ASB-A-515039631

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-515039631.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-515039631
Aliases
  • A-515039631
  • CVE-2026-59021
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:11Z
Summary
[none]
Details

In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981",
        "https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "34659601494023799482677074164532099248",
                "length":  142
            },
            "id":  "ASB-A-515039631-05095ef8",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981",
            "target":  {
                "file":  "core/java/android/app/admin/PackageSetPolicyValue.java",
                "function":  "PackageSetPolicyValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "243368936905742620578513068549026548445",
                    "193110667441231283321476965073360736288",
                    "218099890861778408405069922671975548474",
                    "175126710795153036151242552958750216267",
                    "47901839472414805516038092242920985095",
                    "177801360853088162253520013067887973566",
                    "199489608104889314402184530140110487542",
                    "208484254811162875739360157143140204690"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-0d7177be",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "321763733962275643559118229726044710719",
                    "88684299452946300831045243716602147434",
                    "284036392316726610070016885761603217582",
                    "87793410835511240702531674304976622635",
                    "153799828404160278957079870272178625848",
                    "294170385808985121110335768937967819179",
                    "234298953118864217095220005926070483053",
                    "91514579350714577320962977222088152713",
                    "127966128950204224917871732393106704714"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-1183479b",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "153200294435752143022356277837100581238",
                "length":  318
            },
            "id":  "ASB-A-515039631-19a6ed51",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "267865789664666215397381617537400502970",
                "length":  883
            },
            "id":  "ASB-A-515039631-2df6b0ac",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readPoliciesInner"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "255107048940014734816711678071447957227",
                "length":  527
            },
            "id":  "ASB-A-515039631-6cb06717",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readFromFileLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "231633415161139923264656521787716904812",
                    "269231175529179720030483611474918175209",
                    "102012814968420342914288420277635581331",
                    "93200900556949143228344950415444301051",
                    "318251155983788843045672270729713195027",
                    "209808470815853812058074118283198803459",
                    "6901387035422447823454668606629831614",
                    "330452917664844419508106711146933288917"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-b249f271",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "24882925491811920059342573902720348974",
                "length":  499
            },
            "id":  "ASB-A-515039631-be5c4ec4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "223879276649102080066000130017185689122",
                    "186731316937927884938313802110980124160",
                    "336434658143821611637790727334031677083",
                    "230506368987111576117929438715439876954"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-e7f87647",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981",
            "target":  {
                "file":  "core/java/android/app/admin/PackageSetPolicyValue.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "153200294435752143022356277837100581238",
                "length":  318
            },
            "id":  "ASB-A-515039631-01d6932b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "187157026194315630431998201763619921383",
                    "182832263298963824173254745392698809271",
                    "192993963584580652809094444558050481906",
                    "38162963340999499380158558052648965674",
                    "187157026194315630431998201763619921383",
                    "182832263298963824173254745392698809271",
                    "192993963584580652809094444558050481906",
                    "38162963340999499380158558052648965674"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-5cb45019",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "193110667441231283321476965073360736288",
                    "218099890861778408405069922671975548474",
                    "89176410662035538831963471120198143429",
                    "177453545019551287784859045694315688337",
                    "47901839472414805516038092242920985095",
                    "177801360853088162253520013067887973566",
                    "199489608104889314402184530140110487542",
                    "208484254811162875739360157143140204690"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-8492467c",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "24882925491811920059342573902720348974",
                "length":  499
            },
            "id":  "ASB-A-515039631-8aa21e24",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "144534164702623436067250121223596769952",
                "length":  937
            },
            "id":  "ASB-A-515039631-9894539b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readLocalPoliciesInner"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "324163158959534208134387466465670550070",
                "length":  975
            },
            "id":  "ASB-A-515039631-9f4daa1c",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "231633415161139923264656521787716904812",
                    "269231175529179720030483611474918175209",
                    "102012814968420342914288420277635581331",
                    "93200900556949143228344950415444301051",
                    "120073402124271382827459362158695492376",
                    "223074383736618463708398308823048011759",
                    "97141836362335028432807683536564536345",
                    "233500733453329924917418933405837160610",
                    "172931090354481768446090546326237088084",
                    "97369051588649790311439416251175818075",
                    "145894044510438173439087263382386211606",
                    "255133850560853693888436084716032824664",
                    "93959598156630338415363714976250666289",
                    "319507923336257377973081768716185784660",
                    "263692978228504464328665042866764277219",
                    "89235682808816783233380707645869389968",
                    "336876593598446450658372870250527534403",
                    "227406213994769042072163562326322003508",
                    "318251155983788843045672270729713195027",
                    "209808470815853812058074118283198803459",
                    "284518855258791654270968686466994467280",
                    "52411291727970283365349022538944650986",
                    "332238720723635417512040488880234655190",
                    "185172603390338943979633985220324159275",
                    "265039840649972595120930317926251363348",
                    "116095883250075927567837509947103506028"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-c808d369",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "39109735775204805395828111001558560622",
                "length":  760
            },
