{"id":"ASB-A-489225275","details":"In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-489225275","CVE-2026-28607"],"modified":"2026-09-10T15:43:18.983809180Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["25678527416454208432614379293024199404","316726248341758280998379107508325748599","272807006561610370501417909584127061202","91188059137859994195088770566842266599","16621780674115800497096008820767391377","340039348358812029490277916356954824021","89643403731073374122551795631902689778","67431381264119715207409204071429308707","291049377288913872505989158231109560769","115173738379477178924815138717586857760","58287169907098579911924116407589926025","263746575025031202258905831758877131157"],"threshold":0.9},"id":"ASB-A-489225275-02dd0183","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"}},{"deprecated":false,"digest":{"function_hash":"252687512716136636728004069591461906783","length":1482},"id":"ASB-A-489225275-23297681","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2","target":{"function":"onCreate","file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"getRequestedPermissions"},"deprecated":false,"digest":{"function_hash":"185604537140952635734738236709254031490","length":292},"id":"ASB-A-489225275-355b8cad","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["52680562980510607517605899431326641353","222646591356491429637094959728387294067","82476260474160191190619696386489110591"]},"id":"ASB-A-489225275-53b935a5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/PackageUtil.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"},"deprecated":false,"digest":{"line_hashes":["106852290312809516895377641684996428641","254206429671381710035655612641757762048","338452513642929939047865711802153221999","259508737967465209493145439077418684169","221254481077704355234469265561947169807","198168478088630732755973602456631827793","225949171834575153345138588195644216622","221973176153146143582069605600468334443","112910000939268604554438998217215511921","263746575025031202258905831758877131157","263005559163137403638496821056305388088","58929518678013263896037181778314082377","29844061187659970732989886449581715712","296276164912890511957931757038036306715","28048552181586519684944616507710731140","221021393018850293048960617952541970827","196782686220617066927954600405440177661","17313545307980698675703531090957618616","260861499165759283338398296075050270664","299215052268245412278961868015967141767","249511230169017374000683920755685807171","21221126853118825090031009375356438417","41360014686090784930503947598537150219","219613577819779853200054952202802097574","186413296058605191460440160453328220847","137957984886052759307568400966786216280","306936669422279865259940716863850363040","96321991240038270269755988956708029260","187560578324102053171208247010179276029","58642554557945972021082773925851064904","263132710757540252641829136028558801726","201245894770287100299819480583310197571","319269864999209180400716469509464626956","253815196771545047754757517792839028343","25951370221727965608250245537454751050","9330368635400660237435184567344288369","209838517258065424964777518212473963353","226869341315576444528013089983214843069","218673300309448677127534856087808873891","233719466794560235134779317995158355676","194861516906589107651718416040819752177","56111384582563921389874863548700993107","142289138470839470692046499309342139915","217634510623778148224838654866171535080","17487251200895864438150254966736862173","204101675498605135024808400654796059844","164917948516606776464851285832314310256","277292775291073277501337954943058697709","294258919881150336376956612249256445296","249879808794227586937239148136134966261","201190704786300312245317127310257814587","201587660596743591545175087948861025183","206583249750969311944178716942576507397","81449729320594700327696298941855148802","165497933030216600670766577457908712381","47249007774615380260116880509701510897","24761777831436560761710409046387147445","279242499557701657666253780944471264490","154731730640234064466207119379245630454","47209053410727927234555338959710548712","257166332073073215211498061369789646710","233056818382301436189550149717537071606","106593624790003189716276185524729643306","219011696207312508610660324158438822739","289174658616443959451699440838066839097"],"threshold":0.9},"id":"ASB-A-489225275-6462f5c6"},{"exact_target_file_match_only":true,"id":"ASB-A-489225275-8bede331","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"getPackageNameForUid"},"deprecated":false,"digest":{"function_hash":"164274188035875193774244932934383904484","length":138}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"onCreate"},"deprecated":false,"digest":{"function_hash":"331971739253791085034829331216593523517","length":2029},"id":"ASB-A-489225275-90f9f886","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c3f52bcbb62f8af7d3a2aefb617696579cbe68f2"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-489225275.