{"id":"ASB-A-498162425","details":"In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-498162425","CVE-2026-55264"],"modified":"2026-11-02T16:56:16.299167560Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"checkDestinationFilePathRestrictions"},"deprecated":false,"digest":{"length":851,"function_hash":"191790017511253499521390517376373064771"},"id":"ASB-A-498162425-052b9cb9"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkDownloadedFilePath"},"deprecated":false,"digest":{"function_hash":"110967783211825894487055299495850689562","length":910},"id":"ASB-A-498162425-2bae7b61","signature_type":"Function"},{"deprecated":false,"digest":{"length":2850,"function_hash":"126846526632470062071384680087957547226"},"id":"ASB-A-498162425-3eab381a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkInsertPermissions"}},{"target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"logVerboseOpenFileInfo"},"deprecated":false,"digest":{"function_hash":"2570707937030247635270512663885589139","length":1188},"id":"ASB-A-498162425-4abd44f3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["319968131732966878335492432862009169039","283905761946507337867765072941970407225","144766987770461267759917616369168644120","50531897741651730885254972958441239122","100814637638357964843970911157544461125","51178454138944312132638746331043883210","125115819644900896497385861423049676731","257277134168835120580914606770657116890","32795350332005576687995209872446582328","240716560623469246503577962139165236152","316130655847659994863251917282559811859","109891341816880214090045361456840921497","191044219971436116430067743241388972838","162643476413108576964635341222724178040","319668309734731209647266839764277727446","137798806865731016589499144751276129178","51981579517093587943744092330794157943","265220291524012738659067870049771226337","336219000401742417169987769310582193158","165524586795455585860520982098764462105","198259181563682615350334727860780633941","201649539840690409682269798813421944661","101326853097531343093972391082846738573","295709304328089267200943636095186664422","130041268595290425913739191158205504832","269767468591660554132272255809471483386","210167189556760666792958444910823800323","25705371495313585068333487775503027268","241864328414844809803604555230962056764","108587633537507210242609878158511307392","128797082458499271042020098054893634524","206595471633514484748500303191320843304","166337675263112384633214305208700952451","110310661001557351899419952197453418926","242689469119797169232603993138221452973","115813513611785974948206868770592190732","241616794146644658069325258645048770872","265327089288429881176664649899688069294","210364460122909675900110413275950559082","226764922388754556828136901533156579282","77767875361646141766523022975364985554","255199986323501933762178996818293922826","64144684215165488984949050918871853401","86556705182283327999759493629576323362","39093664468793664434394571349121065304","96354860121479526837624707418952346801","303261713221302820178984988521075568922","136193735816866371423231754184253908406","290277950795669339425373439792203756513","536342708549862246255287749372356259","173213216655434887255702715122605034611","30882435790888815960000715321992543333","277442550098369274042332338464579723480","35731442600192499278284464036798403322","154978508412848911859447069425734388038","60436304062155373351573421492785660455","169813889243416086375795945721364805234","333647114227027196994006207182456886735","253388394112225191698069999813240660875","207627754695244550627147867965141950202","301026251386690289143905678199733866909","139373199368672459398471529879729191420","50234125652040558252367006909075626633","283070460750551119341580442036188056431","179465081222007845257627473901042115916","244412650042084315859701740562716354949","239970075664917634686077128232748312540","252545784538556659435161403674235011058","275342365689127315746539714937377490430","309618802140636889772787913916612181017","336432534207396294580097801281934225545","2677754783487083420207765126854370181","39724400325374756756251823420936990649","26928668486169766095975640115014881125","241006191457185296232536050932186325279","128610881375541658409815341349168026501","55211809314445144230532090703814635263","258571426977471877897008773593995768825","198160419149913045260801041192177611263","41937874059107375334105613040290750065","31976645933064633274006855207865272793","23240658086840781933877818246403887585","201253792128560487628401689301035463390","111972060440901275913782053734781445741","18222140305972089824098412241351434356","32125225161291432812956153470701420920","57581396896212069165074832684053318","208334880134461062258048259332876522588","335719502503452934305733877