455", "169813889243416086375795945721364805234", "333647114227027196994006207182456886735", "253388394112225191698069999813240660875", "207627754695244550627147867965141950202", "301026251386690289143905678199733866909", "139373199368672459398471529879729191420", "50234125652040558252367006909075626633", "283070460750551119341580442036188056431", "179465081222007845257627473901042115916", "244412650042084315859701740562716354949", "239970075664917634686077128232748312540", "252545784538556659435161403674235011058", "275342365689127315746539714937377490430", "309618802140636889772787913916612181017", "336432534207396294580097801281934225545", "2677754783487083420207765126854370181", "39724400325374756756251823420936990649", "26928668486169766095975640115014881125", "241006191457185296232536050932186325279", "128610881375541658409815341349168026501", "55211809314445144230532090703814635263", "258571426977471877897008773593995768825", "198160419149913045260801041192177611263", "41937874059107375334105613040290750065", "31976645933064633274006855207865272793", "23240658086840781933877818246403887585", "201253792128560487628401689301035463390", "111972060440901275913782053734781445741", "18222140305972089824098412241351434356", "32125225161291432812956153470701420920", "57581396896212069165074832684053318", "208334880134461062258048259332876522588", "335719502503452934305733877175439545402"], "threshold":0.9}, "id":"ASB-A-498162425-9a0f9afa", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"}}, {"deprecated":false, "digest":{"line_hashes":["1100763490978900655977357542853925510", "72091371309718869626626379837267393995", "152394261834607310285061401703697682690", "210230673607883471461907870469137126295", "267568362834455264152958559695681847467", "215313087084148692347610311166949092183", "246545167393193003737354957596654680686", "143422731397175817538758261599054254363", "21531143555844241432954736306802070820", "182392382368182097773645173322066821844", "239291362901066692616822431778493185335", "251366106983980160593371955470456156619", "47035882787231076478780517658649637535", "80659424451340184871579571861468650791", "310876773204323529297570774264739999671", "121839435819458235429397691696524883958", "265993480603852303090348618825881296872"], "threshold":0.9}, "id":"ASB-A-498162425-b48cee00", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"167558740467392864671434861872647200056", "length":1144}, "id":"ASB-A-498162425-bbfd0e68", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkWhetherCallingAppHasAccess"}}, {"deprecated":false, "digest":{"function_hash":"171765556727096727770276995115664959155", "length":356}, "id":"ASB-A-498162425-dd71702a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFilenameValidInExternalPackage"}}]}}, {"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["1100763490978900655977357542853925510", "72091371309718869626626379837267393995", "152394261834607310285061401703697682690", "210230673607883471461907870469137126295", "267568362834455264152958559695681847467", "215313087084148692347610311166949092183", "246545167393193003737354957596654680686", "143422731397175817538758261599054254363", "21531143555844241432954736306802070820", "182392382368182097773645173322066821844", "239291362901066692616822431778493185335", "251366106983980160593371955470456156619", "47035882787231076478780517658649637535", "80659424451340184871579571861468650791", "310876773204323529297570774264739999671", "121839435819458235429397691696524883958", "265993480603852303090348618825881296872"], "threshold":0.9}, "id":"ASB-A-498162425-034d61f2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"110967783211825894487055299495850689562", "length":910}, "id":"ASB-A-498162425-16ad0d90", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkDownloadedFilePath"}}, {"deprecated":false, "digest":{"line_hashes":["319968131732966878335492432862009169039", "283905761946507337867765072941970407225", "144766987770461267759917616369168644120", "50531897741651730885254972958441239122", "100814637638357964843970911157544461125", "51178454138944312132638746331043883210", "125115819644900896497385861423049676731", "257277134168835120580914606770657116890", "32795350332005576687995209872446582328", "240716560623469246503577962139165236152", "316130655847659994863251917282559811859", "109891341816880214090045361456840921497", "191044219971436116430067743241388972838", "162643476413108576964635341222724178040", "319668309734731209647266839764277727446", "137798806865731016589499144751276129178", "51981579517093587943744092330794157943", "265220291524012738659067870049771226337", "336219000401742417169987769310582193158", "165524586795455585860520982098764462105", "198259181563682615350334727860780633941", "