In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/778befd095741a74c44bb4918a62a489db21a960"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"99289647571232510481389812104751965914",
"50051294126976746144821310756638615682",
"21412844261693208389762148924252246198",
"193336673682089301328998255716838246639",
"248967070127580637519481399638066224127",
"328663608048165839616934861231461969752"
],
"threshold": 0.9
},
"id": "ASB-A-503434084-2eeb0a10",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/778befd095741a74c44bb4918a62a489db21a960",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "40576872034152590526321012112743910430",
"length": 1900
},
"id": "ASB-A-503434084-f99d2f79",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/778befd095741a74c44bb4918a62a489db21a960",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java",
"function": "updateNotificationChannel"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/fa35047864a3d2fd942dbfc68bc4300dc157bd13"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "98412343933750007730201275554316344453",
"length": 1913
},
"id": "ASB-A-503434084-4df4c2fb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/fa35047864a3d2fd942dbfc68bc4300dc157bd13",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java",
"function": "updateNotificationChannel"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"99289647571232510481389812104751965914",
"50051294126976746144821310756638615682",
"21412844261693208389762148924252246198",
"193336673682089301328998255716838246639",
"248967070127580637519481399638066224127",
"328663608048165839616934861231461969752"
],
"threshold": 0.9
},
"id": "ASB-A-503434084-d3a8f761",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/fa35047864a3d2fd942dbfc68bc4300dc157bd13",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/5b98f9c946596f2e9727d23842250482e1373cc0"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "187646998218516605980128758778494578736",
"length": 1972
},
"id": "ASB-A-503434084-05676eb9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5b98f9c946596f2e9727d23842250482e1373cc0",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java",
"function": "updateNotificationChannel"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"99289647571232510481389812104751965914",
"50051294126976746144821310756638615682",
"21412844261693208389762148924252246198",
"193336673682089301328998255716838246639",
"248967070127580637519481399638066224127",
"328663608048165839616934861231461969752"
],
"threshold": 0.9
},
"id": "ASB-A-503434084-158f9f46",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5b98f9c946596f2e9727d23842250482e1373cc0",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/4fad0e6dbe9e2519e9665ff5d1c5fca958f83e85"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"99289647571232510481389812104751965914",
"50051294126976746144821310756638615682",
"21412844261693208389762148924252246198",
"193336673682089301328998255716838246639",
"248967070127580637519481399638066224127",
"328663608048165839616934861231461969752"
],
"threshold": 0.9
},
"id": "ASB-A-503434084-4599eb1f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4fad0e6dbe9e2519e9665ff5d1c5fca958f83e85",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "170955458052630401049378895542129874137",
"length": 1958
},
"id": "ASB-A-503434084-533dcaeb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4fad0e6dbe9e2519e9665ff5d1c5fca958f83e85",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java",
"function": "updateNotificationChannel"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/d0df98fe6deeb9dca44575a9fd4ec66360a8cd81"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "29972710228600433142493442158860577637",
"length": 2050
},
"id": "ASB-A-503434084-575c4338",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/d0df98fe6deeb9dca44575a9fd4ec66360a8cd81",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java",
"function": "updateNotificationChannel"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"99289647571232510481389812104751965914",
"50051294126976746144821310756638615682",
"21412844261693208389762148924252246198",
"193336673682089301328998255716838246639",
"248967070127580637519481399638066224127",
"328663608048165839616934861231461969752"
],
"threshold": 0.9
},
"id": "ASB-A-503434084-9146dbca",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/d0df98fe6deeb9dca44575a9fd4ec66360a8cd81",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/db70698d55c4c9230c47334bc3071859b4cfec3d"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"99289647571232510481389812104751965914",
"50051294126976746144821310756638615682",
"21412844261693208389762148924252246198",
"193336673682089301328998255716838246639",
"248967070127580637519481399638066224127",
"328663608048165839616934861231461969752"
],
"threshold": 0.9
},
"id": "ASB-A-503434084-5bb9166d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/db70698d55c4c9230c47334bc3071859b4cfec3d",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "24535744016768166690620379697554231943",
"length": 1661
},
"id": "ASB-A-503434084-ac5815da",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/db70698d55c4c9230c47334bc3071859b4cfec3d",
"target": {
"file": "services/core/java/com/android/server/notification/PreferencesHelper.java",
"function": "updateNotificationChannel"
}
}
]
}