175439545402"]},"id":"ASB-A-498162425-9a0f9afa","signature_type":"Line"},{"id":"ASB-A-498162425-b48cee00","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c","target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"line_hashes":["1100763490978900655977357542853925510","72091371309718869626626379837267393995","152394261834607310285061401703697682690","210230673607883471461907870469137126295","267568362834455264152958559695681847467","215313087084148692347610311166949092183","246545167393193003737354957596654680686","143422731397175817538758261599054254363","21531143555844241432954736306802070820","182392382368182097773645173322066821844","239291362901066692616822431778493185335","251366106983980160593371955470456156619","47035882787231076478780517658649637535","80659424451340184871579571861468650791","310876773204323529297570774264739999671","121839435819458235429397691696524883958","265993480603852303090348618825881296872"],"threshold":0.9}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c","target":{"function":"checkWhetherCallingAppHasAccess","file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"function_hash":"167558740467392864671434861872647200056","length":1144},"id":"ASB-A-498162425-bbfd0e68","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/81c714e8a0eb59b1bab9fda98f39ec78d2b3ee0c","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFilenameValidInExternalPackage"},"deprecated":false,"digest":{"length":356,"function_hash":"171765556727096727770276995115664959155"},"id":"ASB-A-498162425-dd71702a","signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498162425.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a","target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["1100763490978900655977357542853925510","72091371309718869626626379837267393995","152394261834607310285061401703697682690","210230673607883471461907870469137126295","267568362834455264152958559695681847467","215313087084148692347610311166949092183","246545167393193003737354957596654680686","143422731397175817538758261599054254363","21531143555844241432954736306802070820","182392382368182097773645173322066821844","239291362901066692616822431778493185335","251366106983980160593371955470456156619","47035882787231076478780517658649637535","80659424451340184871579571861468650791","310876773204323529297570774264739999671","121839435819458235429397691696524883958","265993480603852303090348618825881296872"]},"id":"ASB-A-498162425-034d61f2","signature_type":"Line"},{"target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkDownloadedFilePath"},"deprecated":false,"digest":{"length":910,"function_hash":"110967783211825894487055299495850689562"},"id":"ASB-A-498162425-16ad0d90","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"line_hashes":["319968131732966878335492432862009169039","283905761946507337867765072941970407225","144766987770461267759917616369168644120","50531897741651730885254972958441239122","100814637638357964843970911157544461125","51178454138944312132638746331043883210","125115819644900896497385861423049676731","257277134168835120580914606770657116890","32795350332005576687995209872446582328","240716560623469246503577962139165236152","316130655847659994863251917282559811859","109891341816880214090045361456840921497","191044219971436116430067743241388972838","162643476413108576964635341222724178040","319668309734731209647266839764277727446","137798806865731016589499144751276129178","51981579517093587943744092330794157943","265220291524012738659067870049771226337","336219000401742417169987769310582193158","165524586795455585860520982098764462105","198259181563682615350334727860780633941","201649539840690409682269798813421944661","101326853097531343093972391082846738573","295709304328089267200943636095186664422","130041268595290425913739191158205504832","269767468591660554132272255809471483386","210167189556760666792958444910823800323","25705371495313585068333487775503027268","241864328414844809803604555230962056764","108587633537507210242609878158511307392","128797082458499271042020098054893634524","206595471633514484748500303191320843304","166337675263112384633214305208700952451","110310661001557351899419952197453418926","242689469119797169232603993138221452973","115813513611785974948206868770592190732","241616794146644658069325258645048770872","265327089288429881176664649899688069294","210364460122909675900110413275950559082","226764922388754556828136901533156579282","77767875361646141766523022975364985554","255199986323501933762178996818293922826","64144684215165488984949050918871853401","86556705182283327999759493629576323362","39093664468793664434394571349121065304","96354860121479526837624707418952346801","303261713221302820178984988521075568922","136193735816866371423231754184253908