ASB-A-515039372

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-515039372.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-515039372
Aliases
  • A-515039372
  • CVE-2026-59020
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T16:56:17Z
Summary
[none]
Details

In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/611b45aa58842575af3ffd0c34472e5456062900"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "126425639932980190694278468036194095350",
                "length":  1250
            },
            "id":  "ASB-A-515039372-3d74aa86",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/611b45aa58842575af3ffd0c34472e5456062900",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
                "function":  "removeUserData"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "165168640467430886388226037656957897317",
                    "50880485026474538308374416422711841636",
                    "147815404217517744664807740855027829465",
                    "38535671880121685678741155017181609506",
                    "128153700740674493556242300796137275413",
                    "4570648687093258509342379322463136265",
                    "266105426118138197625706661527237411604"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039372-89e3b53a",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/611b45aa58842575af3ffd0c34472e5456062900",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/cfc2067289c2889a3ee337ed9c795c25d3e64988"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "279689369451050949892227746132861982193",
                    "54166194211328152331915335765530258143",
                    "260396818124043402480480425300126587139",
                    "38535671880121685678741155017181609506",
                    "181907461832609495985435846599385801831",
                    "81229708632849856455689085541978401941",
                    "266105426118138197625706661527237411604"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039372-3250bc5b",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/cfc2067289c2889a3ee337ed9c795c25d3e64988",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "69229112094220967687525899126806227665",
                "length":  1098
            },
            "id":  "ASB-A-515039372-e6733e89",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/cfc2067289c2889a3ee337ed9c795c25d3e64988",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
                "function":  "removeUserData"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/7586f394885aa5b2698f284643da23cf35389485"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "69229112094220967687525899126806227665",
                "length":  1098
            },
            "id":  "ASB-A-515039372-1bd98920",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7586f394885aa5b2698f284643da23cf35389485",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
                "function":  "removeUserData"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "279689369451050949892227746132861982193",
                    "54166194211328152331915335765530258143",
                    "260396818124043402480480425300126587139",
                    "38535671880121685678741155017181609506",
                    "181907461832609495985435846599385801831",
                    "81229708632849856455689085541978401941",
                    "266105426118138197625706661527237411604"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039372-4b35bd1d",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7586f394885aa5b2698f284643da23cf35389485",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/14cb8e141a04717df04b6e0a531c219ea3a2f44c"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "69229112094220967687525899126806227665",
                "length":  1098
            },
            "id":  "ASB-A-515039372-436c1c62",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/14cb8e141a04717df04b6e0a531c219ea3a2f44c",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
                "function":  "removeUserData"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "279689369451050949892227746132861982193",
                    "54166194211328152331915335765530258143",
                    "260396818124043402480480425300126587139",
                    "38535671880121685678741155017181609506",
                    "181907461832609495985435846599385801831",
                    "81229708632849856455689085541978401941",
                    "266105426118138197625706661527237411604"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039372-c2a0ae08",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/14cb8e141a04717df04b6e0a531c219ea3a2f44c",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/629308cb257de613f62762d347d1fbadcabef0f3"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "108100418231483064786735388067116526791",
                    "157019653535009063975540659353519104096",
                    "240239521282268889231579938930731900620",
                    "128153700740674493556242300796137275413",
                    "4570648687093258509342379322463136265",
                    "266105426118138197625706661527237411604"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039372-122f4de3",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/629308cb257de613f62762d347d1fbadcabef0f3",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "289059199851183731998078273101334881763",
                "length":  1098
            },
            "id":  "ASB-A-515039372-ea45ccaf",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/629308cb257de613f62762d347d1fbadcabef0f3",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
                "function":  "removeUserData"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/bee7097035fcf60b16dbfea6868976cbab8c8c9e"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "279689369451050949892227746132861982193",
                    "54166194211328152331915335765530258143",
                    "260396818124043402480480425300126587139",
                    "38535671880121685678741155017181609506",
                    "181907461832609495985435846599385801831",
                    "81229708632849856455689085541978401941",
                    "266105426118138197625706661527237411604"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039372-96881ada",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/bee7097035fcf60b16dbfea6868976cbab8c8c9e",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "45497245458525508833498348635079321839",
                "length":  1140
            },
            "id":  "ASB-A-515039372-975383d3",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/bee7097035fcf60b16dbfea6868976cbab8c8c9e",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
                "function":  "removeUserData"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039372.json"