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"67351796576961428084154187004498649684","length":1124},"id":"ASB-A-489225275-11ac7dd9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java","function":"onCreate"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["106852290312809516895377641684996428641","254206429671381710035655612641757762048","338452513642929939047865711802153221999","249511230169017374000683920755685807171","21221126853118825090031009375356438417","41360014686090784930503947598537150219","219613577819779853200054952202802097574","186413296058605191460440160453328220847","137957984886052759307568400966786216280","306936669422279865259940716863850363040","96321991240038270269755988956708029260","253815196771545047754757517792839028343","25951370221727965608250245537454751050","9330368635400660237435184567344288369","209838517258065424964777518212473963353","226869341315576444528013089983214843069","218673300309448677127534856087808873891","233719466794560235134779317995158355676","194861516906589107651718416040819752177","56111384582563921389874863548700993107","142289138470839470692046499309342139915","217634510623778148224838654866171535080","17487251200895864438150254966736862173","204101675498605135024808400654796059844","164917948516606776464851285832314310256","277292775291073277501337954943058697709","294258919881150336376956612249256445296","249879808794227586937239148136134966261","201190704786300312245317127310257814587","201587660596743591545175087948861025183","206583249750969311944178716942576507397","81449729320594700327696298941855148802","165497933030216600670766577457908712381","47249007774615380260116880509701510897","24761777831436560761710409046387147445","279242499557701657666253780944471264490","154731730640234064466207119379245630454","47209053410727927234555338959710548712","257166332073073215211498061369789646710","233056818382301436189550149717537071606","106593624790003189716276185524729643306","219011696207312508610660324158438822739","289174658616443959451699440838066839097"]},"id":"ASB-A-489225275-5b59b7af","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"getPackageNameForUid"},"deprecated":false,"digest":{"function_hash":"164274188035875193774244932934383904484","length":138},"exact_target_file_match_only":true,"id":"ASB-A-489225275-933e96de","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645","target":{"function":"onCreate","file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"},"deprecated":false,"digest":{"function_hash":"179210721781866428300979830668522342143","length":1669},"id":"ASB-A-489225275-b149e4cf","signature_type":"Function"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["52680562980510607517605899431326641353","186589791679892618466714720917437507577","67285741456772442012070940876174401461"]},"id":"ASB-A-489225275-c0788efd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/PackageUtil.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"getRequestedPermissions"},"deprecated":false,"digest":{"length":292,"function_hash":"185604537140952635734738236709254031490"},"id":"ASB-A-489225275-f3ddc775","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-489225275-ffb66036","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["25678527416454208432614379293024199404","316726248341758280998379107508325748599","272807006561610370501417909584127061202","273131921640719163415313175550143036442","20125181843498003731916637974928233653","85350371322174750088956847913711933747","315300290812579995506388452235574074731","118915008066074194702284930329014920501","67431381264119715207409204071429308707","291049377288913872505989158231109560769","263773574913797356623212842948883971478","209614292367324420253485868923748794552","314322894872804974644392465042348751920"]}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8ffafe7532e3ce3c6c1c69e4ab781bdb94021645"],"severity":"High","spl":"2026-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-489225275.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733"],"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"onCreate"},"deprecated":false,"digest":{"function_hash":"179210721781866428300979830668522342143","length":1669},"id":"ASB-A-489225275-5969b3c7","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/PackageUtil.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["52680562980510607517605899431326641353","186589791679892618466714720917437507577","67285741456772442012070940876174401461"]},"id":"ASB-A-489225275-6051b7a9","signature_type":"Line","signature_version":"v1"},{"target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"},"deprecated":false,"digest":{"line_hashes":["25678527416454208432614379293024199404","316726248341758280998379107508325748599","272807006561610370501417909584127061202","273131921640719163415313175550143036442","20125181843498003731916637974928233653","85350371322174750088956847913711933747","315300290812579995506388452235574074731","118915008066074194702284930329014920501","67431381264119715207409204071429308707","291049377288913872505989158231109560769","263773574913797356623212842948883971478","209614292367324420253485868923748794552","314322894872804974644392465042348751920"],"threshold":0.9},"id":"ASB-A-489225275-6366b50c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733"},{"deprecated":false,"digest":{"length":138,"function_hash":"164274188035875193774244932934383904484"},"exact_target_file_match_only":true,"id":"ASB-A-489225275-89a03f43","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"getPackageNameForUid"}},{"deprecated":false,"digest":{"line_hashes":["106852290312809516895377641684996428641","254206429671381710035655612641757762048","338452513642929939047865711802153221999","249511230169017374000683920755685807171","21221126853118825090031009375356438417","41360014686090784930503947598537150219","219613577819779853200054952202802097574","186413296058605191460440160453328220847","137957984886052759307568400966786216280","306936669422279865259940716863850363040","96321991240038270269755988956708029260","253815196771545047754757517792839028343","25951370221727965608250245537454751050","9330368635400660237435184567344288369","209838517258065424964777518212473963353","226869341315576444528013089983214843069","218673300309448677127534856087808873891","233719466794560235134779317995158355676","194861516906589107651718416040819752177","56111384582563921389874863548700993107","142289138470839470692046499309342139915","217634510623778148224838654866171535080","17487251200895864438150254966736862173","204101675498605135024808400654796059844","164917948516606776464851285832314