406","290277950795669339425373439792203756513","536342708549862246255287749372356259","173213216655434887255702715122605034611","30882435790888815960000715321992543333","277442550098369274042332338464579723480","35731442600192499278284464036798403322","154978508412848911859447069425734388038","60436304062155373351573421492785660455","169813889243416086375795945721364805234","333647114227027196994006207182456886735","253388394112225191698069999813240660875","207627754695244550627147867965141950202","301026251386690289143905678199733866909","139373199368672459398471529879729191420","50234125652040558252367006909075626633","283070460750551119341580442036188056431","179465081222007845257627473901042115916","244412650042084315859701740562716354949","239970075664917634686077128232748312540","252545784538556659435161403674235011058","275342365689127315746539714937377490430","309618802140636889772787913916612181017","336432534207396294580097801281934225545","2677754783487083420207765126854370181","39724400325374756756251823420936990649","26928668486169766095975640115014881125","241006191457185296232536050932186325279","128610881375541658409815341349168026501","55211809314445144230532090703814635263","258571426977471877897008773593995768825","198160419149913045260801041192177611263","41937874059107375334105613040290750065","31976645933064633274006855207865272793","23240658086840781933877818246403887585","201253792128560487628401689301035463390","111972060440901275913782053734781445741","18222140305972089824098412241351434356","32125225161291432812956153470701420920","57581396896212069165074832684053318","208334880134461062258048259332876522588","335719502503452934305733877175439545402"],"threshold":0.9},"id":"ASB-A-498162425-303f7a52"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFilenameValidInExternalPackage"},"deprecated":false,"digest":{"function_hash":"171765556727096727770276995115664959155","length":356},"id":"ASB-A-498162425-3652cdf1","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"logVerboseOpenFileInfo"},"deprecated":false,"digest":{"length":1188,"function_hash":"2570707937030247635270512663885589139"},"id":"ASB-A-498162425-a9e9ef16","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"191790017511253499521390517376373064771","length":851},"id":"ASB-A-498162425-c353cc7c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"checkDestinationFilePathRestrictions"},"deprecated":false},{"id":"ASB-A-498162425-fe30bb04","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkWhetherCallingAppHasAccess"},"deprecated":false,"digest":{"function_hash":"167558740467392864671434861872647200056","length":1144}},{"id":"ASB-A-498162425-fe5cfb7b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a","target":{"function":"checkInsertPermissions","file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"length":2850,"function_hash":"126846526632470062071384680087957547226"}}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/fc5c325824676d78f56a960b8222518b4861a58a"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498162425.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"id":"ASB-A-498162425-0209d149","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkDownloadedFilePath"},"deprecated":false,"digest":{"function_hash":"110967783211825894487055299495850689562","length":910}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c","target":{"function":"checkDestinationFilePathRestrictions","file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"function_hash":"191790017511253499521390517376373064771","length":851},"id":"ASB-A-498162425-2e8229b6","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["319968131732966878335492432862009169039","283905761946507337867765072941970407225","144766987770461267759917616369168644120","50531897741651730885254972958441239122","100814637638357964843970911157544461125","51178454138944312132638746331043883210","125115819644900896497385861423049676731","257277134168835120580914606770657116890","32795350332005576687995209872446582328","240716560623469246503577962139165236152","316130655847659994863251917282559811859","109891341816880214090045361456840921497","191044219971436116430067743241388972838","162643476413108576964635341222724178040","319668309734731209647266839764277727446","137798806865731016589499144751276129178","51981579517093587943744092330794157943","265220291524012738659067870049771226337","336219000401742417169987769310582193158","165524586795455585860520982098764462105","198259181563682615350334727860780633941","201649539840690409682269798813421944661","101326853097531343093972391082846738573","295709304328089267200943636095186664422","130041268595290425913739191158205504832","269767468591660554132272255809471483386","210167189556760666792958444910