ASB-A-426205822

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-426205822.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-426205822
Aliases
  • A-426205822
  • CVE-2025-48576
Published
2025-12-01T00:00:00Z
Modified
2025-12-12T17:34:10.305701Z
Summary
[none]
Details

In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2-next:0
Fixed
16-qpr2-next:2025-12-01

Affected versions

Other

16-qpr2-next

Ecosystem specific 

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6077349a00fdac577592284eadddd18b73c0262e",
            "id": "ASB-A-426205822-9073851a",
            "signature_type": "Line",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "156231198521029386367772624088264440536",
                    "166590874105198397400184752317366151185",
                    "142312285236974532748207548786544031864",
                    "224759384226269947634896476210768565128",
                    "273862767101193226214936188826193783458",
                    "160334047897406468878782098239296781360",
                    "259814483919499760002670504094810759732",
                    "139878874909356672422378716715190489330",
                    "257428999567353744636456650756597163865",
                    "147406559676856576040361899110836963861",
                    "210095457782704169357473347111716394756",
                    "232377478899324234260459727003642332215",
                    "265223815689037363549003814527889341008",
                    "289270476180375604764248269967787271920",
                    "7905508669504822563421408945645979942",
                    "237772547329364885356401856943482803845",
                    "119979962439139037617426161121650167944",
                    "222669569709145527623430150853794880862",
                    "267025157395555558592415365185653145256",
                    "278553020777735491722857509097993694220",
                    "246117460154104412709251356387301827344"
                ]
            },
            "deprecated": false
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6077349a00fdac577592284eadddd18b73c0262e",
            "id": "ASB-A-426205822-97639073",
            "signature_type": "Function",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
                "function": "updateNotificationChannelGroupFromPrivilegedListener"
            },
            "digest": {
                "function_hash": "89499826374144785962430699782045502392",
                "length": 427.0
            },
            "deprecated": false
        }
    ],
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/6077349a00fdac577592284eadddd18b73c0262e"
    ],
    "types": [
        "DoS"
    ]
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-12-01

Affected versions

Other

15

Ecosystem specific 

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4572210097f6d0fa87c33df218a30b6c8868e7bb",
            "id": "ASB-A-426205822-5a57f16e",
            "signature_type": "Line",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "176441479915387707227313344909083853787",
                    "166590874105198397400184752317366151185",
                    "142312285236974532748207548786544031864",
                    "224759384226269947634896476210768565128",
                    "273862767101193226214936188826193783458",
                    "128568650583489736071598113486857788458",
                    "46368388901761796622481510279165214212",
                    "172560882202241314215144484613695339854",
                    "273245529857010963395257503193324442747",
                    "12475769459500934221664361078733686918",
                    "267025157395555558592415365185653145256",
                    "278553020777735491722857509097993694220",
                    "246117460154104412709251356387301827344"
                ]
            },
            "deprecated": false
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4572210097f6d0fa87c33df218a30b6c8868e7bb",
            "id": "ASB-A-426205822-953595a5",
            "signature_type": "Function",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
                "function": "updateNotificationChannelGroupFromPrivilegedListener"
            },
            "digest": {
                "function_hash": "138959303660013668700300678030113879416",
                "length": 255.0
            },
            "deprecated": false
        }
    ],
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/4572210097f6d0fa87c33df218a30b6c8868e7bb"
    ],
    "types": [
        "DoS"
    ]
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2025-12-01

Affected versions

Other

16

Ecosystem specific 

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6d846a1a76fd2a45cf4cd9575673db2644b153fc",
            "id": "ASB-A-426205822-17990d1e",
            "signature_type": "Line",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "156231198521029386367772624088264440536",
                    "166590874105198397400184752317366151185",
                    "142312285236974532748207548786544031864",
                    "224759384226269947634896476210768565128",
                    "273862767101193226214936188826193783458",
                    "128568650583489736071598113486857788458",
                    "46368388901761796622481510279165214212",
                    "172560882202241314215144484613695339854",
                    "273245529857010963395257503193324442747",
                    "12475769459500934221664361078733686918",
                    "267025157395555558592415365185653145256",
                    "278553020777735491722857509097993694220",
                    "246117460154104412709251356387301827344"
                ]
            },
            "deprecated": false
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/6d846a1a76fd2a45cf4cd9575673db2644b153fc",
            "id": "ASB-A-426205822-bebd79cb",
            "signature_type": "Function",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
                "function": "updateNotificationChannelGroupFromPrivilegedListener"
            },
            "digest": {
                "function_hash": "138959303660013668700300678030113879416",
                "length": 255.0
            },
            "deprecated": false
        }
    ],
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/6d846a1a76fd2a45cf4cd9575673db2644b153fc"
    ],
    "types": [
        "DoS"
    ]
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-12-01

Affected versions

Other

13

Ecosystem specific 

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/da8ca7555e8ec6c11193280fe656d3a725ecf914",
            "id": "ASB-A-426205822-242fde14",
            "signature_type": "Line",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "176441479915387707227313344909083853787",
                    "166590874105198397400184752317366151185",
                    "142312285236974532748207548786544031864",
                    "224759384226269947634896476210768565128",
                    "273862767101193226214936188826193783458",
                    "128568650583489736071598113486857788458",
                    "46368388901761796622481510279165214212",
                    "172560882202241314215144484613695339854",
                    "273245529857010963395257503193324442747",
                    "12475769459500934221664361078733686918",
                    "267025157395555558592415365185653145256",
                    "278553020777735491722857509097993694220",
                    "246117460154104412709251356387301827344"
                ]
            },
            "deprecated": false
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/da8ca7555e8ec6c11193280fe656d3a725ecf914",
            "id": "ASB-A-426205822-f089264b",
            "signature_type": "Function",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
                "function": "updateNotificationChannelGroupFromPrivilegedListener"
            },
            "digest": {
                "function_hash": "138959303660013668700300678030113879416",
                "length": 255.0
            },
            "deprecated": false
        }
    ],
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/da8ca7555e8ec6c11193280fe656d3a725ecf914"
    ],
    "types": [
        "DoS"
    ]
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-12-01

Affected versions

Other

14

Ecosystem specific 

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/da8ca7555e8ec6c11193280fe656d3a725ecf914",
            "id": "ASB-A-426205822-38dfa836",
            "signature_type": "Line",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "176441479915387707227313344909083853787",
                    "166590874105198397400184752317366151185",
                    "142312285236974532748207548786544031864",
                    "224759384226269947634896476210768565128",
                    "273862767101193226214936188826193783458",
                    "128568650583489736071598113486857788458",
                    "46368388901761796622481510279165214212",
                    "172560882202241314215144484613695339854",
                    "273245529857010963395257503193324442747",
                    "12475769459500934221664361078733686918",
                    "267025157395555558592415365185653145256",
                    "278553020777735491722857509097993694220",
                    "246117460154104412709251356387301827344"
                ]
            },
            "deprecated": false
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/da8ca7555e8ec6c11193280fe656d3a725ecf914",
            "id": "ASB-A-426205822-88d1b52e",
            "signature_type": "Function",
            "target": {
                "file": "services/core/java/com/android/server/notification/NotificationManagerService.java",
                "function": "updateNotificationChannelGroupFromPrivilegedListener"
            },
            "digest": {
                "function_hash": "138959303660013668700300678030113879416",
                "length": 255.0
            },
            "deprecated": false
        }
    ],
    "severity": "High",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/da8ca7555e8ec6c11193280fe656d3a725ecf914"
    ],
    "types": [
        "DoS"
    ]
}