In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"types": [
"DoS"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"id": "ASB-A-396667508-09e9399d",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"311776075868199209908180593235021278247",
"173554188953509075021848555997114625841",
"30994244569721521029653103736234205919",
"16544848603399734777459420411359972243",
"69187395976085701101404452460821305564",
"107330269270955045944742671467092557026",
"5057675959711498362234534126275630108",
"82010185885517143293113145326211704617",
"242529682537384182506986366557682501806",
"221944401727185269755334866930184879132",
"158448676480102414027779369708045930325",
"156920046477798560374823902624051824252",
"273027613730394784394737295736963397348",
"104424195872113355434228402279043544550",
"156233372356047225633113731636314392279",
"37427652773195948809491513767979418093",
"93166199624803918610661430068480261783",
"171498246101345202195297849406128970206",
"59795174511389018878761370653469910317",
"300043298138394808906312351494962799994",
"248496070369677747540641344587024256709",
"168516352214166090808396299173109141010",
"294448047507203347484002755347583574683",
"280256673906256791922308082785999670777",
"72694666756546133538567949547702548006"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-19fd929d",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "areNotificationsEnabledForPackage"
},
"digest": {
"function_hash": "50137030720129843182424868869123684399",
"length": 345.0
},
"signature_type": "Function",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4",
"signature_version": "v1"
},
{
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "getConversationNotificationChannel"
},
"deprecated": false,
"digest": {
"function_hash": "231246527256660435838079530375010976262",
"length": 480.0
},
"id": "ASB-A-396667508-424b8dfd",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-4e9b8e68",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "resolveNotificationUid"
},
"deprecated": false,
"digest": {
"function_hash": "207777736296645912941392049263076360237",
"length": 595.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-6e09ba0a",
"target": {
"file": "services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java",
"function": "setup"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "208068871326447281625678211215124308479",
"length": 1420.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-8030a6db",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "checkCallerIsSameApp"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "305445064151357916036679857594399755156",
"length": 295.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-db64af6e",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "getEffectsSuppressor"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "34004467386491868909730786709998970328",
"length": 320.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-e1774c06",
"target": {
"file": "services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"167501126716018587119275499810791912118",
"318486943131436126345940480897073881866",
"143651495922578221084417533520456015137",
"212789153438999280831028487049194161453",
"128300056028351732686437431211261181429",
"330860463999469096656304940898754894442",
"127257735946869828535420129665154153304",
"202405628641787956841393280434915673904",
"273644883567035735326125364280467292564",
"39610213993419028309327006183383145251",
"17413738809138397389695830717253062469",
"180606999226419907722329401448844541964",
"84933873814762606350458618195785045928",
"13797188950598143719055117428339577816",
"326241967822020216091373510351404593739",
"40041870310826370440010009241901796207",
"72243195534743323844656786369263517528",
"255286961527945673535438177890782077057"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-f5fc6cd4",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "validateAutomaticZenRule"
},
"digest": {
"function_hash": "194054172599855610475842191744319332234",
"length": 2181.0
},
"signature_type": "Function",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4",
"signature_version": "v1"
}
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4",
"https://android.googlesource.com/platform/frameworks/base/+/8a638b787a7d2f4aaf3cce21333fa7a42514dfce"
]
}
{
"types": [
"DoS"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"id": "ASB-A-396667508-13f7633b",
"target": {
"file": "services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java",
"function": "setup"
},
"deprecated": false,
"digest": {
"function_hash": "53921670342947996092453171383702712902",
"length": 1323.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-2ec6e55c",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"311776075868199209908180593235021278247",
"173554188953509075021848555997114625841",
"30994244569721521029653103736234205919",
"16544848603399734777459420411359972243",
"69187395976085701101404452460821305564",
"107330269270955045944742671467092557026",
"5057675959711498362234534126275630108",
"82010185885517143293113145326211704617",
"242529682537384182506986366557682501806",
"221944401727185269755334866930184879132",
"158448676480102414027779369708045930325",
"156920046477798560374823902624051824252",
"273027613730394784394737295736963397348",