823800323","25705371495313585068333487775503027268","241864328414844809803604555230962056764","108587633537507210242609878158511307392","128797082458499271042020098054893634524","206595471633514484748500303191320843304","166337675263112384633214305208700952451","110310661001557351899419952197453418926","242689469119797169232603993138221452973","115813513611785974948206868770592190732","241616794146644658069325258645048770872","265327089288429881176664649899688069294","210364460122909675900110413275950559082","226764922388754556828136901533156579282","77767875361646141766523022975364985554","255199986323501933762178996818293922826","64144684215165488984949050918871853401","86556705182283327999759493629576323362","39093664468793664434394571349121065304","96354860121479526837624707418952346801","303261713221302820178984988521075568922","136193735816866371423231754184253908406","290277950795669339425373439792203756513","536342708549862246255287749372356259","173213216655434887255702715122605034611","30882435790888815960000715321992543333","277442550098369274042332338464579723480","35731442600192499278284464036798403322","154978508412848911859447069425734388038","60436304062155373351573421492785660455","169813889243416086375795945721364805234","333647114227027196994006207182456886735","253388394112225191698069999813240660875","207627754695244550627147867965141950202","301026251386690289143905678199733866909","139373199368672459398471529879729191420","50234125652040558252367006909075626633","283070460750551119341580442036188056431","179465081222007845257627473901042115916","244412650042084315859701740562716354949","239970075664917634686077128232748312540","252545784538556659435161403674235011058","275342365689127315746539714937377490430","309618802140636889772787913916612181017","336432534207396294580097801281934225545","2677754783487083420207765126854370181","39724400325374756756251823420936990649","26928668486169766095975640115014881125","241006191457185296232536050932186325279","128610881375541658409815341349168026501","55211809314445144230532090703814635263","258571426977471877897008773593995768825","198160419149913045260801041192177611263","41937874059107375334105613040290750065","31976645933064633274006855207865272793","23240658086840781933877818246403887585","201253792128560487628401689301035463390","111972060440901275913782053734781445741","18222140305972089824098412241351434356","32125225161291432812956153470701420920","57581396896212069165074832684053318","208334880134461062258048259332876522588","335719502503452934305733877175439545402"]},"id":"ASB-A-498162425-40af1dc5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"2570707937030247635270512663885589139","length":1188},"id":"ASB-A-498162425-601d5ded","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"logVerboseOpenFileInfo"}},{"digest":{"threshold":0.9,"line_hashes":["1100763490978900655977357542853925510","72091371309718869626626379837267393995","152394261834607310285061401703697682690","210230673607883471461907870469137126295","267568362834455264152958559695681847467","215313087084148692347610311166949092183","246545167393193003737354957596654680686","143422731397175817538758261599054254363","21531143555844241432954736306802070820","182392382368182097773645173322066821844","239291362901066692616822431778493185335","251366106983980160593371955470456156619","47035882787231076478780517658649637535","80659424451340184871579571861468650791","310876773204323529297570774264739999671","121839435819458235429397691696524883958","265993480603852303090348618825881296872"]},"id":"ASB-A-498162425-7bb1c3c8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c","target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c","target":{"function":"checkWhetherCallingAppHasAccess","file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"function_hash":"167558740467392864671434861872647200056","length":1144},"id":"ASB-A-498162425-8716f8af","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkInsertPermissions"},"deprecated":false,"digest":{"length":2850,"function_hash":"126846526632470062071384680087957547226"},"id":"ASB-A-498162425-bbd512fa","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"171765556727096727770276995115664959155","length":356},"id":"ASB-A-498162425-c32ac436","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c","target":{"function":"isFilenameValidInExternalPackage","file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/f788c90f69a0eee97c120eb399e5bb4ee841d43c"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498162425.