{"id":"ASB-A-444443479","details":"In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-444443479","CVE-2026-28632"],"modified":"2026-11-02T17:11:11.634128760Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/packages/modules/IntentResolver","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"length":270,"function_hash":"102404312414944373181879991317112281805"},"id":"ASB-A-444443479-39b15263","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85","target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java","function":"hasCrossProfileIntents"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85","target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java"},"deprecated":false,"digest":{"line_hashes":["261399217343972684695727895592631866635","185638856415472250777403511453353337148","174678765513168081938800059028083605063","180678304454666937121745213922932054852","173826632493730944037461231683334047495","322591720204169525179012679373892722358","155363556186907753657789969562469383828","31487669892833121873421725925486421445","130613886475893167786377265707477092117"],"threshold":0.9},"id":"ASB-A-444443479-3d1d9790"},{"digest":{"length":1094,"function_hash":"252163358443479741004470399610878240797"},"id":"ASB-A-444443479-7852f8a8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85","target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java","function":"createMultiProfilePagerAdapter"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85","target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java"},"deprecated":false,"digest":{"line_hashes":["50827615389172193476167804578924489006","179372653182841392501384529015731435115","43108357634073333283345006991600138253","268215632334478793499630131869279656265","191215072427211709999720615158946363704","186438624328606573299324073958032356520","280770218486435815588299531523209973782","228202319285620297987594883753643678047","231615605790565961966554210325086555827","10788890208269827094398933855377448601","337486458313766494693156938498009278182","224802029678367421169334237047299560192","64215130863152011613952937353327667777","84484727654404652031316774843918451666","107437320668624815791554135780661049909","170409662879207657202973769363957741324","229548529139284394599763677225932039967","162848783552875215724231917807762980300","322956742249993162742432605305541351385"],"threshold":0.9},"id":"ASB-A-444443479-840a6138","signature_type":"Line"},{"target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java","function":"createCrossProfileIntentsChecker"},"deprecated":false,"digest":{"length":58,"function_hash":"293273185477494904553227875292076217164"},"id":"ASB-A-444443479-84af69d0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85"}],"fixes":["https://android.googlesource.com/platform/packages/modules/IntentResolver/+/904482cc192c31fab2e9f42d84d6c1f39cc11e85"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-444443479.json"}},{"package":{"name":"platform/packages/modules/IntentResolver","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7","target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["261399217343972684695727895592631866635","185638856415472250777403511453353337148","174678765513168081938800059028083605063","180678304454666937121745213922932054852","173826632493730944037461231683334047495","322591720204169525179012679373892722358","155363556186907753657789969562469383828","31487669892833121873421725925486421445","130613886475893167786377265707477092117"]},"id":"ASB-A-444443479-19294e20","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7","target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java","function":"hasCrossProfileIntents"},"deprecated":false,"digest":{"length":270,"function_hash":"102404312414944373181879991317112281805"},"id":"ASB-A-444443479-24acae19"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7","target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java","function":"createMultiProfilePagerAdapter"},"deprecated":false,"digest":{"function_hash":"129649157783174540752816730278599423349","length":1176},"id":"ASB-A-444443479-36841f9a"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7","target":{"function":"createCrossProfileIntentsChecker","file":"java/src/com/android/intentresolver/ChooserActivity.java"},"deprecated":false,"digest":{"function_hash":"293273185477494904553227875292076217164","length":58},"id":"ASB-A-444443479-d8580797","signature_type":"Function"},{"digest":{"line_hashes":["100221638589423083594012080875383394399","37609028171920469997899396064862303440","44612873956806874334189150001501274772","236007651643712088128125245832366472509","314389838404869486439439673753433018505","153938270870071004047384234489600603872","280770218486435815588299531523209973782","228202319285620