310256","277292775291073277501337954943058697709","294258919881150336376956612249256445296","249879808794227586937239148136134966261","201190704786300312245317127310257814587","201587660596743591545175087948861025183","206583249750969311944178716942576507397","81449729320594700327696298941855148802","165497933030216600670766577457908712381","47249007774615380260116880509701510897","24761777831436560761710409046387147445","279242499557701657666253780944471264490","154731730640234064466207119379245630454","47209053410727927234555338959710548712","257166332073073215211498061369789646710","233056818382301436189550149717537071606","106593624790003189716276185524729643306","219011696207312508610660324158438822739","289174658616443959451699440838066839097"],"threshold":0.9},"id":"ASB-A-489225275-8d150497","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"}},{"target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java","function":"onCreate"},"deprecated":false,"digest":{"function_hash":"67351796576961428084154187004498649684","length":1124},"id":"ASB-A-489225275-e5b99348","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/583d63aacd141f7d8c5f53cdb5d99af6e5b09733","target":{"function":"getRequestedPermissions","file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"},"deprecated":false,"digest":{"function_hash":"185604537140952635734738236709254031490","length":292},"id":"ASB-A-489225275-ef7af8b1","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-489225275.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"},"deprecated":false,"digest":{"line_hashes":["25678527416454208432614379293024199404","316726248341758280998379107508325748599","272807006561610370501417909584127061202","91188059137859994195088770566842266599","16621780674115800497096008820767391377","340039348358812029490277916356954824021","89643403731073374122551795631902689778","67431381264119715207409204071429308707","291049377288913872505989158231109560769","115173738379477178924815138717586857760","58287169907098579911924116407589926025","263746575025031202258905831758877131157"],"threshold":0.9},"id":"ASB-A-489225275-29d3ff17","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"},"deprecated":false,"digest":{"line_hashes":["106852290312809516895377641684996428641","254206429671381710035655612641757762048","338452513642929939047865711802153221999","259508737967465209493145439077418684169","221254481077704355234469265561947169807","198168478088630732755973602456631827793","225949171834575153345138588195644216622","221973176153146143582069605600468334443","112910000939268604554438998217215511921","263746575025031202258905831758877131157","263005559163137403638496821056305388088","58929518678013263896037181778314082377","29844061187659970732989886449581715712","296276164912890511957931757038036306715","28048552181586519684944616507710731140","221021393018850293048960617952541970827","196782686220617066927954600405440177661","17313545307980698675703531090957618616","260861499165759283338398296075050270664","299215052268245412278961868015967141767","249511230169017374000683920755685807171","21221126853118825090031009375356438417","41360014686090784930503947598537150219","219613577819779853200054952202802097574","186413296058605191460440160453328220847","137957984886052759307568400966786216280","306936669422279865259940716863850363040","96321991240038270269755988956708029260","187560578324102053171208247010179276029","58642554557945972021082773925851064904","263132710757540252641829136028558801726","201245894770287100299819480583310197571","319269864999209180400716469509464626956","253815196771545047754757517792839028343","25951370221727965608250245537454751050","9330368635400660237435184567344288369","209838517258065424964777518212473963353","226869341315576444528013089983214843069","218673300309448677127534856087808873891","233719466794560235134779317995158355676","194861516906589107651718416040819752177","56111384582563921389874863548700993107","142289138470839470692046499309342139915","217634510623778148224838654866171535080","17487251200895864438150254966736862173","204101675498605135024808400654796059844","164917948516606776464851285832314310256","277292775291073277501337954943058697709","294258919881150336376956612249256445296","249879808794227586937239148136134966261","201190704786300312245317127310257814587","201587660596743591545175087948861025183","206583249750969311944178716942576507397","81449729320594700327696298941855148802","165497933030216600670766577457908712381","47249007774615380260116880509701510897","24761777831436560761710409046387147445","279242499557701657666253780944471264490","154731730640234064466207119379245630454","47209053410727927234555338959710548712","257166332073073215211498061369789646710","233056818382301436189550149717537071606","106593624790003189716276185524729643306","219011696207312508610660324158438822739","289174658616443959451699440838066839097"],"threshold":0.9},"id":"ASB-A-489225275-52856aaa","signature_type":"Line"},{"digest":{"length":2029,"function_hash":"331971739253791085034829331216593523517"},"id":"ASB-A-489225275-6780d7ab","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958","target":{"function":"onCreate","file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"},"deprecated":false},{"target":{"function":"getRequestedPermissions","file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"},"deprecated":false,"digest":{"function_hash":"185604537140952635734738236709254031490","length":292},"id":"ASB-A-489225275-7045ef2e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/PackageUtil.java"},"deprecated":false,"digest":{"line_hashes":["52680562980510607517605899431326641353","222646591356491429637094959728387294067","82476260474160191190619696386489110591"],"threshold":0.9},"id":"ASB-A-489225275-bd10514f","signature_type":"Line"},{"exact_target_file_match_only":true,"id":"ASB-A-489225275-f9926c4e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"getPackageNameForUid"},"deprecated":false,"digest":{"function_hash":"164274188035875193774244932934383904484","length":138}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java","function":"onCreate"},"deprecated":false,"digest":{"function_hash":"252687512716136636728004069591461906783","length":1482},"id":"ASB-A-489225275-fa590719","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9cde96c3459906eb93d887924d589707ba89d958"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-489225275.