{"id":"ASB-A-498588487","details":"In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-498588487","CVE-2026-28660"],"modified":"2026-09-08T15:39:03.104189951Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"deprecated":false,"digest":{"line_hashes":["66135735751788773994729551311076250056","17910172518135811976296703531016978916","287774087475138469326021921073413644420","223121719778069458825802352126035715283","283945616943664523103650871158911531903","239834099930053202613292695489726444047","18168249603378674861772506099571325668","154704893789851052213470597858868812451","243659821465520410654506795647150838431","135603085226033825165391651123515321353","168908619102541483615172151608887724822","75904538119850232626577435422625396477"],"threshold":0.9},"id":"ASB-A-498588487-167071d3","match_only_versions":["17-next"],"signature_type":"Line"},{"digest":{"function_hash":"194281981762645415111628158575904127208","length":624},"id":"ASB-A-498588487-5d553d66","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"getAllSessions"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"getAllSessions"},"deprecated":false,"digest":{"function_hash":"208991343523786115795661376446720704144","length":632},"id":"ASB-A-498588487-61c28e27","match_only_versions":["17-next"],"signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["95570531676616451031617073987169738739","85931253098282894893778629248184580582","60347845863705867768217320182539210410","291330430072008320027449604326519765787"],"threshold":0.9},"id":"ASB-A-498588487-96bf12b2","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bbeee4f37c25a393d9f217cbfdc3c443e9153fa2"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498588487.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2026-09-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["95570531676616451031617073987169738739","85931253098282894893778629248184580582","60347845863705867768217320182539210410","291330430072008320027449604326519765787"]},"id":"ASB-A-498588487-1badc3df","match_only_versions":["15"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"getAllSessions"},"deprecated":false,"digest":{"length":583,"function_hash":"288123369583420181910922017617663674079"},"id":"ASB-A-498588487-afef89e1","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"getAllSessions"},"deprecated":false,"digest":{"function_hash":"208991343523786115795661376446720704144","length":632},"id":"ASB-A-498588487-b867d9e6","match_only_versions":["15"],"signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["66135735751788773994729551311076250056","17910172518135811976296703531016978916","287774087475138469326021921073413644420","223121719778069458825802352126035715283","283945616943664523103650871158911531903","239834099930053202613292695489726444047","18168249603378674861772506099571325668","154704893789851052213470597858868812451","243659821465520410654506795647150838431","135603085226033825165391651123515321353","168908619102541483615172151608887724822","75904538119850232626577435422625396477"]},"id":"ASB-A-498588487-f8f17551","match_only_versions":["15"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0fe043d418e110af7047ac0ccf981ad556085eb5"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498588487.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9"],"severity":"High","spl":"2026-09-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"194281981762645415111628158575904127208","length":624},"id":"ASB-A-498588487-54889ab9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"getAllSessions"}},{"id":"ASB-A-498588487-72c9d8ec","match_only_versions":["16"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["95570531676616451031617073987169738739","85931253098282894893778629248184580582","60347845863705867768217320182539210410","291330430072008320027449604326519765787"]}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9","target":{"function":"getAllSessions","file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"deprecated":false,"digest":{"function_hash":"208991343523786115795661376446720704144","length":632},"id":"ASB-A-498588487-b3871924","match_only_versions":["16"]},{"digest":{"threshold":0.9,"line_hashes":["66135735751788773994729551311076250056","17910172518135811976296703531016978916","287774087475138469326021921073413644420","223121719778069458825802352126035715283","283945616943664523103650871158911531903","239834099930053202613292695489726444047","18168249603378674861772506099571325668","154704893789851052213470597858868812451","243659821465520410654506795647150838431","135603085226033825165391651123515321353","168908619102541483615172151608887724822","75904538119850232626577435422625396477"]},"id":"ASB-A-498588487-beed7251","match_only_versions":["16"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d6da775ff1b02c66ec97c7c22987ca0b8dca14b9","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498588487.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81"],"severity":"High","spl":"2026-09-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-498588487-7ac6ce73","match_only_versions":["16-qpr2"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"getAllSessions"},"deprecated":false,"digest":{"function_hash":"208991343523786115795661376446720704144","length":632}},{"deprecated":false,"digest":{"function_hash":"194281981762645415111628158575904127208","length":624},"id":"ASB-A-498588487-9ce2d559","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"getAllSessions"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["66135735751788773994729551311076250056","17910172518135811976296703531016978916","287774087475138469326021921073413644420","223121719778069458825802352126035715283","283945616943664523103650871158911531903","239834099930053202613292695489726444047","18168249603378674861772506099571325668","154704893789851052213470597858868812451","243659821465520410654506795647150838431","135603085226033825165391651123515321353","168908619102541483615172151608887724822","75904538119850232626577435422625396477"]},"id":"ASB-A-498588487-c3720f1a","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-498588487-ed73b38a","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/77a4bbd08d0146f237817018f02ef331812bbc81","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["95570531676616451031617073987169738739","85931253098282894893778629248184580582","60347845863705867768217320182539210410","291330430072008320027449604326519765787"]}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498588487.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"id":"ASB-A-498588487-411c5701","match_only_versions":["17"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["95570531676616451031617073987169738739","85931253098282894893778629248184580582","60347845863705867768217320182539210410","291330430072008320027449604326519765787"]}},{"target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["66135735751788773994729551311076250056","17910172518135811976296703531016978916","287774087475138469326021921073413644420","223121719778069458825802352126035715283","283945616943664523103650871158911531903","239834099930053202613292695489726444047","18168249603378674861772506099571325668","154704893789851052213470597858868812451","243659821465520410654506795647150838431","135603085226033825165391651123515321353","168908619102541483615172151608887724822","75904538119850232626577435422625396477"]},"id":"ASB-A-498588487-4f041cbb","match_only_versions":["17"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59"},{"digest":{"function_hash":"208991343523786115795661376446720704144","length":632},"id":"ASB-A-498588487-eb88d8cd","match_only_versions":["17"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59","target":{"file":"services/core/java/com/android/server/pm/PackageInstallerService.java","function":"getAllSessions"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59","target":{"file":"services/core/java/com/android/server/pm/LauncherAppsService.java","function":"getAllSessions"},"deprecated":false,"digest":{"function_hash":"194281981762645415111628158575904127208","length":624},"id":"ASB-A-498588487-ebb6ebb3","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0b8be6c1a258a20aaad18c5a41dd49fd34666a59"],"severity":"High","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-498588487.json"}}],"schema_version":"1.9.0"}