ASB-A-493560718

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-493560718.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-493560718
Aliases
  • A-493560718
  • CVE-2026-59006
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:09Z
Summary
[none]
Details

In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/644d73a56d136376c052d641a72ed295a014be93"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "263822556441911165891610940040250278120",
                    "177267738852610555867912701756373077051",
                    "131896460693630934777011742160500440453",
                    "140523303107324688930089385689509889199",
                    "211497973712615322744943800371285433530",
                    "221947765243074306361954900453473477698",
                    "75482830770596955224240040682167349982",
                    "71553091076309277918679050981398537278"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-493560718-4a47acda",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/644d73a56d136376c052d641a72ed295a014be93",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "229051789775580557622293779305217738901",
                "length":  290
            },
            "id":  "ASB-A-493560718-aa9f9ee2",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/644d73a56d136376c052d641a72ed295a014be93",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java",
                "function":  "getTouchOcclusionMode"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-493560718.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/e25bc4b51c0209373297ae7805326adbcbf1571b"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "3277107837179955311992309284313673426",
                "length":  303
            },
            "id":  "ASB-A-493560718-4202bed3",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e25bc4b51c0209373297ae7805326adbcbf1571b",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java",
                "function":  "getTouchOcclusionMode"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "98602935517539189078796617947873650318",
                    "28857181906792336993849598156285526146",
                    "254415503114804009852746662553596089557",
                    "18796852929389105922886150743408272599",
                    "211497973712615322744943800371285433530",
                    "221947765243074306361954900453473477698",
                    "75482830770596955224240040682167349982",
                    "71553091076309277918679050981398537278"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-493560718-61c16442",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e25bc4b51c0209373297ae7805326adbcbf1571b",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-493560718.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/ce4bfb5202295eb3687249639c1b1f35f317dfd4"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "98602935517539189078796617947873650318",
                    "28857181906792336993849598156285526146",
                    "254415503114804009852746662553596089557",
                    "18796852929389105922886150743408272599",
                    "211497973712615322744943800371285433530",
                    "221947765243074306361954900453473477698",
                    "75482830770596955224240040682167349982",
                    "71553091076309277918679050981398537278"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-493560718-219f70dd",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ce4bfb5202295eb3687249639c1b1f35f317dfd4",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "3277107837179955311992309284313673426",
                "length":  303
            },
            "id":  "ASB-A-493560718-6a3f21f0",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ce4bfb5202295eb3687249639c1b1f35f317dfd4",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java",
                "function":  "getTouchOcclusionMode"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-493560718.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/4eb2a5bf3e78feae10e96f914e9c5ffe7b5cba6f"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "229051789775580557622293779305217738901",
                "length":  290
            },
            "id":  "ASB-A-493560718-22b4fb77",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/4eb2a5bf3e78feae10e96f914e9c5ffe7b5cba6f",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java",
                "function":  "getTouchOcclusionMode"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "263822556441911165891610940040250278120",
                    "177267738852610555867912701756373077051",
                    "131896460693630934777011742160500440453",
                    "140523303107324688930089385689509889199",
                    "211497973712615322744943800371285433530",
                    "221947765243074306361954900453473477698",
                    "75482830770596955224240040682167349982",
                    "71553091076309277918679050981398537278"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-493560718-95ba0743",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/4eb2a5bf3e78feae10e96f914e9c5ffe7b5cba6f",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-493560718.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/2faf32ade6283851a5a09039f5ae44eee1fc1a11"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "229051789775580557622293779305217738901",
                "length":  290
            },
            "id":  "ASB-A-493560718-d6021cfa",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2faf32ade6283851a5a09039f5ae44eee1fc1a11",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java",
                "function":  "getTouchOcclusionMode"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "263822556441911165891610940040250278120",
                    "177267738852610555867912701756373077051",
                    "131896460693630934777011742160500440453",
                    "140523303107324688930089385689509889199",
                    "211497973712615322744943800371285433530",
                    "221947765243074306361954900453473477698",
                    "75482830770596955224240040682167349982",
                    "71553091076309277918679050981398537278"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-493560718-e9e0a80a",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2faf32ade6283851a5a09039f5ae44eee1fc1a11",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-493560718.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/d3081acfa1839dd272648b44ef4a49a6b1ca6e71"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "98602935517539189078796617947873650318",
                    "28857181906792336993849598156285526146",
                    "254415503114804009852746662553596089557",
                    "18796852929389105922886150743408272599",
                    "211497973712615322744943800371285433530",
                    "175940650529954200897150587758129775259",
                    "321831147182538784590087151719046518163",
                    "288224359035068267585245600189131304739"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-493560718-80677974",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d3081acfa1839dd272648b44ef4a49a6b1ca6e71",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "3277107837179955311992309284313673426",
                "length":  303
            },
            "id":  "ASB-A-493560718-fcd04510",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d3081acfa1839dd272648b44ef4a49a6b1ca6e71",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/WindowState.java",
                "function":  "getTouchOcclusionMode"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-493560718.json"