201649539840690409682269798813421944661", "101326853097531343093972391082846738573", "295709304328089267200943636095186664422", "130041268595290425913739191158205504832", "269767468591660554132272255809471483386", "210167189556760666792958444910823800323", "25705371495313585068333487775503027268", "241864328414844809803604555230962056764", "108587633537507210242609878158511307392", "128797082458499271042020098054893634524", "206595471633514484748500303191320843304", "166337675263112384633214305208700952451", "110310661001557351899419952197453418926", "242689469119797169232603993138221452973", "115813513611785974948206868770592190732", "241616794146644658069325258645048770872", "265327089288429881176664649899688069294", "210364460122909675900110413275950559082", "226764922388754556828136901533156579282", "77767875361646141766523022975364985554", "255199986323501933762178996818293922826", "64144684215165488984949050918871853401", "86556705182283327999759493629576323362", "39093664468793664434394571349121065304", "96354860121479526837624707418952346801", "303261713221302820178984988521075568922", "136193735816866371423231754184253908406", "290277950795669339425373439792203756513", "536342708549862246255287749372356259", "173213216655434887255702715122605034611", "30882435790888815960000715321992543333", "277442550098369274042332338464579723480", "35731442600192499278284464036798403322", "154978508412848911859447069425734388038", "60436304062155373351573421492785660455", "169813889243416086375795945721364805234", "333647114227027196994006207182456886735", "253388394112225191698069999813240660875", "207627754695244550627147867965141950202", "301026251386690289143905678199733866909", "139373199368672459398471529879729191420", "50234125652040558252367006909075626633", "283070460750551119341580442036188056431", "179465081222007845257627473901042115916", "244412650042084315859701740562716354949", "239970075664917634686077128232748312540", "252545784538556659435161403674235011058", "275342365689127315746539714937377490430", "309618802140636889772787913916612181017", "336432534207396294580097801281934225545", "2677754783487083420207765126854370181", "39724400325374756756251823420936990649", "26928668486169766095975640115014881125", "241006191457185296232536050932186325279", "128610881375541658409815341349168026501", "55211809314445144230532090703814635263", "258571426977471877897008773593995768825", "198160419149913045260801041192177611263", "41937874059107375334105613040290750065", "31976645933064633274006855207865272793", "23240658086840781933877818246403887585", "201253792128560487628401689301035463390", "111972060440901275913782053734781445741", "18222140305972089824098412241351434356", "32125225161291432812956153470701420920", "57581396896212069165074832684053318", "208334880134461062258048259332876522588", "335719502503452934305733877175439545402"], "threshold":0.9}, "id":"ASB-A-498162425-303f7a52", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"171765556727096727770276995115664959155", "length":356}, "id":"ASB-A-498162425-3652cdf1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFilenameValidInExternalPackage"}}, {"deprecated":false, "digest":{"function_hash":"2570707937030247635270512663885589139", "length":1188}, "id":"ASB-A-498162425-a9e9ef16", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"logVerboseOpenFileInfo"}}, {"deprecated":false, "digest":{"function_hash":"191790017511253499521390517376373064771", "length":851}, "id":"ASB-A-498162425-c353cc7c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"checkDestinationFilePathRestrictions"}}, {"deprecated":false, "digest":{"function_hash":"167558740467392864671434861872647200056", "length":1144}, "id":"ASB-A-498162425-fe30bb04", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkWhetherCallingAppHasAccess"}}, {"deprecated":false, "digest":{"function_hash":"126846526632470062071384680087957547226", "length":2850}, "id":"ASB-A-498162425-fe5cfb7b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkInsertPermissions"}}]}}, {"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"110967783211825894487055299495850689562", "length":910}, "id":"ASB-A-498162425-0209d149", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkDownloadedFilePath"}}, {"deprecated":false, "digest":{"function_hash":"191790017511253499521390517376373064771", "length":851}, "id":"ASB-A-498162425-2e8229b6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"checkDestinationFilePathRestrictions"}}, {"deprecated":false, "digest":{"line_hashes":["319968131732966878335492432862009169039", "283905761946507337867765072941970407225", "144766987770461267759917616369168644120", "50531897741651730885254972958441239122", "100814637638357964843970911157544461125", "51178454138944312