ASB-A-467082881

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-467082881.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-467082881
Aliases
  • A-467082881
  • CVE-2026-0077
Published
2026-06-01T00:00:00Z
Modified
2026-06-12T15:08:17.296522730Z
Summary
[none]
Details

In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-06-01

Affected versions

Other
17-next

Ecosystem specific

{
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-467082881-40a423b7",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "42416893407043339437710779091821531510",
                    "108750182971947963335630359034183535509",
                    "179292043823787497459463469323344968979",
                    "247109158301748321226384833186131981524"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/407d0fcb459d11b1574e1ebe6ccc297a9d00c6b6",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/407d0fcb459d11b1574e1ebe6ccc297a9d00c6b6"
    ],
    "severity": "High"
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-467082881.json"

Android / platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-06-01

Affected versions

Other
16-qpr2

Ecosystem specific

{
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "vanir_signatures": [
        {
            "id": "ASB-A-467082881-5b74c95f",
            "target": {
                "file": "services/core/java/com/android/server/wm/ActivityRecord.java"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "42416893407043339437710779091821531510",
                    "108750182971947963335630359034183535509",
                    "179292043823787497459463469323344968979",
                    "247109158301748321226384833186131981524"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2e95632ce2f16f42a0b0d8c08ddffad49d952b44",
            "signature_version": "v1"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/2e95632ce2f16f42a0b0d8c08ddffad49d952b44"
    ],
    "severity": "High"
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-467082881.json"