{"id":"ASB-A-498588487", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-10T15:43:18.983809180Z", "aliases":["CVE-2026-28660", "A-498588487"], "details":"In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-09-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["66135735751788773994729551311076250056", "17910172518135811976296703531016978916", "287774087475138469326021921073413644420", "223121719778069458825802352126035715283", "283945616943664523103650871158911531903", "239834099930053202613292695489726444047", "18168249603378674861772506099571325668", "154704893789851052213470597858868812451", "243659821465520410654506795647150838431", "135603085226033825165391651123515321353", "168908619102541483615172151608887724822", "75904538119850232626577435422625396477"], "threshold":0.9}, "id":"ASB-A-498588487-167071d3", "match_only_versions":["17-next"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"}}, {"deprecated":false, "digest":{"function_hash":"194281981762645415111628158575904127208", "length":624}, "id":"ASB-A-498588487-5d553d66", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2", "target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java", "function":"getAllSessions"}}, {"deprecated":false, "digest":{"function_hash":"208991343523786115795661376446720704144", "length":632}, "id":"ASB-A-498588487-61c28e27", "match_only_versions":["17-next"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"getAllSessions"}}, {"deprecated":false, "digest":{"line_hashes":["95570531676616451031617073987169738739", "85931253098282894893778629248184580582", "60347845863705867768217320182539210410", "291330430072008320027449604326519765787"], "threshold":0.9}, "id":"ASB-A-498588487-96bf12b2", "match_only_versions":["17-next"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2", "target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-09-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["95570531676616451031617073987169738739", "85931253098282894893778629248184580582", "60347845863705867768217320182539210410", "291330430072008320027449604326519765787"], "threshold":0.9}, "id":"ASB-A-498588487-1badc3df", "match_only_versions":["15"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5", "target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"}}, {"deprecated":false, "digest":{"function_hash":"288123369583420181910922017617663674079", "length":583}, "id":"ASB-A-498588487-afef89e1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5", "target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java", "function":"getAllSessions"}}, {"deprecated":false, "digest":{"function_hash":"208991343523786115795661376446720704144", "length":632}, "id":"ASB-A-498588487-b867d9e6", "match_only_versions":["15"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"getAllSessions"}}, {"deprecated":false, "digest":{"line_hashes":["66135735751788773994729551311076250056", "17910172518135811976296703531016978916", "287774087475138469326021921073413644420", "223121719778069458825802352126035715283", "283945616943664523103650871158911531903", "239834099930053202613292695489726444047", "18168249603378674861772506099571325668", "154704893789851052213470597858868812451", "243659821465520410654506795647150838431", "135603085226033825165391651123515321353", "168908619102541483615172151608887724822", "75904538119850232626577435422625396477"], "threshold":0.9}, "id":"ASB-A-498588487-f8f17551", "match_only_versions":["15"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-09-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"194281981762645415111628158575904127208", "length":624}, "id":"ASB-A-498588487-54889ab9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9", "target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java", "function":"getAllSessions"}}, {"deprecated":false, "digest":{"line_hashes":["95570531676616451031617073987169738739", "85931253098282894893778629248184580582", "60347845863705867768217320182539210410", "291330430072008320027449604326519765787"], "threshold":0.9}, "id":"ASB-A-498588487-72c9d8ec", "match_only_versions":["16"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9", "target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"}}, {"deprecated":false, "digest":{"function_hash":"208991343523786115795661376446720704144", "length":632}, "id":"ASB-A-498588487-b3871924", "match_only_versions":["16"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"getAllSessions"}}, {"deprecated":false, "digest":{"line_hashes":["66135735751788773994729551311076250056", "17910172518135811976296703531016978916", "287774087475138469326021921073413644420", "223121719778069458825802352126035715283", "283945616943664523103650871158911531903", "239834099930053202613292695489726444047", "18168249603378674861772506099571325668", "154704893789851052213470597858868812451", "243659821465520410654506795647150838431", "135603085226033825165391651123515321353", "168908619102541483615172151608887724822", "75904538119850232626577435422625396477"], "threshold":0.9}, "id":"ASB-A-498588487-beed7251", "match_only_versions":["16"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-09-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"208991343523786115795661376446720704144", "length":632}, "id":"ASB-A-498588487-7ac6ce73", "match_only_versions":["16-qpr2"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"getAllSessions"}}, {"deprecated":false, "digest":{"function_hash":"194281981762645415111628158575904127208", "length":624}, "id":"ASB-A-498588487-9ce2d559", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81", "target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java", "function":"getAllSessions"}}, {"deprecated":false, "digest":{"line_hashes":["66135735751788773994729551311076250056", "17910172518135811976296703531016978916", "287774087475138469326021921073413644420", "223121719778069458825802352126035715283", "283945616943664523103650871158911531903", "239834099930053202613292695489726444047", "18168249603378674861772506099571325668", "154704893789851052213470597858868812451", "243659821465520410654506795647150838431", "135603085226033825165391651123515321353", "168908619102541483615172151608887724822", "75904538119850232626577435422625396477"], "threshold":0.9}, "id":"ASB-A-498588487-c3720f1a", "match_only_versions":["16-qpr2"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"}}, {"deprecated":false, "digest":{"line_hashes":["95570531676616451031617073987169738739", "85931253098282894893778629248184580582", "60347845863705867768217320182539210410", "291330430072008320027449604326519765787"], "threshold":0.9}, "id":"ASB-A-498588487-ed73b38a", "match_only_versions":["16-qpr2"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81", "target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-09-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["95570531676616451031617073987169738739", "85931253098282894893778629248184580582", "60347845863705867768217320182539210410", "291330430072008320027449604326519765787"], "threshold":0.9}, "id":"ASB-A-498588487-411c5701", "match_only_versions":["17"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59", "target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"}}, {"deprecated":false, "digest":{"line_hashes":["66135735751788773994729551311076250056", "17910172518135811976296703531016978916", "287774087475138469326021921073413644420", "223121719778069458825802352126035715283", "283945616943664523103650871158911531903", "239834099930053202613292695489726444047", "18168249603378674861772506099571325668", "154704893789851052213470597858868812451", "243659821465520410654506795647150838431", "135603085226033825165391651123515321353", "168908619102541483615172151608887724822", "75904538119850232626577435422625396477"], "threshold":0.9}, "id":"ASB-A-498588487-4f041cbb", "match_only_versions":["17"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"}}, {"deprecated":false, "digest":{"function_hash":"208991343523786115795661376446720704144", "length":632}, "id":"ASB-A-498588487-eb88d8cd", "match_only_versions":["17"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59", "target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java", "function":"getAllSessions"}}, {"deprecated":false, "digest":{"function_hash":"194281981762645415111628158575904127208", "length":624}, "id":"ASB-A-498588487-ebb6ebb3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59", "target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java", "function":"getAllSessions"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}]}