ASB-A-435188844: Android/platform/frameworks/base vulnerability

Q: What level of access does an attacker need to exploit this issue?

Exploitation requires local access on the affected device. No additional execution privileges are needed, and no user interaction is required.

Q: What is the likely impact of successful exploitation?

A successful exploit could disclose information across users on the device because permission checks are missing in multiple affected files.

Published Nov 1, 2026

Updated

In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

10 affected componentsFixes available

android/platform/frameworks/base>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/packages/modules/intentresolver>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/frameworks/base>=15:0<15:2026-11-01

15:2026-11-01

android/platform/packages/modules/intentresolver>=15:0<15:2026-11-01

15:2026-11-01

android/platform/frameworks/base>=16:0<16:2026-11-01

16:2026-11-01

android/platform/packages/modules/intentresolver>=16:0<16:2026-11-01

16:2026-11-01

android/platform/frameworks/base>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/packages/modules/intentresolver>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/packages/modules/intentresolver>=17:0<17:2026-11-01

17:2026-11-01

android/platform/frameworks/base>=14:0<14:2026-11-01

14:2026-11-01

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 17-qpr2-next:2026-11-01
Upgrade
Upgrade android/platform/packages/modules/IntentResolver to a version that resolves this vulnerability.
Fixed in 17-qpr2-next:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 15:2026-11-01
Upgrade
Upgrade android/platform/packages/modules/IntentResolver to a version that resolves this vulnerability.
Fixed in 15:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 16:2026-11-01
Upgrade
Upgrade android/platform/packages/modules/IntentResolver to a version that resolves this vulnerability.
Fixed in 16:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 16-qpr2:2026-11-01
Upgrade
Upgrade android/platform/packages/modules/IntentResolver to a version that resolves this vulnerability.
Fixed in 16-qpr2:2026-11-01
Upgrade
Upgrade android/platform/packages/modules/IntentResolver to a version that resolves this vulnerability.
Fixed in 17:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 14:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Exploitation requires local access on the affected device. No additional execution privileges are needed, and no user interaction is required.

What is the likely impact of successful exploitation?

A successful exploit could disclose information across users on the device because permission checks are missing in multiple affected files.

ASB-A-435188844: Android/platform/frameworks/base vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?