{"id":"ASB-A-482947423","details":"In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-482947423","CVE-2026-58838"],"modified":"2026-11-02T17:11:14.433882594Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFileInPrivateExternalAndroidDirs"},"deprecated":false,"digest":{"length":265,"function_hash":"211780235207706187971573931621795632827"},"id":"ASB-A-482947423-4079821f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFileInExternalAndroidDirs"},"deprecated":false,"digest":{"length":100,"function_hash":"324012900189278724082818435901028863453"},"id":"ASB-A-482947423-451b3fce","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0","target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"line_hashes":["162776973371719968785450460997115648385","53785966035345413186682068050453003852","301978190510795751567515921457826913234","252223703444627967676936803257648769177","316354340869570178297291378910415766696","69581308735062959321030290999252166865","239186513940641068448898482879426032661","33884445427034245068758763419433603876","249798217802232672549927071124175086447","114487928270391752033887408531048319746","248699596369135014493218374199558648516","209345230473000967762870807462707458591","73503895872154771580154557247113135680","170023314044330735859502574661608762615","98385798723094820737499869810984236622","73638861061980359784775058706297001542"],"threshold":0.9},"id":"ASB-A-482947423-5f0b3b79"}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/71beb5817e7aff47e3c6d76e8cf44b608b0096e0"],"severity":"High","spl":"2026-11-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-482947423-35602e52","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7","target":{"function":"isFileInExternalAndroidDirs","file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"function_hash":"324012900189278724082818435901028863453","length":100}},{"id":"ASB-A-482947423-603640e4","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7","target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["162776973371719968785450460997115648385","53785966035345413186682068050453003852","301978190510795751567515921457826913234","252223703444627967676936803257648769177","318035472014424621936902689870360644468","303308495953443320536628058378254659593","286748704687510955870906176980999956571","124040603353339922140414749868572286253","249798217802232672549927071124175086447","114487928270391752033887408531048319746","248699596369135014493218374199558648516","209345230473000967762870807462707458591","73503895872154771580154557247113135680","170023314044330735859502574661608762615","98385798723094820737499869810984236622","73638861061980359784775058706297001542"]}},{"digest":{"function_hash":"211780235207706187971573931621795632827","length":265},"id":"ASB-A-482947423-c6e35971","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7","target":{"function":"isFileInPrivateExternalAndroidDirs","file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/3e69771bded3a82e5fd7a14c87fd4618d28255f7"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593","target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"line_hashes":["162776973371719968785450460997115648385","53785966035345413186682068050453003852","301978190510795751567515921457826913234","252223703444627967676936803257648769177","318035472014424621936902689870360644468","303308495953443320536628058378254659593","286748704687510955870906176980999956571","124040603353339922140414749868572286253","249798217802232672549927071124175086447","114487928270391752033887408531048319746","248699596369135014493218374199558648516","209345230473000967762870807462707458591","73503895872154771580154557247113135680","170023314044330735859502574661608762615","98385798723094820737499869810984236622","73638861061980359784775058706297001542"],"threshold":0.9},"id":"ASB-A-482947423-40bfaa3a","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593","target":{"function":"isFileInExternalAndroidDirs","file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"length":100,"function_hash":"324012900189278724082818435901028863453"},"id":"ASB-A-482947423-b8cebe15"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFileInPrivateExternalAndroidDirs"},"deprecated":false,"digest":{"function_hash":"211780235207706187971573931621795632827","length":265},"id":"ASB-A-482947423-c62eac6b","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f77c8416726e4d3a0204e5aacbc81b608dd17593"],"severity":"High","spl":"2026-11-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["162776973371719968785450460997115648385","53785966035345413186682068050453003852","301978190510795751567515921457826913234","252223703444627967676936803257648769177","318035472014424621936902689870360644468","303308495953443320536628058378254659593","286748704687510955870906176980999956571","124040603353339922140414749868572286253","249798217802232672549927071124175086447","114487928270391752033887408531048319746","248699596369135014493218374199558648516","209345230473000967762870807462707458591","73503895872154771580154557247113135680","170023314044330735859502574661608762615","98385798723094820737499869810984236622","73638861061980359784775058706297001542"]},"id":"ASB-A-482947423-2eea7d04","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7"},{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFileInExternalAndroidDirs"},"deprecated":false,"digest":{"function_hash":"324012900189278724082818435901028863453","length":100},"id":"ASB-A-482947423-59cc356e","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/074b235bb7259c47691783ce5e3d801a148a1bd7","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFileInPrivateExternalAndroidDirs"},"deprecated":false,"digest":{"function_hash":"211780235207706187971573931621795632827","length":265},"id":"ASB-A-482947423-68fa7f0d","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFileInPrivateExternalAndroidDirs"},"deprecated":false,"digest":{"function_hash":"211780235207706187971573931621795632827","length":265},"id":"ASB-A-482947423-0716fa7c","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2","target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"line_hashes":["162776973371719968785450460997115648385","53785966035345413186682068050453003852","301978190510795751567515921457826913234","252223703444627967676936803257648769177","316354340869570178297291378910415766696","69581308735062959321030290999252166865","239186513940641068448898482879426032661","33884445427034245068758763419433603876","249798217802232672549927071124175086447","114487928270391752033887408531048319746","248699596369135014493218374199558648516","209345230473000967762870807462707458591","73503895872154771580154557247113135680","170023314044330735859502574661608762615","98385798723094820737499869810984236622","73638861061980359784775058706297001542"],"threshold":0.9},"id":"ASB-A-482947423-58ae7e94","signature_type":"Line"},{"target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFileInExternalAndroidDirs"},"deprecated":false,"digest":{"function_hash":"324012900189278724082818435901028863453","length":100},"id":"ASB-A-482947423-d14f2655","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2"}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/a617d4be41fa3b8e4ebc7cd015a92cf88062d1f2"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFileInPrivateExternalAndroidDirs"},"deprecated":false,"digest":{"function_hash":"211780235207706187971573931621795632827","length":265},"id":"ASB-A-482947423-08f667ba"},{"id":"ASB-A-482947423-3819dc6a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920","target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"line_hashes":["162776973371719968785450460997115648385","53785966035345413186682068050453003852","301978190510795751567515921457826913234","252223703444627967676936803257648769177","303308495953443320536628058378254659593","286748704687510955870906176980999956571","124040603353339922140414749868572286253","223563093838748518281752250081677751222","249798217802232672549927071124175086447","114487928270391752033887408531048319746","248699596369135014493218374199558648516","209345230473000967762870807462707458591","73503895872154771580154557247113135680","170023314044330735859502574661608762615","98385798723094820737499869810984236622","73638861061980359784775058706297001542"],"threshold":0.9}},{"target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFileInExternalAndroidDirs"},"deprecated":false,"digest":{"length":100,"function_hash":"324012900189278724082818435901028863453"},"id":"ASB-A-482947423-b971f263","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/7a755dff4c5821ebe26ca03e78e2643242e91920"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482947423.json"}}],"schema_version":"1.9.2"}