ASB-A-416490321

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-416490321.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-416490321
Aliases
Published
2025-12-01T00:00:00Z
Modified
2026-04-02T16:07:38.132481Z
Summary
[none]
Details

In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2-next:0
Fixed
16-qpr2-next:2025-12-01

Affected versions

Other
16-qpr2-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/2c637955ab388773c234268ceb108372eaab2200"
    ],
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2c637955ab388773c234268ceb108372eaab2200",
            "signature_type": "Line",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "276897995533553151856173741412933936226",
                    "263883961226356301595623142591329635561",
                    "236053623429280994372546549356335850078",
                    "86907914653025720359072416354381664774",
                    "313327869716555050030131011782412835775",
                    "266779834976702592228986342439662870125",
                    "284604982591840776653925392976721406264",
                    "295400564336163138098009546482765877088",
                    "168326625280130527874133286572641891435",
                    "283694341387728296423584995252718914627",
                    "111661843283796801641440801992309810692",
                    "99568029374753710372798575732837474030",
                    "21838045749582029720805560667835343211",
                    "12059556873219892432806907966399798737",
                    "216616085739766141235044241718371341407"
                ]
            },
            "id": "ASB-A-416490321-09594a17",
            "target": {
                "file": "core/java/android/app/AppOpsManager.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2c637955ab388773c234268ceb108372eaab2200",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "78334486128507158482994103539811495797",
                "length": 485.0
            },
            "id": "ASB-A-416490321-2e5e52b8",
            "target": {
                "function": "getPackagesForOps",
                "file": "core/java/android/app/AppOpsManager.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2c637955ab388773c234268ceb108372eaab2200",
            "signature_type": "Line",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "226232822886946447527178077525081945906",
                    "285687216582866042273411684981197205797",
                    "229466725191791125238583108919003793566",
                    "334407227210358995610428852715209744087",
                    "195873095192770407357522132084302058693",
                    "179674383965092675033340139858573546206",
                    "91300512756388223152278984262264295783",
                    "136466813743366407508487038657714607393",
                    "98182293265124673988837769921912408713",
                    "236509537353531872273707188062991204595",
                    "160804062386182573974681624592952490142",
                    "259288157474043206263228544162643810955",
                    "115647055362659947286755720992958479613",
                    "256395035412958004442114732854373905696",
                    "258918256806522354674352817732088176329",
                    "113617849721494071749342590041140837886",
                    "219150378069941443485159900474118195547",
                    "68618454673334817176100296773805061820",
                    "33695723627737050972833778006378378268",
                    "171105303850951652599136614468774359665"
                ]
            },
            "id": "ASB-A-416490321-583e1833",
            "target": {
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2c637955ab388773c234268ceb108372eaab2200",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "93111154748997859951663410199732539260",
                "length": 192.0
            },
            "id": "ASB-A-416490321-61a73429",
            "target": {
                "function": "getPackagesForOps",
                "file": "core/java/android/app/AppOpsManager.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2c637955ab388773c234268ceb108372eaab2200",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "4491902149715576891550231049582172774",
                "length": 93.0
            },
            "id": "ASB-A-416490321-8fd61f09",
            "target": {
                "function": "getPackagesForOps",
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2c637955ab388773c234268ceb108372eaab2200",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "192436071487554944017278388249114425417",
                "length": 935.0
            },
            "id": "ASB-A-416490321-c18a7474",
            "target": {
                "function": "getPackagesForOpsForDevice",
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        }
    ],
    "spl": "2025-12-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-416490321.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-12-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/bd1eff349d514a53838df08ae097380d21c08c67"
    ],
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/bd1eff349d514a53838df08ae097380d21c08c67",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "192436071487554944017278388249114425417",
                "length": 935.0
            },
            "id": "ASB-A-416490321-092d05e0",
            "target": {
                "function": "getPackagesForOpsForDevice",
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/bd1eff349d514a53838df08ae097380d21c08c67",
            "signature_type": "Line",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "276897995533553151856173741412933936226",
                    "263883961226356301595623142591329635561",
                    "236053623429280994372546549356335850078",
                    "86907914653025720359072416354381664774",
                    "313327869716555050030131011782412835775",
                    "266779834976702592228986342439662870125",
                    "284604982591840776653925392976721406264",
                    "295400564336163138098009546482765877088",
                    "168326625280130527874133286572641891435",
                    "283694341387728296423584995252718914627",
                    "111661843283796801641440801992309810692",
                    "99568029374753710372798575732837474030",
                    "21838045749582029720805560667835343211",
                    "12059556873219892432806907966399798737",
                    "216616085739766141235044241718371341407"
                ]
            },
            "id": "ASB-A-416490321-0dca7ead",
            "target": {
                "file": "core/java/android/app/AppOpsManager.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/bd1eff349d514a53838df08ae097380d21c08c67",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "93111154748997859951663410199732539260",
                "length": 192.0
            },
            "id": "ASB-A-416490321-b99bc292",
            "target": {
                "function": "getPackagesForOps",