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75","target":{"function":"getPackageNameForUid","file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"},"deprecated":false,"digest":{"length":138,"function_hash":"164274188035875193774244932934383904484"},"exact_target_file_match_only":true,"id":"ASB-A-489225275-302418a2"},{"deprecated":false,"digest":{"function_hash":"252687512716136636728004069591461906783","length":1482},"id":"ASB-A-489225275-4d4eefb0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75","target":{"function":"onCreate","file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"}},{"target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveErrorActivity.java"},"deprecated":false,"digest":{"line_hashes":["25678527416454208432614379293024199404","316726248341758280998379107508325748599","272807006561610370501417909584127061202","91188059137859994195088770566842266599","16621780674115800497096008820767391377","340039348358812029490277916356954824021","89643403731073374122551795631902689778","67431381264119715207409204071429308707","291049377288913872505989158231109560769","115173738379477178924815138717586857760","58287169907098579911924116407589926025","263746575025031202258905831758877131157"],"threshold":0.9},"id":"ASB-A-489225275-4d97207f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["106852290312809516895377641684996428641","254206429671381710035655612641757762048","338452513642929939047865711802153221999","259508737967465209493145439077418684169","221254481077704355234469265561947169807","198168478088630732755973602456631827793","225949171834575153345138588195644216622","221973176153146143582069605600468334443","112910000939268604554438998217215511921","263746575025031202258905831758877131157","263005559163137403638496821056305388088","58929518678013263896037181778314082377","29844061187659970732989886449581715712","296276164912890511957931757038036306715","28048552181586519684944616507710731140","221021393018850293048960617952541970827","196782686220617066927954600405440177661","17313545307980698675703531090957618616","260861499165759283338398296075050270664","299215052268245412278961868015967141767","249511230169017374000683920755685807171","21221126853118825090031009375356438417","41360014686090784930503947598537150219","219613577819779853200054952202802097574","186413296058605191460440160453328220847","137957984886052759307568400966786216280","306936669422279865259940716863850363040","96321991240038270269755988956708029260","187560578324102053171208247010179276029","58642554557945972021082773925851064904","263132710757540252641829136028558801726","201245894770287100299819480583310197571","319269864999209180400716469509464626956","253815196771545047754757517792839028343","25951370221727965608250245537454751050","9330368635400660237435184567344288369","209838517258065424964777518212473963353","226869341315576444528013089983214843069","218673300309448677127534856087808873891","233719466794560235134779317995158355676","194861516906589107651718416040819752177","56111384582563921389874863548700993107","142289138470839470692046499309342139915","217634510623778148224838654866171535080","17487251200895864438150254966736862173","204101675498605135024808400654796059844","164917948516606776464851285832314310256","277292775291073277501337954943058697709","294258919881150336376956612249256445296","249879808794227586937239148136134966261","201190704786300312245317127310257814587","201587660596743591545175087948861025183","206583249750969311944178716942576507397","81449729320594700327696298941855148802","165497933030216600670766577457908712381","47249007774615380260116880509701510897","24761777831436560761710409046387147445","279242499557701657666253780944471264490","154731730640234064466207119379245630454","47209053410727927234555338959710548712","257166332073073215211498061369789646710","233056818382301436189550149717537071606","106593624790003189716276185524729643306","219011696207312508610660324158438822739","289174658616443959451699440838066839097"]},"id":"ASB-A-489225275-8bae1bdd"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["52680562980510607517605899431326641353","222646591356491429637094959728387294067","82476260474160191190619696386489110591"]},"id":"ASB-A-489225275-99627272","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/PackageUtil.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75","target":{"file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java","function":"getRequestedPermissions"},"deprecated":false,"digest":{"length":292,"function_hash":"185604537140952635734738236709254031490"},"id":"ASB-A-489225275-a56c4262","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75","target":{"function":"onCreate","file":"packages/PackageInstaller/src/com/android/packageinstaller/UnarchiveActivity.java"},"deprecated":false,"digest":{"function_hash":"331971739253791085034829331216593523517","length":2029},"id":"ASB-A-489225275-a978f430"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/36d7d23b9d730f5ac76b23234f239d2e84535b75"],"severity":"High","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-489225275.json"}}],"schema_version":"1.9.0"}