{"id":"ASB-A-471797575","aliases":["A-471797575","CVE-2026-28644"],"modified":"2026-09-09T15:15:54.249544283Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/995f95376eb373d9e8d584883a87ebb90db609d0","target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"},"deprecated":false,"digest":{"line_hashes":["267234732593795690459778999906339934707","201063708500393510071108629482607161125","3165407314155142059674102040682916501","177809087579538070238245537243034007378","311103090027810912653217446501431600245","311545419293262592779433611898598004330","64422315487152615121553626652131733082","93050852636990815166199202291513347838","314135186584661864628121941040893142512","196711629987325289702584279164457436759","24935059888481825808044669781728220500","80123638825207670014965709529000917922","216419437103615506300321458944451048737","30078428719961917795180416304365530502","280989723271764441248974080608782019831"],"threshold":0.9},"id":"ASB-A-471797575-65b75c40","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/995f95376eb373d9e8d584883a87ebb90db609d0","target":{"function":"startNextMatchingActivity","file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"},"deprecated":false,"digest":{"length":3190,"function_hash":"11225162889188045262244835351011776019"},"id":"ASB-A-471797575-b5b2d772","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/995f95376eb373d9e8d584883a87ebb90db609d0"],"severity":"High","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-471797575.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/a24b74da128da7cf45973c35154eb47876c3acf3","target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java","function":"startNextMatchingActivity"},"deprecated":false,"digest":{"function_hash":"181769873053337694477873114370499293214","length":3075},"id":"ASB-A-471797575-24cfa20e","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a24b74da128da7cf45973c35154eb47876c3acf3","target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"},"deprecated":false,"digest":{"line_hashes":["62633938392948863456674959037979078221","138294872529556787577045791169816821948","3165407314155142059674102040682916501","177809087579538070238245537243034007378","311103090027810912653217446501431600245","311545419293262592779433611898598004330","64422315487152615121553626652131733082","93050852636990815166199202291513347838","314135186584661864628121941040893142512","196711629987325289702584279164457436759","24935059888481825808044669781728220500","80123638825207670014965709529000917922","216419437103615506300321458944451048737","30078428719961917795180416304365530502","280989723271764441248974080608782019831"],"threshold":0.9},"id":"ASB-A-471797575-83c317b5","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a24b74da128da7cf45973c35154eb47876c3acf3"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-471797575.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-471797575-f9ce1f89","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2b02232721942885bb45f9c72e2b70200e433c1d","target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"},"deprecated":false,"digest":{"line_hashes":["267234732593795690459778999906339934707","201063708500393510071108629482607161125","3165407314155142059674102040682916501","177809087579538070238245537243034007378","311103090027810912653217446501431600245","311545419293262592779433611898598004330","64422315487152615121553626652131733082","93050852636990815166199202291513347838","314135186584661864628121941040893142512","196711629987325289702584279164457436759","24935059888481825808044669781728220500","80123638825207670014965709529000917922","216419437103615506300321458944451048737","30078428719961917795180416304365530502","280989723271764441248974080608782019831"],"threshold":0.9}},{"target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java","function":"startNextMatchingActivity"},"deprecated":false,"digest":{"length":3190,"function_hash":"11225162889188045262244835351011776019"},"id":"ASB-A-471797575-fac17ad5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2b02232721942885bb45f9c72e2b70200e433c1d"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2b02232721942885bb45f9c72e2b70200e433c1d"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-471797575.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4b4ea7c7391c4bae978b9f6114f3f1e4257a7ca4"],"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-471797575-8b26aa10","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4b4ea7c7391c4bae978b9f6114f3f1e4257a7ca4","target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"},"deprecated":false,"digest":{"line_hashes":["267234732593795690459778999906339934707","201063708500393510071108629482607161125","3165407314155142059674102040682916501","177809087579538070238245537243034007378","311103090027810912653217446501431600245","311545419293262592779433611898598004330","64422315487152615121553626652131733082","93050852636990815166199202291513347838","314135186584661864628121941040893142512","196711629987325289702584279164457436759","24935059888481825808044669781728220500","80123638825207670014965709529000917922","216419437103615506300321458944451048737","30078428719961917795180416304365530502","280989723271764441248974080608782019831"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4b4ea7c7391c4bae978b9f6114f3f1e4257a7ca4","target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java","function":"startNextMatchingActivity"},"deprecated":false,"digest":{"length":3190,"function_hash":"11225162889188045262244835351011776019"},"id":"ASB-A-471797575-c227e632"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-471797575.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-09-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/49507b0e29aa17dd01f22b1fea871e5a5cd35409","target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java","function":"startNextMatchingActivity"},"deprecated":false,"digest":{"function_hash":"271377748463102027924821653983830805023","length":2971},"id":"ASB-A-471797575-0b858d64","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/49507b0e29aa17dd01f22b1fea871e5a5cd35409","target":{"file":"services/core/java/com/android/server/wm/ActivityTaskManagerService.java"},"deprecated":false,"digest":{"line_hashes":["62633938392948863456674959037979078221","138294872529556787577045791169816821948","3165407314155142059674102040682916501","177809087579538070238245537243034007378","311103090027810912653217446501431600245","311545419293262592779433611898598004330","64422315487152615121553626652131733082","93050852636990815166199202291513347838","314135186584661864628121941040893142512","196711629987325289702584279164457436759","193361832083325832520681715831896511865","240145062841803829746003412656347661785","146113047732805261016662476579002387606","280989723271764441248974080608782019831"],"threshold":0.9},"id":"ASB-A-471797575-13f802ae","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/49507b0e29aa17dd01f22b1fea871e5a5cd35409"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-471797575.json"}}],"schema_version":"1.9.0"}