132638746331043883210", "125115819644900896497385861423049676731", "257277134168835120580914606770657116890", "32795350332005576687995209872446582328", "240716560623469246503577962139165236152", "316130655847659994863251917282559811859", "109891341816880214090045361456840921497", "191044219971436116430067743241388972838", "162643476413108576964635341222724178040", "319668309734731209647266839764277727446", "137798806865731016589499144751276129178", "51981579517093587943744092330794157943", "265220291524012738659067870049771226337", "336219000401742417169987769310582193158", "165524586795455585860520982098764462105", "198259181563682615350334727860780633941", "201649539840690409682269798813421944661", "101326853097531343093972391082846738573", "295709304328089267200943636095186664422", "130041268595290425913739191158205504832", "269767468591660554132272255809471483386", "210167189556760666792958444910823800323", "25705371495313585068333487775503027268", "241864328414844809803604555230962056764", "108587633537507210242609878158511307392", "128797082458499271042020098054893634524", "206595471633514484748500303191320843304", "166337675263112384633214305208700952451", "110310661001557351899419952197453418926", "242689469119797169232603993138221452973", "115813513611785974948206868770592190732", "241616794146644658069325258645048770872", "265327089288429881176664649899688069294", "210364460122909675900110413275950559082", "226764922388754556828136901533156579282", "77767875361646141766523022975364985554", "255199986323501933762178996818293922826", "64144684215165488984949050918871853401", "86556705182283327999759493629576323362", "39093664468793664434394571349121065304", "96354860121479526837624707418952346801", "303261713221302820178984988521075568922", "136193735816866371423231754184253908406", "290277950795669339425373439792203756513", "536342708549862246255287749372356259", "173213216655434887255702715122605034611", "30882435790888815960000715321992543333", "277442550098369274042332338464579723480", "35731442600192499278284464036798403322", "154978508412848911859447069425734388038", "60436304062155373351573421492785660455", "169813889243416086375795945721364805234", "333647114227027196994006207182456886735", "253388394112225191698069999813240660875", "207627754695244550627147867965141950202", "301026251386690289143905678199733866909", "139373199368672459398471529879729191420", "50234125652040558252367006909075626633", "283070460750551119341580442036188056431", "179465081222007845257627473901042115916", "244412650042084315859701740562716354949", "239970075664917634686077128232748312540", "252545784538556659435161403674235011058", "275342365689127315746539714937377490430", "309618802140636889772787913916612181017", "336432534207396294580097801281934225545", "2677754783487083420207765126854370181", "39724400325374756756251823420936990649", "26928668486169766095975640115014881125", "241006191457185296232536050932186325279", "128610881375541658409815341349168026501", "55211809314445144230532090703814635263", "258571426977471877897008773593995768825", "198160419149913045260801041192177611263", "41937874059107375334105613040290750065", "31976645933064633274006855207865272793", "23240658086840781933877818246403887585", "201253792128560487628401689301035463390", "111972060440901275913782053734781445741", "18222140305972089824098412241351434356", "32125225161291432812956153470701420920", "57581396896212069165074832684053318", "208334880134461062258048259332876522588", "335719502503452934305733877175439545402"], "threshold":0.9}, "id":"ASB-A-498162425-40af1dc5", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"2570707937030247635270512663885589139", "length":1188}, "id":"ASB-A-498162425-601d5ded", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"logVerboseOpenFileInfo"}}, {"deprecated":false, "digest":{"line_hashes":["1100763490978900655977357542853925510", "72091371309718869626626379837267393995", "152394261834607310285061401703697682690", "210230673607883471461907870469137126295", "267568362834455264152958559695681847467", "215313087084148692347610311166949092183", "246545167393193003737354957596654680686", "143422731397175817538758261599054254363", "21531143555844241432954736306802070820", "182392382368182097773645173322066821844", "239291362901066692616822431778493185335", "251366106983980160593371955470456156619", "47035882787231076478780517658649637535", "80659424451340184871579571861468650791", "310876773204323529297570774264739999671", "121839435819458235429397691696524883958", "265993480603852303090348618825881296872"], "threshold":0.9}, "id":"ASB-A-498162425-7bb1c3c8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"167558740467392864671434861872647200056", "length":1144}, "id":"ASB-A-498162425-