Skip to content
OpenAdvisories
Low · 3.3 CVE-2026-28660 EUVD-2026-73990GHSA-4cw6-2xfr-c3x9

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local informa…

Published Sep 8, 2026 · Updated Sep 10, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16, 15 —

Advisories 1

References