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099","target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["1100763490978900655977357542853925510","72091371309718869626626379837267393995","152394261834607310285061401703697682690","210230673607883471461907870469137126295","267568362834455264152958559695681847467","215313087084148692347610311166949092183","246545167393193003737354957596654680686","143422731397175817538758261599054254363","21531143555844241432954736306802070820","182392382368182097773645173322066821844","239291362901066692616822431778493185335","251366106983980160593371955470456156619","47035882787231076478780517658649637535","80659424451340184871579571861468650791","310876773204323529297570774264739999671","121839435819458235429397691696524883958","265993480603852303090348618825881296872"]},"id":"ASB-A-498162425-4cc6dbd8"},{"deprecated":false,"digest":{"function_hash":"167558740467392864671434861872647200056","length":1144},"id":"ASB-A-498162425-5398a2bd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkWhetherCallingAppHasAccess"}},{"deprecated":false,"digest":{"length":851,"function_hash":"191790017511253499521390517376373064771"},"id":"ASB-A-498162425-5b43e3fc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"checkDestinationFilePathRestrictions"}},{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"logVerboseOpenFileInfo"},"deprecated":false,"digest":{"function_hash":"2570707937030247635270512663885589139","length":1188},"id":"ASB-A-498162425-66b7caad","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-498162425-8b038ad8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkDownloadedFilePath"},"deprecated":false,"digest":{"function_hash":"110967783211825894487055299495850689562","length":910}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099","target":{"function":"isFilenameValidInExternalPackage","file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"function_hash":"171765556727096727770276995115664959155","length":356},"id":"ASB-A-498162425-a39253a3"},{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"line_hashes":["319968131732966878335492432862009169039","283905761946507337867765072941970407225","144766987770461267759917616369168644120","50531897741651730885254972958441239122","100814637638357964843970911157544461125","51178454138944312132638746331043883210","125115819644900896497385861423049676731","257277134168835120580914606770657116890","32795350332005576687995209872446582328","240716560623469246503577962139165236152","316130655847659994863251917282559811859","109891341816880214090045361456840921497","191044219971436116430067743241388972838","162643476413108576964635341222724178040","319668309734731209647266839764277727446","137798806865731016589499144751276129178","51981579517093587943744092330794157943","265220291524012738659067870049771226337","336219000401742417169987769310582193158","165524586795455585860520982098764462105","198259181563682615350334727860780633941","201649539840690409682269798813421944661","101326853097531343093972391082846738573","295709304328089267200943636095186664422","130041268595290425913739191158205504832","269767468591660554132272255809471483386","210167189556760666792958444910823800323","25705371495313585068333487775503027268","241864328414844809803604555230962056764","108587633537507210242609878158511307392","128797082458499271042020098054893634524","206595471633514484748500303191320843304","166337675263112384633214305208700952451","110310661001557351899419952197453418926","242689469119797169232603993138221452973","115813513611785974948206868770592190732","241616794146644658069325258645048770872","265327089288429881176664649899688069294","210364460122909675900110413275950559082","226764922388754556828136901533156579282","77767875361646141766523022975364985554","255199986323501933762178996818293922826","64144684215165488984949050918871853401","86556705182283327999759493629576323362","39093664468793664434394571349121065304","96354860121479526837624707418952346801","303261713221302820178984988521075568922","136193735816866371423231754184253908406","290277950795669339425373439792203756513","536342708549862246255287749372356259","173213216655434887255702715122605034611","30882435790888815960000715321992543333","277442550098369274042332338464579723480","35731442600192499278284464036798403322","154978508412848911859447069425734388038","60436304062155373351573421492785660455","169813889243416086375795945721364805234","333647114227027196994006207182456886735","253388394112225191698069999813240660875","207627754695244550627147867965141950202","301026251386690289143905678199733866909","139373199368672459398471529879729191420","50234125652040558252367006909075626633","283070460750551119341580442036188056431","179465081222007845257627473901042115916","244412650042084315859701740562716354949","239970075664917634686077128232748312540","252545784538556659435161403674235011058","275342365689127315746539714937377490430","309618802