8716f8af", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkWhetherCallingAppHasAccess"}}, {"deprecated":false, "digest":{"function_hash":"126846526632470062071384680087957547226", "length":2850}, "id":"ASB-A-498162425-bbd512fa", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkInsertPermissions"}}, {"deprecated":false, "digest":{"function_hash":"171765556727096727770276995115664959155", "length":356}, "id":"ASB-A-498162425-c32ac436", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFilenameValidInExternalPackage"}}]}}, {"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["1100763490978900655977357542853925510", "72091371309718869626626379837267393995", "152394261834607310285061401703697682690", "210230673607883471461907870469137126295", "267568362834455264152958559695681847467", "215313087084148692347610311166949092183", "246545167393193003737354957596654680686", "143422731397175817538758261599054254363", "21531143555844241432954736306802070820", "182392382368182097773645173322066821844", "239291362901066692616822431778493185335", "251366106983980160593371955470456156619", "47035882787231076478780517658649637535", "80659424451340184871579571861468650791", "310876773204323529297570774264739999671", "121839435819458235429397691696524883958", "265993480603852303090348618825881296872"], "threshold":0.9}, "id":"ASB-A-498162425-4cc6dbd8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"167558740467392864671434861872647200056", "length":1144}, "id":"ASB-A-498162425-5398a2bd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkWhetherCallingAppHasAccess"}}, {"deprecated":false, "digest":{"function_hash":"191790017511253499521390517376373064771", "length":851}, "id":"ASB-A-498162425-5b43e3fc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"checkDestinationFilePathRestrictions"}}, {"deprecated":false, "digest":{"function_hash":"2570707937030247635270512663885589139", "length":1188}, "id":"ASB-A-498162425-66b7caad", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"logVerboseOpenFileInfo"}}, {"deprecated":false, "digest":{"function_hash":"110967783211825894487055299495850689562", "length":910}, "id":"ASB-A-498162425-8b038ad8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkDownloadedFilePath"}}, {"deprecated":false, "digest":{"function_hash":"171765556727096727770276995115664959155", "length":356}, "id":"ASB-A-498162425-a39253a3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFilenameValidInExternalPackage"}}, {"deprecated":false, "digest":{"line_hashes":["319968131732966878335492432862009169039", "283905761946507337867765072941970407225", "144766987770461267759917616369168644120", "50531897741651730885254972958441239122", "100814637638357964843970911157544461125", "51178454138944312132638746331043883210", "125115819644900896497385861423049676731", "257277134168835120580914606770657116890", "32795350332005576687995209872446582328", "240716560623469246503577962139165236152", "316130655847659994863251917282559811859", "109891341816880214090045361456840921497", "191044219971436116430067743241388972838", "162643476413108576964635341222724178040", "319668309734731209647266839764277727446", "137798806865731016589499144751276129178", "51981579517093587943744092330794157943", "265220291524012738659067870049771226337", "336219000401742417169987769310582193158", "165524586795455585860520982098764462105", "198259181563682615350334727860780633941", "201649539840690409682269798813421944661", "101326853097531343093972391082846738573", "295709304328089267200943636095186664422", "130041268595290425913739191158205504832", "269767468591660554132272255809471483386", "210167189556760666792958444910823800323", "25705371495313585068333487775503027268", "241864328414844809803604555230962056764", "108587633537507210242609878158511307392", "128797082458499271042020098054893634524", "206595471633514484748500303191320843304", "166337675263112384633214305208700952451", "110310661001557351899419952197453418926", "242689469119797169232603993138221452973", "115813513611785974948206868770592190732", "241616794146644658069325258645048770872", "265327089288429881176664649899688069294", "210364460122909675900110413275950559082", "226764922388754556828136901533156579282", "77767875361646141766523022975364985554", "255199986323501933762178996818293922826", "64144684215165488984949050918871853401", "86556705182283327999759493629576323362", "39093664468793664434394571349121065304", "96354860121479526837624707418952346801", "303261713221302820178984988521075568922", "136193735816866371423231754184253908406", "290277950795669339425373439792203756513", "536342708549862246255287749372356259", "173213216655434887255702715122605034611", "30882435790888815960000715321992543333", "277442550098369274042332338464579723480", "35731