297987594883753643678047","231615605790565961966554210325086555827","10788890208269827094398933855377448601","337486458313766494693156938498009278182","224802029678367421169334237047299560192","64215130863152011613952937353327667777","84484727654404652031316774843918451666","107437320668624815791554135780661049909","170409662879207657202973769363957741324","305640153593329326034246597603890928632","29439480183015998907126345156143631982","322956742249993162742432605305541351385"],"threshold":0.9},"id":"ASB-A-444443479-fe6b7edb","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/cef0a5fa721630a097c17b426dd0e70a0e1034c7","target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-444443479.json"}},{"package":{"name":"platform/packages/modules/IntentResolver","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100","target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java"},"deprecated":false,"digest":{"line_hashes":["147577759490990865139685944544695572481","175385664384916817133776395483059229838","294553773904660010724504629577352706116","184282470000757737825352594435403856561","191215072427211709999720615158946363704","186438624328606573299324073958032356520","280770218486435815588299531523209973782","228202319285620297987594883753643678047","231615605790565961966554210325086555827","10788890208269827094398933855377448601","337486458313766494693156938498009278182","224802029678367421169334237047299560192","64215130863152011613952937353327667777","84484727654404652031316774843918451666","107437320668624815791554135780661049909","170409662879207657202973769363957741324","305640153593329326034246597603890928632","29439480183015998907126345156143631982","322956742249993162742432605305541351385"],"threshold":0.9},"id":"ASB-A-444443479-2799a807","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100","target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java"},"deprecated":false,"digest":{"line_hashes":["261399217343972684695727895592631866635","185638856415472250777403511453353337148","174678765513168081938800059028083605063","180678304454666937121745213922932054852","173826632493730944037461231683334047495","322591720204169525179012679373892722358","155363556186907753657789969562469383828","31487669892833121873421725925486421445","130613886475893167786377265707477092117"],"threshold":0.9},"id":"ASB-A-444443479-4f0c359f","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100","target":{"function":"createCrossProfileIntentsChecker","file":"java/src/com/android/intentresolver/ChooserActivity.java"},"deprecated":false,"digest":{"length":58,"function_hash":"293273185477494904553227875292076217164"},"id":"ASB-A-444443479-9e3bdbdd","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":270,"function_hash":"102404312414944373181879991317112281805"},"id":"ASB-A-444443479-aba1456d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100","target":{"function":"hasCrossProfileIntents","file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java"}},{"target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java","function":"createMultiProfilePagerAdapter"},"deprecated":false,"digest":{"length":1072,"function_hash":"117242436247139587048878822694163593003"},"id":"ASB-A-444443479-ffb0ef69","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100"}],"fixes":["https://android.googlesource.com/platform/packages/modules/IntentResolver/+/f3343389bd5d7e31114b7677d99bbd132232b100"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-444443479.json"}},{"package":{"name":"platform/packages/modules/IntentResolver","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc","target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java","function":"createMultiProfilePagerAdapter"},"deprecated":false,"digest":{"length":1094,"function_hash":"252163358443479741004470399610878240797"},"id":"ASB-A-444443479-1e261c12","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc","target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java","function":"hasCrossProfileIntents"},"deprecated":false,"digest":{"length":270,"function_hash":"102404312414944373181879991317112281805"},"id":"ASB-A-444443479-4d475820","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"293273185477494904553227875292076217164","length":58},"id":"ASB-A-444443479-9dc19e5d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc","target":{"function":"createCrossProfileIntentsChecker","file":"java/src/com/android/intentresolver/ChooserActivity.