                "file": "core/java/android/app/AppOpsManager.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/bd1eff349d514a53838df08ae097380d21c08c67",
            "signature_type": "Line",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "226232822886946447527178077525081945906",
                    "285687216582866042273411684981197205797",
                    "229466725191791125238583108919003793566",
                    "334407227210358995610428852715209744087",
                    "266367977499092783760056923366870508962",
                    "283925731075049030647093880284423416387",
                    "89374406187834599121683175605148286692",
                    "86756713135538830368633563065622404564",
                    "236509537353531872273707188062991204595",
                    "160804062386182573974681624592952490142",
                    "259288157474043206263228544162643810955",
                    "115647055362659947286755720992958479613",
                    "256395035412958004442114732854373905696",
                    "258918256806522354674352817732088176329",
                    "113617849721494071749342590041140837886",
                    "219150378069941443485159900474118195547",
                    "68618454673334817176100296773805061820",
                    "33695723627737050972833778006378378268",
                    "171105303850951652599136614468774359665"
                ]
            },
            "id": "ASB-A-416490321-d49ff0ee",
            "target": {
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/bd1eff349d514a53838df08ae097380d21c08c67",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "4491902149715576891550231049582172774",
                "length": 93.0
            },
            "id": "ASB-A-416490321-e6cd43a0",
            "target": {
                "function": "getPackagesForOps",
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/bd1eff349d514a53838df08ae097380d21c08c67",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "78334486128507158482994103539811495797",
                "length": 485.0
            },
            "id": "ASB-A-416490321-ec6cfc90",
            "target": {
                "function": "getPackagesForOps",
                "file": "core/java/android/app/AppOpsManager.java"
            }
        }
    ],
    "spl": "2025-12-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-416490321.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2025-12-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/aff2a8f38eb45e2c8f3321570e050c336a45b4bb"
    ],
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/aff2a8f38eb45e2c8f3321570e050c336a45b4bb",
            "signature_type": "Line",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "276897995533553151856173741412933936226",
                    "263883961226356301595623142591329635561",
                    "236053623429280994372546549356335850078",
                    "86907914653025720359072416354381664774",
                    "313327869716555050030131011782412835775",
                    "266779834976702592228986342439662870125",
                    "284604982591840776653925392976721406264",
                    "295400564336163138098009546482765877088",
                    "168326625280130527874133286572641891435",
                    "283694341387728296423584995252718914627",
                    "111661843283796801641440801992309810692",
                    "99568029374753710372798575732837474030",
                    "21838045749582029720805560667835343211",
                    "12059556873219892432806907966399798737",
                    "216616085739766141235044241718371341407"
                ]
            },
            "id": "ASB-A-416490321-201339ee",
            "target": {
                "file": "core/java/android/app/AppOpsManager.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/aff2a8f38eb45e2c8f3321570e050c336a45b4bb",
            "signature_type": "Line",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "226232822886946447527178077525081945906",
                    "285687216582866042273411684981197205797",
                    "229466725191791125238583108919003793566",
                    "334407227210358995610428852715209744087",
                    "266367977499092783760056923366870508962",
                    "283925731075049030647093880284423416387",
                    "321344061879275562792609391387676069597",
                    "98182293265124673988837769921912408713",
                    "236509537353531872273707188062991204595",
                    "160804062386182573974681624592952490142",
                    "259288157474043206263228544162643810955",
                    "115647055362659947286755720992958479613",
                    "256395035412958004442114732854373905696",
                    "258918256806522354674352817732088176329",
                    "113617849721494071749342590041140837886",
                    "219150378069941443485159900474118195547",
                    "68618454673334817176100296773805061820",
                    "33695723627737050972833778006378378268",
                    "171105303850951652599136614468774359665"
                ]
            },
            "id": "ASB-A-416490321-34fc5736",
            "target": {
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/aff2a8f38eb45e2c8f3321570e050c336a45b4bb",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "192436071487554944017278388249114425417",
                "length": 935.0
            },
            "id": "ASB-A-416490321-99a40b72",
            "target": {
                "function": "getPackagesForOpsForDevice",
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/aff2a8f38eb45e2c8f3321570e050c336a45b4bb",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "4491902149715576891550231049582172774",
                "length": 93.0
            },
            "id": "ASB-A-416490321-a34ed3ed",
            "target": {
                "function": "getPackagesForOps",
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/aff2a8f38eb45e2c8f3321570e050c336a45b4bb",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "93111154748997859951663410199732539260",
                "length": 192.0
            },
            "id": "ASB-A-416490321-ccef8233",
            "target": {
                "function": "getPackagesForOps",
                "file": "core/java/android/app/AppOpsManager.java"
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/aff2a8f38eb45e2c8f3321570e050c336a45b4bb",
            "signature_type": "Function",
            "deprecated": false,
            "digest": {
                "function_hash": "78334486128507158482994103539811495797",
                "length": 485.0
            },
            "id": "ASB-A-416490321-d15e1c7f",
            "target": {
                "function": "getPackagesForOps",
                "file": "core/java/android/app/AppOpsManager.java"
            }
        }
    ],
    "spl": "2025-12-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-416490321.json"