442600192499278284464036798403322", "154978508412848911859447069425734388038", "60436304062155373351573421492785660455", "169813889243416086375795945721364805234", "333647114227027196994006207182456886735", "253388394112225191698069999813240660875", "207627754695244550627147867965141950202", "301026251386690289143905678199733866909", "139373199368672459398471529879729191420", "50234125652040558252367006909075626633", "283070460750551119341580442036188056431", "179465081222007845257627473901042115916", "244412650042084315859701740562716354949", "239970075664917634686077128232748312540", "252545784538556659435161403674235011058", "275342365689127315746539714937377490430", "309618802140636889772787913916612181017", "336432534207396294580097801281934225545", "2677754783487083420207765126854370181", "39724400325374756756251823420936990649", "26928668486169766095975640115014881125", "241006191457185296232536050932186325279", "128610881375541658409815341349168026501", "55211809314445144230532090703814635263", "258571426977471877897008773593995768825", "198160419149913045260801041192177611263", "41937874059107375334105613040290750065", "31976645933064633274006855207865272793", "23240658086840781933877818246403887585", "201253792128560487628401689301035463390", "111972060440901275913782053734781445741", "18222140305972089824098412241351434356", "32125225161291432812956153470701420920", "57581396896212069165074832684053318", "208334880134461062258048259332876522588", "335719502503452934305733877175439545402"], "threshold":0.9}, "id":"ASB-A-498162425-a64a577f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"126846526632470062071384680087957547226", "length":2850}, "id":"ASB-A-498162425-b8cb3765", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkInsertPermissions"}}]}}, {"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["1100763490978900655977357542853925510", "72091371309718869626626379837267393995", "152394261834607310285061401703697682690", "210230673607883471461907870469137126295", "267568362834455264152958559695681847467", "215313087084148692347610311166949092183", "246545167393193003737354957596654680686", "143422731397175817538758261599054254363", "21531143555844241432954736306802070820", "182392382368182097773645173322066821844", "239291362901066692616822431778493185335", "251366106983980160593371955470456156619", "47035882787231076478780517658649637535", "80659424451340184871579571861468650791", "310876773204323529297570774264739999671", "121839435819458235429397691696524883958", "265993480603852303090348618825881296872"], "threshold":0.9}, "id":"ASB-A-498162425-2e0574ca", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"191790017511253499521390517376373064771", "length":851}, "id":"ASB-A-498162425-44780db1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"checkDestinationFilePathRestrictions"}}, {"deprecated":false, "digest":{"function_hash":"110967783211825894487055299495850689562", "length":910}, "id":"ASB-A-498162425-49cf6059", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkDownloadedFilePath"}}, {"deprecated":false, "digest":{"line_hashes":["319968131732966878335492432862009169039", "283905761946507337867765072941970407225", "144766987770461267759917616369168644120", "50531897741651730885254972958441239122", "100814637638357964843970911157544461125", "51178454138944312132638746331043883210", "125115819644900896497385861423049676731", "257277134168835120580914606770657116890", "32795350332005576687995209872446582328", "240716560623469246503577962139165236152", "316130655847659994863251917282559811859", "109891341816880214090045361456840921497", "191044219971436116430067743241388972838", "162643476413108576964635341222724178040", "319668309734731209647266839764277727446", "137798806865731016589499144751276129178", "51981579517093587943744092330794157943", "265220291524012738659067870049771226337", "336219000401742417169987769310582193158", "165524586795455585860520982098764462105", "198259181563682615350334727860780633941", "201649539840690409682269798813421944661", "101326853097531343093972391082846738573", "295709304328089267200943636095186664422", "130041268595290425913739191158205504832", "269767468591660554132272255809471483386", "210167189556760666792958444910823800323", "25705371495313585068333487775503027268", "241864328414844809803604555230962056764", "108587633537507210242609878158511307392", "128797082458499271042020098054893634524", "206595471633514484748500303191320843304", "166337675263112384633214305208700952451", "110310661001557351899419952197453418926", "242689469119797169232603993138221452973", "115813513611785974948206868770592190732", "241616794146644658069325258645048770872", "265327089288429881176664649899688069294", "210364460122909675900110413275950559