140636889772787913916612181017","336432534207396294580097801281934225545","2677754783487083420207765126854370181","39724400325374756756251823420936990649","26928668486169766095975640115014881125","241006191457185296232536050932186325279","128610881375541658409815341349168026501","55211809314445144230532090703814635263","258571426977471877897008773593995768825","198160419149913045260801041192177611263","41937874059107375334105613040290750065","31976645933064633274006855207865272793","23240658086840781933877818246403887585","201253792128560487628401689301035463390","111972060440901275913782053734781445741","18222140305972089824098412241351434356","32125225161291432812956153470701420920","57581396896212069165074832684053318","208334880134461062258048259332876522588","335719502503452934305733877175439545402"],"threshold":0.9},"id":"ASB-A-498162425-a64a577f","signature_type":"Line","signature_version":"v1"},{"target":{"function":"checkInsertPermissions","file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"length":2850,"function_hash":"126846526632470062071384680087957547226"},"id":"ASB-A-498162425-b8cb3765","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/de5ca8f919063385b5d86582dd887c1a38af3099"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498162425.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["1100763490978900655977357542853925510","72091371309718869626626379837267393995","152394261834607310285061401703697682690","210230673607883471461907870469137126295","267568362834455264152958559695681847467","215313087084148692347610311166949092183","246545167393193003737354957596654680686","143422731397175817538758261599054254363","21531143555844241432954736306802070820","182392382368182097773645173322066821844","239291362901066692616822431778493185335","251366106983980160593371955470456156619","47035882787231076478780517658649637535","80659424451340184871579571861468650791","310876773204323529297570774264739999671","121839435819458235429397691696524883958","265993480603852303090348618825881296872"]},"id":"ASB-A-498162425-2e0574ca","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b","target":{"file":"src/com/android/providers/downloads/Helpers.java"}},{"id":"ASB-A-498162425-44780db1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"checkDestinationFilePathRestrictions"},"deprecated":false,"digest":{"length":851,"function_hash":"191790017511253499521390517376373064771"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkDownloadedFilePath"},"deprecated":false,"digest":{"length":910,"function_hash":"110967783211825894487055299495850689562"},"id":"ASB-A-498162425-49cf6059"},{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"line_hashes":["319968131732966878335492432862009169039","283905761946507337867765072941970407225","144766987770461267759917616369168644120","50531897741651730885254972958441239122","100814637638357964843970911157544461125","51178454138944312132638746331043883210","125115819644900896497385861423049676731","257277134168835120580914606770657116890","32795350332005576687995209872446582328","240716560623469246503577962139165236152","316130655847659994863251917282559811859","109891341816880214090045361456840921497","191044219971436116430067743241388972838","162643476413108576964635341222724178040","319668309734731209647266839764277727446","137798806865731016589499144751276129178","51981579517093587943744092330794157943","265220291524012738659067870049771226337","336219000401742417169987769310582193158","165524586795455585860520982098764462105","198259181563682615350334727860780633941","201649539840690409682269798813421944661","101326853097531343093972391082846738573","295709304328089267200943636095186664422","130041268595290425913739191158205504832","269767468591660554132272255809471483386","210167189556760666792958444910823800323","25705371495313585068333487775503027268","241864328414844809803604555230962056764","108587633537507210242609878158511307392","128797082458499271042020098054893634524","206595471633514484748500303191320843304","166337675263112384633214305208700952451","110310661001557351899419952197453418926","242689469119797169232603993138221452973","115813513611785974948206868770592190732","241616794146644658069325258645048770872","265327089288429881176664649899688069294","210364460122909675900110413275950559082","226764922388754556828136901533156579282","77767875361646141766523022975364985554","255199986323501933762178996818293922826","64144684215165488984949050918871853401","86556705182283327999759493629576323362","39093664468793664434394571349121065304","96354860121479526837624707418952346801","303261713221302820178984988521075568922","136193735816866371423231754184253908406","290277950795669339425373439792203756513","536342708549862246255287749372356259