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc","target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java"},"deprecated":false,"digest":{"line_hashes":["111398802756123349014319248315620886325","195269708378908853983919589132016510590","88230022454733843219773100838115691145","313241880832768867806420663948982066025","191215072427211709999720615158946363704","186438624328606573299324073958032356520","280770218486435815588299531523209973782","228202319285620297987594883753643678047","231615605790565961966554210325086555827","10788890208269827094398933855377448601","337486458313766494693156938498009278182","224802029678367421169334237047299560192","64215130863152011613952937353327667777","84484727654404652031316774843918451666","107437320668624815791554135780661049909","170409662879207657202973769363957741324","229548529139284394599763677225932039967","162848783552875215724231917807762980300","322956742249993162742432605305541351385"],"threshold":0.9},"id":"ASB-A-444443479-cb3caea1","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["261399217343972684695727895592631866635","185638856415472250777403511453353337148","174678765513168081938800059028083605063","180678304454666937121745213922932054852","173826632493730944037461231683334047495","322591720204169525179012679373892722358","155363556186907753657789969562469383828","31487669892833121873421725925486421445","130613886475893167786377265707477092117"]},"id":"ASB-A-444443479-d6513c4a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc","target":{"file":"java/src/com/android/intentresolver/emptystate/CrossProfileIntentsChecker.java"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/IntentResolver/+/c8bcb3d0c20a3003c2daf03638ca2453bb1773dc"],"severity":"High","spl":"2026-11-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-444443479.json"}},{"package":{"name":"platform/packages/modules/IntentResolver","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["9348214252256863230287684040574114741","171889150735786721227257880935348182419","108811464116761992059442629487695803529","14352174136124384595727075504745097652","276374522813325625548067470739151098136","163586692630500316710733462632325249781","333890545405436986281970543444770333957"]},"id":"ASB-A-444443479-0369fb43","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/87d6a82f38d82eea3e43713612d401c6d962fb5b","target":{"file":"java/src/com/android/intentresolver/AbstractMultiProfilePagerAdapter.java"},"deprecated":false},{"target":{"file":"java/src/com/android/intentresolver/AbstractMultiProfilePagerAdapter.java","function":"hasCrossProfileIntents"},"deprecated":false,"digest":{"function_hash":"135261264508818863179736291804681547551","length":298},"id":"ASB-A-444443479-3b01b395","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/87d6a82f38d82eea3e43713612d401c6d962fb5b"},{"target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java","function":"createChooserMultiProfilePagerAdapterForTwoProfiles"},"deprecated":false,"digest":{"function_hash":"108443012827697101513274425952343177379","length":614},"id":"ASB-A-444443479-e2a70be3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/87d6a82f38d82eea3e43713612d401c6d962fb5b"},{"id":"ASB-A-444443479-ff45f625","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/IntentResolver/+/87d6a82f38d82eea3e43713612d401c6d962fb5b","target":{"file":"java/src/com/android/intentresolver/ChooserActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["151253630933789333445353075129477715121","109208908062082718360786967763473864545","292990431219017403073428106411870815936","339908787637013107391595431886098996514","86400618650051727809340054899867819557","72347966524914379993182025660569090111","268507635961561947929713895833156721603","317037783350403469164396520080479972253","316107099336362474100941918314730326606","136257691785768734859081506468181279730","263042509104568429819560491911952849514","327508544717315039301126263382419548955","205208047154755025425124874081196487015","44593742112810872108886524681122608147","118977360857665052683768809958607353949","233393677511831266262429224707277635905","100778846533892820839591633113024751992","290812619204424325129485042056951233514","60082605171253616931554770824767620153","318696429406750936797056137952396472381","123269965894139715216812387011771727983","85587676265086057623692229424130570134","229644577302844067576290105003642779602","328260741502017500648504553615459095999","92966240932766693866189734873350812424","74804092246489346581480485460604107756","76789421307142748630753342102957836485","124645667238974657826658531929579386820","290023132561248434237601611188583597526","138816077411306186447674149310471229866","132426054416321961132286337598443500536","303656767413631611843654285019903671546","27929684967757537883125474649987360494","311934444604667155843275294377875718877","81119250624062798817904462918946505591"]}}],"fixes":["https://android.googlesource.com/platform/packages/modules/IntentResolver/+/87d6a82f38d82eea3e43713612d401c6d962fb5b"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-444443479.json"}}],"schema_version":"1.9.2"}