ASB-A-281543351

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-281543351.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-281543351

Aliases

A-281543351
CVE-2026-59008

Published

2026-11-01T00:00:00Z

Modified

2026-11-02T17:11:09Z

Summary

[none]

Details

In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2026-11-01

Affected packages

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

17-qpr2-next:0

Fixed

17-qpr2-next:2026-11-01

Affected versions

Other

17-qpr2-next

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/c9c04f595d904aff21ebdd67986b5a9250d6406a"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "211318072260311163843113923133829554985",
                "length":  1420
            },
            "id":  "ASB-A-281543351-05987da0",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/c9c04f595d904aff21ebdd67986b5a9250d6406a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
                "function":  "setApplicationRestrictions"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "301498066083663182628863673520228247864",
                    "104997068357892947757237010302939544677",
                    "243363565323553501550817353154413927248",
                    "84731709377475183296577555973772744279",
                    "23031151675285858949427054582207703380",
                    "322476890247886008795765985880236611224",
                    "142036694912208495280016163075122035923",
                    "231651472917796936300567924298911753058",
                    "165720907060463567974881280086468749577",
                    "136145168668719442673160873764216177177",
                    "132831946292049933711304198678708505462",
                    "232124807684297307563293725678044138016",
                    "1693210580421343794575933473723223526",
                    "219591593475994794802162696771360920162",
                    "179331476582465301947662591680083343067",
                    "97835455985896156180627963183863811908",
                    "163128951422547494852641933113485676640",
                    "117184083143677443903774130300134904653"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-281543351-65f31440",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/c9c04f595d904aff21ebdd67986b5a9250d6406a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
            }
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-281543351.json"

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

16-qpr2:0

Fixed

16-qpr2:2026-11-01

Affected versions

Other

16-qpr2

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/f7580c2f8ee95e4f00782ed8c1723fdfa03efc49"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "155380206274187637560359198686814129758",
                "length":  1315
            },
            "id":  "ASB-A-281543351-9f2fe952",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f7580c2f8ee95e4f00782ed8c1723fdfa03efc49",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
                "function":  "setApplicationRestrictions"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "154079091873617040419716932993632036454",
                    "325747374602964068067104091483481064516",
                    "270374063380347850549185748710587946741",
                    "251812851855089251532965546011231901279",
                    "301498066083663182628863673520228247864",
                    "104997068357892947757237010302939544677",
                    "243363565323553501550817353154413927248",
                    "84731709377475183296577555973772744279",
                    "23031151675285858949427054582207703380",
                    "322476890247886008795765985880236611224",
                    "44059932035731310382507253441592859250",
                    "275353170412314842752212700654103826686",
                    "191772039468551958370256811737434370048",
                    "157199174091346150416134507888407439660",
                    "127888332903425331666803852534686701817",
                    "49165030303259782692761457352416831203",
                    "52846591566841198819274449032809410235",
                    "143210234346223914550456868347891703523",
                    "299329960328872765693377645990616110779",
                    "206128379537443019541294379444219462724",
                    "26414224145330728602411073707128744757"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-281543351-d006747e",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f7580c2f8ee95e4f00782ed8c1723fdfa03efc49",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
            }
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-281543351.json"

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

17:0

Fixed

17:2026-11-01

Affected versions

Other

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/598eddaabe731afbfb3c9265d36b637a346e5604"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "211318072260311163843113923133829554985",
                "length":  1420
            },
            "id":  "ASB-A-281543351-044a1057",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/598eddaabe731afbfb3c9265d36b637a346e5604",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
                "function":  "setApplicationRestrictions"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "301498066083663182628863673520228247864",
                    "104997068357892947757237010302939544677",
                    "243363565323553501550817353154413927248",
                    "84731709377475183296577555973772744279",
                    "23031151675285858949427054582207703380",
                    "322476890247886008795765985880236611224",
                    "142036694912208495280016163075122035923",
                    "231651472917796936300567924298911753058",
                    "165720907060463567974881280086468749577",
                    "136145168668719442673160873764216177177",
                    "132831946292049933711304198678708505462",
                    "232124807684297307563293725678044138016",
                    "1693210580421343794575933473723223526",
                    "219591593475994794802162696771360920162",
                    "179331476582465301947662591680083343067",
                    "97835455985896156180627963183863811908",
                    "163128951422547494852641933113485676640",
                    "117184083143677443903774130300134904653"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-281543351-dcbf7255",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/598eddaabe731afbfb3c9265d36b637a346e5604",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
            }
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-281543351.json"