082", "226764922388754556828136901533156579282", "77767875361646141766523022975364985554", "255199986323501933762178996818293922826", "64144684215165488984949050918871853401", "86556705182283327999759493629576323362", "39093664468793664434394571349121065304", "96354860121479526837624707418952346801", "303261713221302820178984988521075568922", "136193735816866371423231754184253908406", "290277950795669339425373439792203756513", "536342708549862246255287749372356259", "173213216655434887255702715122605034611", "30882435790888815960000715321992543333", "277442550098369274042332338464579723480", "35731442600192499278284464036798403322", "154978508412848911859447069425734388038", "60436304062155373351573421492785660455", "169813889243416086375795945721364805234", "333647114227027196994006207182456886735", "253388394112225191698069999813240660875", "207627754695244550627147867965141950202", "301026251386690289143905678199733866909", "139373199368672459398471529879729191420", "50234125652040558252367006909075626633", "283070460750551119341580442036188056431", "179465081222007845257627473901042115916", "244412650042084315859701740562716354949", "239970075664917634686077128232748312540", "252545784538556659435161403674235011058", "275342365689127315746539714937377490430", "309618802140636889772787913916612181017", "336432534207396294580097801281934225545", "2677754783487083420207765126854370181", "39724400325374756756251823420936990649", "26928668486169766095975640115014881125", "241006191457185296232536050932186325279", "128610881375541658409815341349168026501", "55211809314445144230532090703814635263", "258571426977471877897008773593995768825", "198160419149913045260801041192177611263", "41937874059107375334105613040290750065", "31976645933064633274006855207865272793", "23240658086840781933877818246403887585", "201253792128560487628401689301035463390", "111972060440901275913782053734781445741", "18222140305972089824098412241351434356", "32125225161291432812956153470701420920", "57581396896212069165074832684053318", "208334880134461062258048259332876522588", "335719502503452934305733877175439545402"], "threshold":0.9}, "id":"ASB-A-498162425-65043287", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"171765556727096727770276995115664959155", "length":356}, "id":"ASB-A-498162425-677bd0f1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFilenameValidInExternalPackage"}}, {"deprecated":false, "digest":{"function_hash":"126846526632470062071384680087957547226", "length":2850}, "id":"ASB-A-498162425-87a1c6bd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkInsertPermissions"}}, {"deprecated":false, "digest":{"function_hash":"2570707937030247635270512663885589139", "length":1188}, "id":"ASB-A-498162425-c6fe2441", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"logVerboseOpenFileInfo"}}, {"deprecated":false, "digest":{"function_hash":"167558740467392864671434861872647200056", "length":1144}, "id":"ASB-A-498162425-cbcb92b1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkWhetherCallingAppHasAccess"}}]}}, {"package":{"name":"platform/packages/providers/DownloadProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["319968131732966878335492432862009169039", "283905761946507337867765072941970407225", "144766987770461267759917616369168644120", "50531897741651730885254972958441239122", "100814637638357964843970911157544461125", "51178454138944312132638746331043883210", "125115819644900896497385861423049676731", "257277134168835120580914606770657116890", "32795350332005576687995209872446582328", "240716560623469246503577962139165236152", "316130655847659994863251917282559811859", "109891341816880214090045361456840921497", "191044219971436116430067743241388972838", "162643476413108576964635341222724178040", "319668309734731209647266839764277727446", "137798806865731016589499144751276129178", "51981579517093587943744092330794157943", "265220291524012738659067870049771226337", "336219000401742417169987769310582193158", "165524586795455585860520982098764462105", "198259181563682615350334727860780633941", "201649539840690409682269798813421944661", "101326853097531343093972391082846738573", "295709304328089267200943636095186664422", "130041268595290425913739191158205504832", "269767468591660554132272255809471483386", "210167189556760666792958444910823800323", "25705371495313585068333487775503027268", "241864328414844809803604555230962056764", "108587633537507210242609878158511307392", "128797082458499271042020098054893634524", "206595471633514484748500303191320843304", "166337675263112384633214305208700952451", "110310661001557351899419952197453418926", "242689469119797169232603993138221452973", "115813513611785974948206868770592190732", "241616794146644658069325258645048770872", "265327089288429881176664649899