","173213216655434887255702715122605034611","30882435790888815960000715321992543333","277442550098369274042332338464579723480","35731442600192499278284464036798403322","154978508412848911859447069425734388038","60436304062155373351573421492785660455","169813889243416086375795945721364805234","333647114227027196994006207182456886735","253388394112225191698069999813240660875","207627754695244550627147867965141950202","301026251386690289143905678199733866909","139373199368672459398471529879729191420","50234125652040558252367006909075626633","283070460750551119341580442036188056431","179465081222007845257627473901042115916","244412650042084315859701740562716354949","239970075664917634686077128232748312540","252545784538556659435161403674235011058","275342365689127315746539714937377490430","309618802140636889772787913916612181017","336432534207396294580097801281934225545","2677754783487083420207765126854370181","39724400325374756756251823420936990649","26928668486169766095975640115014881125","241006191457185296232536050932186325279","128610881375541658409815341349168026501","55211809314445144230532090703814635263","258571426977471877897008773593995768825","198160419149913045260801041192177611263","41937874059107375334105613040290750065","31976645933064633274006855207865272793","23240658086840781933877818246403887585","201253792128560487628401689301035463390","111972060440901275913782053734781445741","18222140305972089824098412241351434356","32125225161291432812956153470701420920","57581396896212069165074832684053318","208334880134461062258048259332876522588","335719502503452934305733877175439545402"],"threshold":0.9},"id":"ASB-A-498162425-65043287","signature_type":"Line","signature_version":"v1"},{"target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFilenameValidInExternalPackage"},"deprecated":false,"digest":{"length":356,"function_hash":"171765556727096727770276995115664959155"},"id":"ASB-A-498162425-677bd0f1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b"},{"digest":{"function_hash":"126846526632470062071384680087957547226","length":2850},"id":"ASB-A-498162425-87a1c6bd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkInsertPermissions"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b","target":{"function":"logVerboseOpenFileInfo","file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"function_hash":"2570707937030247635270512663885589139","length":1188},"id":"ASB-A-498162425-c6fe2441","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b","target":{"function":"checkWhetherCallingAppHasAccess","file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"function_hash":"167558740467392864671434861872647200056","length":1144},"id":"ASB-A-498162425-cbcb92b1","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/97256a6df114dfa7093470c9d370d03c15bc419b"],"severity":"High","spl":"2026-11-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498162425.json"}},{"package":{"name":"platform/packages/providers/DownloadProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["319968131732966878335492432862009169039","283905761946507337867765072941970407225","144766987770461267759917616369168644120","50531897741651730885254972958441239122","100814637638357964843970911157544461125","51178454138944312132638746331043883210","125115819644900896497385861423049676731","257277134168835120580914606770657116890","32795350332005576687995209872446582328","240716560623469246503577962139165236152","316130655847659994863251917282559811859","109891341816880214090045361456840921497","191044219971436116430067743241388972838","162643476413108576964635341222724178040","319668309734731209647266839764277727446","137798806865731016589499144751276129178","51981579517093587943744092330794157943","265220291524012738659067870049771226337","336219000401742417169987769310582193158","165524586795455585860520982098764462105","198259181563682615350334727860780633941","201649539840690409682269798813421944661","101326853097531343093972391082846738573","295709304328089267200943636095186664422","130041268595290425913739191158205504832","269767468591660554132272255809471483386","210167189556760666792958444910823800323","25705371495313585068333487775503027268","241864328414844809803604555230962056764","108587633537507210242609878158511307392","128797082458499271042020098054893634524","206595471633514484748500303191320843304","166337675263112384633214305208700952451","110310661001557351899419952197453418926","242689469119797169232603993138221452973","115813513611785974948206868770592190732","241616794146644658069325258645048770872","265327089288429881176664649899688069294","210364460122909675900110413275950559082","226764922388754556828136901533156579282","77767875361646141766523022975364985554","255199986323501933762178996818293