            "id":  "ASB-A-515039631-cfd57beb",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readGlobalPoliciesInner"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "136909110875517073025481044960805550267",
                    "126660817896163870841392503732641801492",
                    "128832033368376731957470524280104951011",
                    "17305247469949934761416720454757604726",
                    "257459097651405906017661915543721367607",
                    "300800078245935808160638892561650678457",
                    "57120702040914146305716132267983174489",
                    "101847544470687784754996531978080312430"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-d5c6a332",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921",
        "https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "216022129035601212696996747116777203907",
                "length":  879
            },
            "id":  "ASB-A-515039631-25d7a385",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readPoliciesInner"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "34659601494023799482677074164532099248",
                "length":  142
            },
            "id":  "ASB-A-515039631-2d5e0d53",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921",
            "target":  {
                "file":  "core/java/android/app/admin/PackageSetPolicyValue.java",
                "function":  "PackageSetPolicyValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "255107048940014734816711678071447957227",
                "length":  527
            },
            "id":  "ASB-A-515039631-3bb36e4c",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readFromFileLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "321763733962275643559118229726044710719",
                    "88684299452946300831045243716602147434",
                    "284036392316726610070016885761603217582",
                    "87793410835511240702531674304976622635",
                    "153799828404160278957079870272178625848",
                    "294170385808985121110335768937967819179",
                    "234298953118864217095220005926070483053",
                    "91514579350714577320962977222088152713",
                    "127966128950204224917871732393106704714"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-42ab0e76",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "153200294435752143022356277837100581238",
                "length":  318
            },
            "id":  "ASB-A-515039631-4ac1e05b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "24882925491811920059342573902720348974",
                "length":  499
            },
            "id":  "ASB-A-515039631-6ec2689f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "231633415161139923264656521787716904812",
                    "269231175529179720030483611474918175209",
                    "102012814968420342914288420277635581331",
                    "93200900556949143228344950415444301051",
                    "318251155983788843045672270729713195027",
                    "209808470815853812058074118283198803459",
                    "284518855258791654270968686466994467280",
                    "52411291727970283365349022538944650986"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-83ae8ab3",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "243368936905742620578513068549026548445",
                    "193110667441231283321476965073360736288",
                    "218099890861778408405069922671975548474",
                    "89176410662035538831963471120198143429",
                    "47901839472414805516038092242920985095",
                    "177801360853088162253520013067887973566",
                    "199489608104889314402184530140110487542",
                    "208484254811162875739360157143140204690"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-ba226279",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "223879276649102080066000130017185689122",
                    "186731316937927884938313802110980124160",
                    "336434658143821611637790727334031677083",
                    "230506368987111576117929438715439876954"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-e3e4fef8",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921",
            "target":  {
                "file":  "core/java/android/app/admin/PackageSetPolicyValue.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504",
        "https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "255107048940014734816711678071447957227",
                "length":  527
            },
            "id":  "ASB-A-515039631-0ee58de9",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readFromFileLocked"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "231633415161139923264656521787716904812",
                    "269231175529179720030483611474918175209",
                    "102012814968420342914288420277635581331",
                    "93200900556949143228344950415444301051",
                    "318251155983788843045672270729713195027",
                    "209808470815853812058074118283198803459",
                    "284518855258791654270968686466994467280",
                    "52411291727970283365349022538944650986"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-18afab90",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "34659601494023799482677074164532099248",
                "length":  142
            },
            "id":  "ASB-A-515039631-25ca61a1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504",
            "target":  {
                "file":  "core/java/android/app/admin/PackageSetPolicyValue.java",
                "function":  "PackageSetPolicyValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "24882925491811920059342573902720348974",
                "length":  499
            },
            "id":  "ASB-A-515039631-25f6f843",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "216022129035601212696996747116777203907",
                "length":  879
            },
            "id":  "ASB-A-515039631-5742f2ce",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readPoliciesInner"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "223879276649102080066000130017185689122",
                    "186731316937927884938313802110980124160",
                    "336434658143821611637790727334031677083",
                    "230506368987111576117929438715439876954"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-5a76a2fd",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504",
            "target":  {
                "file":  "core/java/android/app/admin/PackageSetPolicyValue.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "321763733962275643559118229726044710719",
                    "88684299452946300831045243716602147434",
                    "284036392316726610070016885761603217582",
                    "87793410835511240702531674304976622635",
                    "153799828404160278957079870272178625848",
                    "294170385808985121110335768937967819179",
                    "234298953118864217095220005926070483053",
                    "91514579350714577320962977222088152713",
                    "127966128950204224917871732393106704714"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-62bdad56",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "153200294435752143022356277837100581238",
                "length":  318
            },
            "id":  "ASB-A-515039631-c6930f08",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "243368936905742620578513068549026548445",
                    "193110667441231283321476965073360736288",
                    "218099890861778408405069922671975548474",
                    "89176410662035538831963471120198143429",
                    "47901839472414805516038092242920985095",
                    "177801360853088162253520013067887973566",
                    "199489608104889314402184530140110487542",