"104424195872113355434228402279043544550",
"156233372356047225633113731636314392279",
"37427652773195948809491513767979418093",
"93166199624803918610661430068480261783",
"171498246101345202195297849406128970206",
"59795174511389018878761370653469910317",
"300043298138394808906312351494962799994",
"248496070369677747540641344587024256709",
"168516352214166090808396299173109141010",
"294448047507203347484002755347583574683",
"280256673906256791922308082785999670777",
"72694666756546133538567949547702548006"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-41730810",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "getEffectsSuppressor"
},
"digest": {
"function_hash": "34004467386491868909730786709998970328",
"length": 320.0
},
"signature_type": "Function",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-9332bda0",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "resolveNotificationUid"
},
"deprecated": false,
"digest": {
"function_hash": "207777736296645912941392049263076360237",
"length": 595.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-b541f173",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "checkCallerIsSameApp"
},
"deprecated": false,
"digest": {
"function_hash": "305445064151357916036679857594399755156",
"length": 295.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-c09abf9f",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "areNotificationsEnabledForPackage"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "37690238828963878000712913465981266033",
"length": 353.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-d3f7806f",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "validateAutomaticZenRule"
},
"deprecated": false,
"digest": {
"function_hash": "21493660492147640206822512447945319315",
"length": 1572.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-d61aa2a6",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "getConversationNotificationChannel"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "231246527256660435838079530375010976262",
"length": 480.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-fa51bb87",
"target": {
"file": "services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"167501126716018587119275499810791912118",
"318486943131436126345940480897073881866",
"143651495922578221084417533520456015137",
"212789153438999280831028487049194161453",
"128300056028351732686437431211261181429",
"330860463999469096656304940898754894442",
"127257735946869828535420129665154153304",
"202405628641787956841393280434915673904",
"273644883567035735326125364280467292564",
"39610213993419028309327006183383145251",
"17413738809138397389695830717253062469",
"180606999226419907722329401448844541964",
"84933873814762606350458618195785045928",
"13797188950598143719055117428339577816",
"326241967822020216091373510351404593739",
"34501281023628935063712763780394219378",
"323289490898469783465079980922881859150",
"61151563059221844998895245381018526678"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295",
"signature_version": "v1"
}
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"
]
}
{
"types": [
"DoS"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"id": "ASB-A-396667508-24ce6e6a",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "getEffectsSuppressor"
},
"deprecated": false,
"digest": {
"function_hash": "34004467386491868909730786709998970328",
"length": 320.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-30b926fb",
"target": {
"file": "services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java",
"function": "setup"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "208068871326447281625678211215124308479",
"length": 1420.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-3d880384",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"311776075868199209908180593235021278247",
"173554188953509075021848555997114625841",
"30994244569721521029653103736234205919",
"16544848603399734777459420411359972243",
"69187395976085701101404452460821305564",
"107330269270955045944742671467092557026",
"5057675959711498362234534126275630108",
"82010185885517143293113145326211704617",
"242529682537384182506986366557682501806",
"221944401727185269755334866930184879132",
"158448676480102414027779369708045930325",
"156920046477798560374823902624051824252",
"273027613730394784394737295736963397348",
"104424195872113355434228402279043544550",
"156233372356047225633113731636314392279",
"37427652773195948809491513767979418093",
"93166199624803918610661430068480261783",
"171498246101345202195297849406128970206",
"59795174511389018878761370653469910317",
"300043298138394808906312351494962799994",
"248496070369677747540641344587024256709",
"168516352214166090808396299173109141010",
"294448047507203347484002755347583574683",
"280256673906256791922308082785999670777",
"72694666756546133538567949547702548006"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-4a9e7b75",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "resolveNotificationUid"
},
"deprecated": false,
"digest": {
"function_hash": "207777736296645912941392049263076360237",
"length": 595.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4",
"signature_version": "v1"
},
{
"signature_type": "Function",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "areNotificationsEnabledForPackage"