688069294", "210364460122909675900110413275950559082", "226764922388754556828136901533156579282", "77767875361646141766523022975364985554", "255199986323501933762178996818293922826", "64144684215165488984949050918871853401", "86556705182283327999759493629576323362", "39093664468793664434394571349121065304", "96354860121479526837624707418952346801", "303261713221302820178984988521075568922", "136193735816866371423231754184253908406", "290277950795669339425373439792203756513", "536342708549862246255287749372356259", "173213216655434887255702715122605034611", "30882435790888815960000715321992543333", "277442550098369274042332338464579723480", "35731442600192499278284464036798403322", "154978508412848911859447069425734388038", "60436304062155373351573421492785660455", "169813889243416086375795945721364805234", "333647114227027196994006207182456886735", "253388394112225191698069999813240660875", "207627754695244550627147867965141950202", "301026251386690289143905678199733866909", "139373199368672459398471529879729191420", "50234125652040558252367006909075626633", "283070460750551119341580442036188056431", "179465081222007845257627473901042115916", "244412650042084315859701740562716354949", "239970075664917634686077128232748312540", "252545784538556659435161403674235011058", "275342365689127315746539714937377490430", "309618802140636889772787913916612181017", "336432534207396294580097801281934225545", "2677754783487083420207765126854370181", "39724400325374756756251823420936990649", "26928668486169766095975640115014881125", "241006191457185296232536050932186325279", "128610881375541658409815341349168026501", "55211809314445144230532090703814635263", "258571426977471877897008773593995768825", "198160419149913045260801041192177611263", "41937874059107375334105613040290750065", "31976645933064633274006855207865272793", "23240658086840781933877818246403887585", "201253792128560487628401689301035463390", "111972060440901275913782053734781445741", "18222140305972089824098412241351434356", "32125225161291432812956153470701420920", "57581396896212069165074832684053318", "208334880134461062258048259332876522588", "335719502503452934305733877175439545402"], "threshold":0.9}, "id":"ASB-A-498162425-1389ec86", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"}}, {"deprecated":false, "digest":{"function_hash":"171765556727096727770276995115664959155", "length":356}, "id":"ASB-A-498162425-17b2935f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"isFilenameValidInExternalPackage"}}, {"deprecated":false, "digest":{"line_hashes":["1100763490978900655977357542853925510", "72091371309718869626626379837267393995", "152394261834607310285061401703697682690", "210230673607883471461907870469137126295", "267568362834455264152958559695681847467", "215313087084148692347610311166949092183", "246545167393193003737354957596654680686", "143422731397175817538758261599054254363", "21531143555844241432954736306802070820", "182392382368182097773645173322066821844", "239291362901066692616822431778493185335", "251366106983980160593371955470456156619", "47035882787231076478780517658649637535", "80659424451340184871579571861468650791", "310876773204323529297570774264739999671", "121839435819458235429397691696524883958", "265993480603852303090348618825881296872"], "threshold":0.9}, "id":"ASB-A-498162425-1948d48d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb", "target":{"file":"src/com/android/providers/downloads/Helpers.java"}}, {"deprecated":false, "digest":{"function_hash":"126846526632470062071384680087957547226", "length":2850}, "id":"ASB-A-498162425-194bae3b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkInsertPermissions"}}, {"deprecated":false, "digest":{"function_hash":"110967783211825894487055299495850689562", "length":910}, "id":"ASB-A-498162425-5d6a6b00", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkDownloadedFilePath"}}, {"deprecated":false, "digest":{"function_hash":"2570707937030247635270512663885589139", "length":1188}, "id":"ASB-A-498162425-6b8a4386", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"logVerboseOpenFileInfo"}}, {"deprecated":false, "digest":{"function_hash":"167558740467392864671434861872647200056", "length":1144}, "id":"ASB-A-498162425-992dcf1c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb", "target":{"file":"src/com/android/providers/downloads/DownloadProvider.java", "function":"checkWhetherCallingAppHasAccess"}}, {"deprecated":false, "digest":{"function_hash":"191790017511253499521390517376373064771", "length":851}, "id":"ASB-A-498162425-c9563607", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb", "target":{"file":"src/com/android/providers/downloads/Helpers.java", "function":"checkDestinationFilePathRestrictions"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}