922826","64144684215165488984949050918871853401","86556705182283327999759493629576323362","39093664468793664434394571349121065304","96354860121479526837624707418952346801","303261713221302820178984988521075568922","136193735816866371423231754184253908406","290277950795669339425373439792203756513","536342708549862246255287749372356259","173213216655434887255702715122605034611","30882435790888815960000715321992543333","277442550098369274042332338464579723480","35731442600192499278284464036798403322","154978508412848911859447069425734388038","60436304062155373351573421492785660455","169813889243416086375795945721364805234","333647114227027196994006207182456886735","253388394112225191698069999813240660875","207627754695244550627147867965141950202","301026251386690289143905678199733866909","139373199368672459398471529879729191420","50234125652040558252367006909075626633","283070460750551119341580442036188056431","179465081222007845257627473901042115916","244412650042084315859701740562716354949","239970075664917634686077128232748312540","252545784538556659435161403674235011058","275342365689127315746539714937377490430","309618802140636889772787913916612181017","336432534207396294580097801281934225545","2677754783487083420207765126854370181","39724400325374756756251823420936990649","26928668486169766095975640115014881125","241006191457185296232536050932186325279","128610881375541658409815341349168026501","55211809314445144230532090703814635263","258571426977471877897008773593995768825","198160419149913045260801041192177611263","41937874059107375334105613040290750065","31976645933064633274006855207865272793","23240658086840781933877818246403887585","201253792128560487628401689301035463390","111972060440901275913782053734781445741","18222140305972089824098412241351434356","32125225161291432812956153470701420920","57581396896212069165074832684053318","208334880134461062258048259332876522588","335719502503452934305733877175439545402"],"threshold":0.9},"id":"ASB-A-498162425-1389ec86","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb","target":{"file":"src/com/android/providers/downloads/Helpers.java","function":"isFilenameValidInExternalPackage"},"deprecated":false,"digest":{"function_hash":"171765556727096727770276995115664959155","length":356},"id":"ASB-A-498162425-17b2935f","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb","target":{"file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"line_hashes":["1100763490978900655977357542853925510","72091371309718869626626379837267393995","152394261834607310285061401703697682690","210230673607883471461907870469137126295","267568362834455264152958559695681847467","215313087084148692347610311166949092183","246545167393193003737354957596654680686","143422731397175817538758261599054254363","21531143555844241432954736306802070820","182392382368182097773645173322066821844","239291362901066692616822431778493185335","251366106983980160593371955470456156619","47035882787231076478780517658649637535","80659424451340184871579571861468650791","310876773204323529297570774264739999671","121839435819458235429397691696524883958","265993480603852303090348618825881296872"],"threshold":0.9},"id":"ASB-A-498162425-1948d48d","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkInsertPermissions"},"deprecated":false,"digest":{"length":2850,"function_hash":"126846526632470062071384680087957547226"},"id":"ASB-A-498162425-194bae3b","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb","target":{"file":"src/com/android/providers/downloads/DownloadProvider.java","function":"checkDownloadedFilePath"},"deprecated":false,"digest":{"length":910,"function_hash":"110967783211825894487055299495850689562"},"id":"ASB-A-498162425-5d6a6b00","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"2570707937030247635270512663885589139","length":1188},"id":"ASB-A-498162425-6b8a4386","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb","target":{"function":"logVerboseOpenFileInfo","file":"src/com/android/providers/downloads/DownloadProvider.java"}},{"id":"ASB-A-498162425-992dcf1c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb","target":{"function":"checkWhetherCallingAppHasAccess","file":"src/com/android/providers/downloads/DownloadProvider.java"},"deprecated":false,"digest":{"function_hash":"167558740467392864671434861872647200056","length":1144}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/cbbf3dcb9835da5f5fc24cad26b102de568efacb","target":{"function":"checkDestinationFilePathRestrictions","file":"src/com/android/providers/downloads/Helpers.java"},"deprecated":false,"digest":{"function_hash":"191790017511253499521390517376373064771","length":851},"id":"ASB-A-498162425-c9563607"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498162425.json"}}],"schema_version":"1.9.2"}