},
"deprecated": false,
"digest": {
"function_hash": "50137030720129843182424868869123684399",
"length": 345.0
},
"id": "ASB-A-396667508-74b23183",
"source": "https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-83fd7c6e",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "validateAutomaticZenRule"
},
"deprecated": false,
"digest": {
"function_hash": "59191339780957130539963275365137952241",
"length": 1291.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-c37c533e",
"target": {
"file": "services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"167501126716018587119275499810791912118",
"318486943131436126345940480897073881866",
"143651495922578221084417533520456015137",
"212789153438999280831028487049194161453",
"128300056028351732686437431211261181429",
"330860463999469096656304940898754894442",
"127257735946869828535420129665154153304",
"202405628641787956841393280434915673904",
"273644883567035735326125364280467292564",
"39610213993419028309327006183383145251",
"17413738809138397389695830717253062469",
"180606999226419907722329401448844541964",
"84933873814762606350458618195785045928",
"13797188950598143719055117428339577816",
"326241967822020216091373510351404593739",
"40041870310826370440010009241901796207",
"72243195534743323844656786369263517528",
"255286961527945673535438177890782077057"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-e5c10250",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "checkCallerIsSameApp"
},
"deprecated": false,
"digest": {
"function_hash": "305445064151357916036679857594399755156",
"length": 295.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-eb69edfc",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "getConversationNotificationChannel"
},
"deprecated": false,
"digest": {
"function_hash": "231246527256660435838079530375010976262",
"length": 480.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4",
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4"
],
"severity": "High"
}
{
"types": [
"DoS"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"id": "ASB-A-396667508-120238b0",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"311776075868199209908180593235021278247",
"173554188953509075021848555997114625841",
"30994244569721521029653103736234205919",
"16544848603399734777459420411359972243",
"69187395976085701101404452460821305564",
"230858874161068579965200542526066464547",
"248073214681357485477302217045111523716",
"184646465235922378966532768242104740060",
"320705647374390279630953455366129305776",
"259719614258695601559025597029121012157",
"105537389429175060221598269746763207726",
"110570907393677328033717206344777840785",
"36817893150851478897978189590751813895",
"168516352214166090808396299173109141010",
"294448047507203347484002755347583574683",
"280256673906256791922308082785999670777",
"72694666756546133538567949547702548006"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-49372ecf",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "checkCallerIsSameApp"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "305445064151357916036679857594399755156",
"length": 295.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-bbeaba4e",
"target": {
"file": "services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java",
"function": "setup"
},
"deprecated": false,
"digest": {
"function_hash": "53921670342947996092453171383702712902",
"length": 1323.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-db496b4d",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "getConversationNotificationChannel"
},
"deprecated": false,
"digest": {
"function_hash": "231246527256660435838079530375010976262",
"length": 480.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-eedb3b3a",
"target": {
"file": "services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"
},
"digest": {
"line_hashes": [
"167501126716018587119275499810791912118",
"318486943131436126345940480897073881866",
"143651495922578221084417533520456015137",
"31009025591479672692194662111776868673",
"252160476245399169130789295909641112834",
"155877341641905023578416530582262621472",
"109056397751080462341968595360174433210",
"252237268444944532130811304789253907201",
"139197936973216126785468848020887968055",
"120046709075674548549695691740964987837",
"155821714203419777662362063457669415519",
"311602187478921553778809534058826673155",
"67774471323848770003077394129421048957",
"266289982402771435401118611319514875314",
"80722307318898221249257415238934053817",
"289359513436208212386337049230003429018",
"339718667904611365457682021892769363550",
"330338419510567171601645924086002668144",
"68947804206987492735004414115348543235",
"34501281023628935063712763780394219378",
"323289490898469783465079980922881859150",
"61151563059221844998895245381018526678"
],
"threshold": 0.9
},
"signature_type": "Line",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705",
"signature_version": "v1"
},
{
"id": "ASB-A-396667508-fbd0836c",
"target": {
"file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
"function": "areNotificationsEnabledForPackage"
},
"deprecated": false,
"digest": {
"function_hash": "37690238828963878000712913465981266033",
"length": 353.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705",
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705"
],
"severity": "High"
}