                    "208484254811162875739360157143140204690"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-e59b9c28",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287",
        "https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "321763733962275643559118229726044710719",
                    "88684299452946300831045243716602147434",
                    "284036392316726610070016885761603217582",
                    "87793410835511240702531674304976622635",
                    "153799828404160278957079870272178625848",
                    "294170385808985121110335768937967819179",
                    "234298953118864217095220005926070483053",
                    "91514579350714577320962977222088152713",
                    "127966128950204224917871732393106704714"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-137cd5fe",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "24882925491811920059342573902720348974",
                "length":  499
            },
            "id":  "ASB-A-515039631-365e621b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "223879276649102080066000130017185689122",
                    "186731316937927884938313802110980124160",
                    "336434658143821611637790727334031677083",
                    "230506368987111576117929438715439876954"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-56d3da4b",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287",
            "target":  {
                "file":  "core/java/android/app/admin/PackageSetPolicyValue.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "243368936905742620578513068549026548445",
                    "193110667441231283321476965073360736288",
                    "218099890861778408405069922671975548474",
                    "89176410662035538831963471120198143429",
                    "47901839472414805516038092242920985095",
                    "177801360853088162253520013067887973566",
                    "199489608104889314402184530140110487542",
                    "208484254811162875739360157143140204690"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-74487d8e",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "34659601494023799482677074164532099248",
                "length":  142
            },
            "id":  "ASB-A-515039631-865a2b2f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287",
            "target":  {
                "file":  "core/java/android/app/admin/PackageSetPolicyValue.java",
                "function":  "PackageSetPolicyValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "231633415161139923264656521787716904812",
                    "269231175529179720030483611474918175209",
                    "102012814968420342914288420277635581331",
                    "93200900556949143228344950415444301051",
                    "318251155983788843045672270729713195027",
                    "209808470815853812058074118283198803459",
                    "284518855258791654270968686466994467280",
                    "52411291727970283365349022538944650986"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-87a84133",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "153200294435752143022356277837100581238",
                "length":  318
            },
            "id":  "ASB-A-515039631-a378e6f6",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "267865789664666215397381617537400502970",
                "length":  883
            },
            "id":  "ASB-A-515039631-ddf5c6ea",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readPoliciesInner"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "255107048940014734816711678071447957227",
                "length":  527
            },
            "id":  "ASB-A-515039631-e3111737",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readFromFileLocked"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "138029899568404744415543479903625660347",
                    "277777175013285069235910967327133168094",
                    "136909110875517073025481044960805550267",
                    "126660817896163870841392503732641801492",
                    "190685045329720459263675054739054705658",
                    "36137412102058834940740934970615629155",
                    "257459097651405906017661915543721367607",
                    "300800078245935808160638892561650678457",
                    "57120702040914146305716132267983174489",
                    "101847544470687784754996531978080312430"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-07eb5391",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "243368936905742620578513068549026548445",
                    "193110667441231283321476965073360736288",
                    "218099890861778408405069922671975548474",
                    "67480142918158156442938324893534754062",
                    "137526687686617424346282555211034340633",
                    "13497933271433295118353315498593234847",
                    "204505103211176356857187152675616360188",
                    "6044358487019089186287254600581253562"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-1465977b",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/StringSetPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "187157026194315630431998201763619921383",
                    "182832263298963824173254745392698809271",
                    "192993963584580652809094444558050481906",
                    "38162963340999499380158558052648965674",
                    "187157026194315630431998201763619921383",
                    "182832263298963824173254745392698809271",
                    "192993963584580652809094444558050481906",
                    "38162963340999499380158558052648965674"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-2c2ee9a3",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "231633415161139923264656521787716904812",
                    "269231175529179720030483611474918175209",
                    "102012814968420342914288420277635581331",
                    "93200900556949143228344950415444301051",
                    "318251155983788843045672270729713195027",
                    "209808470815853812058074118283198803459",
                    "284518855258791654270968686466994467280",
                    "52411291727970283365349022538944650986"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-515039631-3acdd7fb",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "324163158959534208134387466465670550070",
                "length":  975
            },
            "id":  "ASB-A-515039631-49cd9da8",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "39109735775204805395828111001558560622",
                "length":  760
            },
            "id":  "ASB-A-515039631-8588e3ba",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readGlobalPoliciesInner"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "144534164702623436067250121223596769952",
                "length":  937
            },
            "id":  "ASB-A-515039631-8df320db",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
                "function":  "readLocalPoliciesInner"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "24882925491811920059342573902720348974",
                "length":  499
            },
            "id":  "ASB-A-515039631-b54f8d21",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java",
                "function":  "readFromXml"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "280582108248251692340338970090482519872",
                "length":  317
            },
            "id":  "ASB-A-515039631-c70c1684",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a",
            "target":  {
                "file":  "services/devicepolicy/java/com/android/server/devicepolicy/StringSetPolicySerializer.java",
                "function":  "readFromXml"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"